Investigations

HEEBOO is a Solana-based entertainment launchpad and parent company to the Claynosaurz NFT brand, operating under the legal entity HEEBOO GROUP Inc. (a Delaware corporation). The project launched a fair-sale ecosystem token ($HEEBOO) on Solana in 2026 and has secured a content deal with Amazon Prime Video for a Claynosaurz animated series. While the project has a credible creative team and verifiable mainstream partnerships, the $HEEBOO token sale raised standard risk flags around the absence of a published smart-contract audit and a 12.5% treasury allocation that is fully unlocked at the token generation event.

Euler Finance is an Ethereum-based non-custodial lending protocol founded in 2020 by Michael Bentley (PhD, Oxford) that pioneered permissionless lending for long-tail ERC-20 assets. On March 13, 2023, the protocol suffered a ~$197 million flash loan exploit — the largest DeFi hack of 2023 — caused by a missing health check in the donateToReserves() function. In an unusual outcome, the attacker, who communicated under the alias 'Jacob,' returned approximately $240 million in assets (including ETH price appreciation) over three weeks following on-chain negotiations, enabling full user restitution. The protocol relaunched as Euler V2 in September 2024 with a modular architecture, 45+ security audits, and subsequently grew TVL to over $1.5 billion by early 2025.

On August 10, 2026, Trezor disclosed that its third-party fulfillment partner ShipMonk suffered a data breach that exposed personal data for 13,689 hardware wallet customers, including names, email addresses, phone numbers, and home shipping addresses. The breach originated from an unpatched critical SQL injection vulnerability (CVE-2026-72898) in Metabase, a business-intelligence tool used by ShipMonk. Trezor's own systems, hardware wallet firmware, and customer private keys were not affected, but the exposure of verified hardware wallet owner home addresses raises direct physical safety concerns given a documented surge in violent crypto-targeted home invasions in 2026.

No verifiable information about a cryptocurrency project, token, memecoin, or NFT collection named 'Ottersex' was found across public web sources, blockchain explorers, or market data aggregators as of September 2026. The entity may be an extremely obscure micro-cap or short-lived token that has left no indexed trace, or the name may be a variant spelling of another project. No risk signals, team information, or community activity could be confirmed.

Gala Games is a blockchain gaming platform founded in 2019 by Eric Schiermeyer (co-founder of Zynga) and Wright Thurston, issuing the GALA utility and governance token. The company has been beset by a high-profile inter-founder legal dispute alleging $130 million in token theft, a May 2024 smart contract exploit in which 5 billion GALA tokens worth approximately $200–240 million were minted by a compromised admin wallet, and co-founder Wright Thurston's prior SEC lawsuit over an unrelated $18 million unregistered securities offering. These compounding governance failures, security incidents, and legal controversies place the platform among the more heavily scrutinized projects in the blockchain gaming sector.

SuperRare is a curated Ethereum-based NFT art marketplace founded in 2018 by John Crain, Charles Crain, and Jonathan Perkins, operating as a high-end platform for 1-of-1 digital artworks with its own governance token RARE. On July 28, 2025, a critical access control vulnerability in the platform's RareStakingV1 staking contract was exploited, resulting in the theft of approximately 11.9 million RARE tokens worth roughly $731,000. SuperRare subsequently reimbursed the 61 affected wallets by August 5, 2025, and the RARE token recovered approximately 41% following the remediation announcement.

Yearn Finance is a decentralized yield aggregator on Ethereum that routes user deposits into lending protocols to maximize returns. Founded by Andre Cronje in 2020, the protocol has suffered at least four documented security exploits between 2021 and 2025, with aggregate losses exceeding $20 million, and its founder departed in 2022 citing sustained pressure from an SEC investigation. Governance concerns, an interconnected web of affiliated DeFi protocols implicated in their own major hacks, and repeated failures to deprecate vulnerable legacy code compound the protocol's risk profile.

Curve LlamaLend (also referred to as the crvUSD lending markets) is a decentralized, permissionless isolated lending protocol built by Curve Finance that allows users to borrow crvUSD against crypto collateral using the LLAMMA soft-liquidation mechanism. The protocol has experienced multiple distinct incidents since launch: a $10 million bad-debt event in June 2024 tied to the founder's oversized leveraged positions, an oracle-manipulation attack on the sDOLA market in March 2026 resulting in approximately $240,000 in borrower losses, an October 2025 market crash that left the CRV-long vault approximately $700,000 underbacked, and a May 2026 third-party exploit (Stake DAO) that forced the sunsetting of an associated Arbitrum LlamaLend market. The protocol's core contracts have not been directly compromised by a code-level hack, but recurring bad-debt events, oracle design flaws in permissionlessly created markets, and governance concentration risks have drawn sustained scrutiny including a flag from on-chain investigator ZachXBT.

LCX Exchange (Liechtenstein Cryptoassets Exchange) is a regulated crypto trading platform incorporated in Liechtenstein and registered with the country's Financial Market Authority (FMA). On January 8, 2022, the exchange suffered a hot wallet compromise resulting in the theft of approximately $6.8–7.94 million in various cryptocurrencies; LCX subsequently covered all user losses from company funds and cooperated with multi-jurisdictional law enforcement, ultimately freezing approximately 60% of stolen assets. As of 2024–2025, LCX remains operational, holds multiple licenses under the Liechtenstein Blockchain Act (TVTG), and has filed a pre-application for a pan-European MiCA license.

Balancer is a decentralized automated market maker (AMM) protocol on Ethereum, founded in 2018 by Fernando Martinelli and Mike McDonald, that allows multi-token liquidity pools with customizable weighting. The protocol has suffered six documented security incidents between 2020 and 2025, resulting in cumulative losses exceeding $140 million, including a catastrophic $128 million exploit in November 2025 caused by an arithmetic precision flaw in Composable Stable Pool contracts. Despite multiple audits by major firms including Trail of Bits, OpenZeppelin, and Certora, systemic smart contract vulnerabilities and a highly complex protocol architecture have repeatedly exposed user funds to loss.

LCX (Liechtenstein Cryptoassets Exchange) is a regulated crypto exchange and tokenization platform headquartered in Vaduz, Liechtenstein, holding eight registrations under the Liechtenstein Financial Market Authority (FMA) pursuant to the Token and Trusted Technology Service Provider Act (TVTG). In January 2022 the exchange suffered a hot wallet compromise in which approximately $7.94 million in crypto assets were stolen, with stolen funds rapidly laundered through Tornado Cash; LCX subsequently used its own funds to compensate affected users and cooperated with international law enforcement to freeze an alleged 60% of stolen assets. The exchange is flagged by ZachXBT and carries a below-average trust score primarily due to the 2022 hack, ongoing user complaints about withdrawal delays and account freezes, and the broader security posture concerns that led to the compromise.

Bungee Exchange is a cross-chain bridge aggregator and liquidity routing protocol developed by Socket (formerly SocketDotTech), founded in 2021 by Vaibhav Chellani and Rishabh Khurana. On January 16, 2024, the underlying Socket infrastructure was exploited via an inadequately validated smart contract route, resulting in approximately $3.3 million stolen from roughly 700 wallets with infinite token approvals. The protocol recovered approximately $2.23 million of the stolen funds one week later and resumed operations; it remains active as of 2026.

Lava (lavadefi.io) is a decentralized, non-custodial multichain lending and borrowing protocol deployed on Arbitrum and Base, operating since March 2024. The protocol suffered two documented exploit incidents in 2024 totaling approximately $470,000 in losses, both rooted in protocol logic vulnerabilities and flash loan abuse. The platform was flagged by on-chain investigator ZachXBT, and separately the lava.xyz Bitcoin lending product drew significant backlash in late 2025 after quietly switching users from a self-custodial DLC-based model to a fully custodial setup without adequate disclosure.

Alchemix Finance is an Ethereum-based DeFi protocol that offers self-repaying loans, allowing users to deposit yield-bearing collateral and borrow synthetic assets whose debt is automatically paid down by the underlying yield. The protocol has experienced several notable security incidents since its February 2021 launch, including a June 2021 alETH transmuter bug (~2,700 ETH overclaimed), and a July 2023 Curve pool exploit (~$20M stolen and subsequently fully returned). Alchemix has maintained operational continuity through each incident and continues to develop a V3 upgrade with an active Immunefi bug bounty program.

Agave was a decentralized lending protocol on Gnosis Chain forked from Aave v2, developed by members of the 1Hive community. On March 15, 2022, the protocol suffered a reentrancy exploit that drained approximately $5.5 million in user funds, part of a coordinated $11.7 million attack that simultaneously hit Hundred Finance. The protocol paused operations following the hack and formally closed down in March 2024 with no documented user compensation.

Audius is a decentralized music streaming protocol and its native AUDIO token, launched in 2020 on Ethereum and subsequently migrated to Solana. On July 23, 2022, an attacker exploited a critical re-initialization vulnerability in Audius governance smart contracts, draining 18.56 million AUDIO tokens (valued at approximately $6 million at the time) from the community treasury before swapping them for approximately $1.08 million in ETH via Uniswap and routing funds through Tornado Cash. The platform has continued to operate since the exploit, deploying patched contracts and expanding user and artist partnerships, but the AUDIO token has declined approximately 99.6% from its all-time high and the exploit raised serious questions about audit quality.

Ankr is a Web3 infrastructure and liquid staking protocol founded in 2017, providing RPC endpoints for over 75 blockchains and BNB Chain-based liquid staking products. In December 2022, a former employee executed a supply chain attack that compromised Ankr's private deployer key, enabling unlimited minting of aBNBc tokens and resulting in approximately $5 million in direct losses, with cascading secondary losses of roughly $19 million through Helio Protocol's HAY stablecoin depeg. Ankr subsequently compensated affected users, implemented multi-signature controls, and continues to operate, though questions persist over the completeness of user reimbursement.

Sonne Finance is a Compound V2 fork deployed on Optimism that was exploited for approximately $20 million on May 14, 2024, in what became the largest exploit in Optimism's history. The attack exploited a well-known precision-loss donation vulnerability in Compound V2 forks, triggered during the rollout of a new VELO token market; the attacker leveraged a multi-transaction deployment architecture and a two-day timelock window to manipulate exchange rates and drain user funds.

Usual is a Paris-based DeFi stablecoin protocol founded in 2022 by former French politician Pierre Person and co-founders Adli Takkal Bataille and Hugo Salle de Chou. The protocol issues USD0, a stablecoin collateralized by tokenized US Treasury Bills, alongside USD0++, a four-year locked bond derivative that suffered a significant depeg event in January 2025 after the team unilaterally changed redemption rules without adequate community notice. A smart contract arbitrage exploit was also detected and paused in May 2025, and USD0++ tokens were stolen in an unrelated third-party hack of Zoth Protocol in March 2025.

Cozy V2 is a DeFi protection marketplace deployed on Optimism that allows users to buy or provide protection against smart contract hacks, depegs, and other on-chain risks. On August 29, 2025, the protocol suffered a $427,000 exploit caused by a missing caller verification check in its withdrawal logic, with funds subsequently bridged to Ethereum mainnet and deposited into Tornado Cash. The incident is notable for its irony: a protocol designed to insure against DeFi hacks was itself hacked through a preventable authorization flaw.

Aave V3 is the third major iteration of the Aave decentralized lending protocol, one of the largest in DeFi with over $14 billion in total value locked across 21 chains as of May 2026. The protocol's core smart contracts have not been directly exploited; however, in April 2026, a $292 million bridge exploit targeting integrated asset KelpDAO's rsETH generated significant bad debt on Aave V3 markets, an event flagged by on-chain investigator ZachXBT. The protocol demonstrated institutional resilience by coordinating a cross-industry recovery fund (DeFi United) that ultimately raised over $327 million, with full rsETH operations restored by May 25, 2026.

Flow is a layer-1 proof-of-stake blockchain created by Dapper Labs, the company behind NBA Top Shot and CryptoKitties, with FLOW as its native token. The project has faced a serious 2025 protocol-level exploit ($3.9M stolen), a controversial rollback proposal that drew community backlash, multiple rounds of company layoffs, a $4M securities class-action settlement, a separate $7.05M privacy lawsuit settlement, SEC investigation, and delisting from major South Korean exchanges following the breach. The FLOW token has lost over 99% of value from its April 2021 all-time high of $46.16, trading near $0.033 as of mid-2026.

Socket Protocol (also marketed as Bungee Exchange) is a cross-chain interoperability and liquidity-routing protocol founded in 2021 by Vaibhav Chellani and Rishabh Khurana. On January 16, 2024, a newly deployed route module containing an unvalidated calldata vulnerability was exploited, draining approximately $3.3 million from approximately 230 wallets that had granted infinite token approvals to the SocketGateway contract. In an unusual outcome for a DeFi exploit, Socket negotiated the return of 1,032 ETH (~$2.3 million) from the attacker and covered the remaining ~$1.1 million shortfall itself, making all affected users whole.

SushiSwap is a decentralized exchange (DEX) and DeFi protocol launched in August 2020 as a fork of Uniswap, offering an automated market maker (AMM), governance token (SUSHI), and multi-chain liquidity pools. The protocol has endured a series of serious controversies spanning its entire history: a founding exit-scam attempt by anonymous creator Chef Nomi, early operational control handed to convicted fraudster Sam Bankman-Fried, an SEC subpoena issued to the protocol and its CEO in 2023, a $3.3 million smart contract exploit the same year, allegations that North Korean IT workers were embedded in its developer team, disputed DAO treasury centralization in 2024, and a governance process in late 2025 where a single wallet controlled 99.9% of a vote. TVL has declined approximately 98.7% from its 2022 peak of over $8 billion to roughly $100 million as of late 2025.

Loopring is an Ethereum Layer-2 zkRollup-based decentralized exchange protocol founded in 2017 by Daniel Wang. The protocol suffered a critical June 2024 security breach in which an attacker compromised the Official Guardian two-factor authentication server, draining approximately $5 million from 58 smart wallet accounts. Subsequent to the hack, Loopring wound down its consumer wallet product, shut down DeFi services, lost listings on major exchanges including Binance, Upbit, and Bithumb, and saw its CEO resign in August 2025, leaving the project's long-term viability in serious question.

Tectonic is a decentralized money market protocol on the Cronos blockchain, operating as a fork of Compound, that allows users to lend and borrow cryptocurrency assets. Launched in December 2021 by Gary Or (former CTO of Crypto.com) and incubated by Particle B and Cronos Labs, the protocol reached approximately $1 billion TVL at peak in early 2022 before collapsing over 95% alongside the broader crypto bear market. A disclosed reentrancy vulnerability in the staking contract was reported in March 2024 allowing potential extraction of millions in a single transaction, and a separate flash loan exploit in February 2024 resulted in approximately $250,000 in losses.

DMM Bitcoin was a licensed Japanese cryptocurrency exchange operated by DMM Group (DMM.com) that launched in January 2018. In May 2024 it suffered the eighth-largest crypto theft in history when North Korean state-sponsored hackers attributed to the TraderTraitor subgroup of Lazarus Group stole 4,502.9 BTC (approximately $305–308 million USD) through a sophisticated supply-chain attack targeting Ginco, a third-party wallet management provider. Following the hack, Japan's Financial Services Agency issued a business improvement order, the exchange restricted operations, and in December 2024 announced full closure with all customer assets transferred to SBI VC Trade by March 2025.

ZKsync is an Ethereum Layer 2 scaling protocol built on zero-knowledge rollup technology, developed by Matter Labs, which has raised approximately $458 million in venture capital. The protocol has faced multiple significant controversies including a $5 million airdrop contract exploit in April 2025, a contentious 2024 token airdrop marred by sybil attack failures and community backlash, a South Korean regulatory probe into alleged price manipulation, compromised social media accounts spreading false SEC investigation claims, and an intellectual property theft lawsuit filed against Matter Labs by defunct firm BANKEX. User funds in the core protocol have not been directly compromised, but the pattern of incidents has substantially eroded community trust.

Hacken Token (HAI) is the native utility token of Hacken, a Ukrainian-founded Web3 cybersecurity company established in 2017 that audits smart contracts and blockchain infrastructure for over 1,500 clients worldwide. In June 2025, a private key controlling HAI minting privileges was compromised during a bridge infrastructure migration, allowing an attacker to mint approximately 900 million tokens and dump roughly $253,000 worth on decentralized exchanges, causing a near-99% price collapse. The incident drew industry-wide attention due to its irony — a company whose business model is built on securing others' blockchain infrastructure had maintained a single-key minting architecture for over five years without multisig protection.

Silo Finance V1 is a non-custodial isolated lending protocol launched on Ethereum mainnet in August 2022, enabling permissionless markets for long-tail crypto assets by confining risk to individual lending pools (Silos). The protocol experienced two security incidents in 2023: a critical interest rate manipulation vulnerability discovered by a white-hat researcher (no user funds lost) and a white-hat drain of approximately $45,000 in SILO incentive tokens due to a separate contract flaw. The deployed production version of V1 diverges from the audited codebase, a risk the team has publicly acknowledged but not fully remediated through re-audit.

YO Protocol (yo.xyz), operated by YO Labs, is a San Francisco-based multi-chain DeFi yield optimization protocol founded by former Uber and Amazon executives and backed by Paradigm, Coinbase Ventures, and Foundation Capital with $24 million in total funding. Independent security research published in September 2025 identified significant centralization risks, MEV attack vectors, and EIP-4626 compliance gaps that existing audits had not fully addressed. No hacks, exploits, or regulatory actions have been publicly confirmed against the protocol; a claimed ZachXBT flag has not been corroborated by any findable public source as of May 2026.

DIMO (Decentralized Infrastructure for Mobility Operations) is a Web3 vehicle data protocol built on Polygon and later migrating to Base, developed by Digital Infrastructure Inc. The protocol allows drivers to connect their vehicles, stream data, and earn $DIMO tokens in exchange. In November 2025, a sophisticated attacker compromised a developer key and withdrew approximately 30 million DIMO tokens (3% of total supply) from a Wormhole bridge contract, causing a price drop of over 57% in 30 days and triggering a CertiK security alert. The project has legitimate venture backing and a publicly identified founding team, but the security incident, centralized key management failure, and ongoing token unlock pressure are material risk factors.

Maestro is a Telegram-based crypto trading bot developed by Gearlay Technologies Inc. (Canada) that enables sniping, copy-trading, and wallet management across 14 blockchains. On October 24, 2023, a critical access-control vulnerability in its MaestroRouter2 smart contract was exploited, draining approximately 280 ETH (~$500,000) from 106 user accounts; the team subsequently refunded all affected users with 610 ETH (~$1.1 million) sourced from its own revenue. The platform operates a partial-custody model in which user private keys are encrypted and stored on Maestro servers, representing a persistent systemic risk.

Unibot is a Telegram-based cryptocurrency trading bot launched in May 2023 that enables users to trade on Uniswap and other decentralized exchanges directly within Telegram. On October 31, 2023, Unibot suffered a smart contract router exploit in which approximately $560,000–$640,000 in user tokens were stolen by an external attacker; the team subsequently reimbursed affected users. The platform operates with an anonymous founding team and involves inherent custodial risks because the bot manages user wallet interactions.

Ambient Finance (formerly CrocSwap, operated by Crocodile Labs) is a decentralized exchange protocol that runs an entire DEX inside a single smart contract, combining concentrated and ambient liquidity on Ethereum and several L2 networks. On October 17, 2024, the protocol's frontend suffered a DNS hijacking attack deploying Inferno Drainer malware to drain wallets of users who interacted with the compromised site; the underlying smart contracts were unaffected and the team reimbursed all affected users in ETH. ZachXBT has flagged this entity.

Raga Finance is a DeFi yield optimization protocol launched in 2024 and deployed on Berachain and Hyperliquid, offering automated cross-chain vaults for earning yield on ETH, BTC, and stablecoins. A pre-launch security audit by QuillAudits uncovered 16 smart contract vulnerabilities — including critical flaws enabling permanent loss of user funds, a non-functional emergency panic function, and an open-access vault address setter — constituting the protocol logic incident flagged for review. The protocol has been flagged by ZachXBT, and while the development team reportedly remediated all identified vulnerabilities, the severity and breadth of pre-launch flaws raise meaningful questions about engineering process and ongoing risk.

DGLD (Digital Gold Token) is a physically-backed gold token originally launched in October 2019 by a consortium of CoinShares, Blockchain.com, and MKS PAMP SA on CommerceBlock's Ocean Bitcoin sidechain. The project went dormant by 2020 due to liquidity failure and market under-adoption, and the underlying infrastructure provider CommerceBlock later shut down entirely. MKS PAMP relaunched DGLD in late 2025 under full ownership of Gold Token SA, migrating to Ethereum and Base — but significant jurisdictional restrictions, minimal liquidity, contractual liability exclusions, and the project's history of abandonment remain concerns.

Silo V2 is a non-custodial, permissionless isolated lending market protocol operating across Ethereum, Arbitrum, Base, Optimism, and Sonic. On June 25, 2025, an unreleased peripheral leverage contract was exploited for approximately $545,000 (224 ETH) belonging to SiloDAO test funds; the team confirmed that all core markets and user deposits were unaffected. The incident revealed inadequate input validation and absent formal verification on pre-release code that had been deployed to mainnet, and the attacker subsequently laundered the stolen ETH through Tornado Cash.

0G Labs (Zero Gravity Labs) is a Web3 AI infrastructure company building a modular, AI-first layer-1 blockchain and decentralized AI operating system, having raised $325 million across multiple funding rounds since March 2024. The project has faced a protocol-level smart contract exploit in December 2025 ($516K lost), a separate compromise of its official social media account in October 2025, and significant community criticism over alleged funding misrepresentation, undisclosed insider token allocations, and concerns that two co-founders departing from Conflux Network constituted a reputational 'soft rug' of that project. No regulatory actions have been identified as of May 2026.

Zerion is a non-custodial DeFi portfolio tracker and multi-chain wallet founded in 2016, supporting 50+ blockchains including Ethereum and Solana. The platform has experienced multiple security incidents over its history, including a 2026 social engineering attack attributed to North Korean threat actors that resulted in approximately $100,000 in company internal wallet losses, though user funds were unaffected in each incident. Zerion also shut down its ZERO Layer-2 network in May 2026 after 1.5 years due to low adoption, with assets bridgeable until July 31, 2026.

Spectral Labs (spectrallabs.xyz) is a U.S.-based Web3 protocol founded in 2021 that pivoted from an on-chain credit scoring product (MACRO Score) to an autonomous AI agent economy platform. The project has raised approximately $30 million from institutional investors including General Catalyst, Social Capital, and Jump Capital. Its governance token SPEC reached an all-time high of approximately $18.48 in November 2024 before collapsing more than 99% to under $0.10 by mid-2026, with Bybit delisting the token from both spot and futures markets, raising significant concerns around tokenomics, unlock-driven selling pressure, and product-market fit.

Hedera is a public distributed ledger technology platform using a patented hashgraph consensus mechanism, launched to mainnet in September 2019. In March 2023, the network suffered a protocol-level exploit in its Smart Contract Service that drained approximately $600,000 in liquidity pool tokens from three decentralized exchanges, requiring a full mainnet proxy shutdown for 41 hours. The platform operates under a council governance model comprising up to 39 global enterprises, which provides institutional stability but draws criticism for centralization relative to permissionless blockchains.

SwissBorg is a Swiss-based crypto wealth management and exchange aggregator founded in 2017, holding MiCA authorization from France's AMF and VQF membership in Switzerland. In September 2025, the platform suffered a $41.5 million loss when its staking partner Kiln's API was compromised via a GitHub token theft and Kubernetes pod injection, resulting in the unauthorized transfer of 192,600 SOL from SwissBorg's SOL Earn program; the company subsequently pledged full reimbursement from treasury funds. While SwissBorg maintains legitimate regulatory standing and transparency measures including Proof of Liabilities, the third-party supply chain failure exposes material counterparty risk in its Earn product architecture.

Yearn Ether (yETH) is a liquid staking token aggregation vault developed by Yearn Finance, launched under YIP-72 as a self-governed, permissionless product. On November 30, 2025, the yETH weighted stableswap pool was exploited via an arithmetic underflow and stale cache vulnerability, resulting in approximately $9 million in losses — the third major security incident involving a Yearn product since 2021. Approximately $2.4 million was partially recovered; roughly $6.6 million remains unrecovered, with a significant portion laundered through Tornado Cash.

Fusion by IPOR is a modular on-chain vault infrastructure product developed by IPOR Labs AG (Zug, Switzerland), designed to automate DeFi yield strategies across multiple chains without requiring Solidity expertise. On January 6, 2026, a legacy Fusion Optimizer Vault on Arbitrum was exploited for $336,000 USDC via a combination of missing fuse validation in the instantWithdraw method and an EIP-7702 delegation vulnerability on an administrator account. The IPOR DAO committed to fully compensating all affected depositors from treasury reserves, and the incident was flagged by blockchain investigator ZachXBT.

Alchemix V2 is a DeFi self-repaying loan protocol on Ethereum that allows users to borrow synthetic assets (alUSD, alETH) against yield-bearing collateral, with loans auto-repaid by yield generated from underlying deposits. The protocol experienced two notable security incidents: a June 2021 smart contract bug in the alETH vault that allowed users to withdraw collateral without repaying loans (the 'reverse rug pull,' ~$6.5M shortfall), and an indirect July 2023 exploit via a Vyper compiler vulnerability in a Curve liquidity pool (~$13.6M drained, later fully returned). In both cases, the Alchemix team responded promptly and took active steps to restore protocol solvency, distinguishing it from many exploited DeFi protocols.

Ronin Bridge is the cross-chain bridge that connected the Axie Infinity gaming ecosystem's Ronin sidechain to Ethereum, operated by Sky Mavis. In March 2022 it suffered the largest DeFi hack in history at the time — $625 million in ETH and USDC stolen by North Korea's Lazarus Group via compromised validator private keys obtained through social engineering. A second, smaller exploit occurred in August 2024. The legacy bridge was deprecated in April 2025 and migrated to Chainlink CCIP infrastructure.

Upbit is South Korea's largest cryptocurrency exchange by trading volume, operated by Dunamu and commanding approximately 70–80% of the domestic market. The exchange has suffered two significant security breaches — a $49M ETH theft in 2019 and a $36M Solana breach in November 2025, both attributed to North Korea's Lazarus Group — and has faced substantial regulatory sanctions including a $25M AML/KYC fine and a court-contested three-month partial business suspension. While Upbit has consistently reimbursed users from its own assets after security incidents and retains official VASP registration, its pattern of compliance failures, market dominance concerns, and repeated hacks present elevated risk.

Bitget is a Seychelles-incorporated centralized cryptocurrency exchange founded in 2018, offering spot, futures, and copy trading to a claimed user base exceeding 150 million. While the exchange has never suffered a direct hack of user funds and publishes monthly proof-of-reserves attestations, it faces a pattern of serious regulatory actions across multiple jurisdictions — including blacklisting by France's AMF, warnings from Australia's ASIC and Japan's FSA, and a ban by the Philippines SEC — and has attracted allegations from blockchain investigator ZachXBT that it knowingly enabled supply-control market manipulation schemes targeting retail traders in 2026.

Gondi V3 is a decentralized, non-custodial NFT lending and borrowing protocol on Ethereum developed by Florida Street, which launched in July 2023 and raised a $5.35 million seed round from Hack.vc, Dragonfly Capital, and Pantera Capital. On March 9, 2026, the protocol suffered a smart contract exploit in its newly deployed Purchase Bundler component, resulting in the theft of approximately 78 NFTs valued at roughly $230,000 from users who had granted approvals to the vulnerable contract. The team disabled the affected feature, pledged full restitution using protocol fees, and engaged security firm Blockaid for a post-incident review; platform operations for other functions resumed the following day.

Peapods Finance is a permissionless DeFi protocol on Ethereum and multiple EVM chains that pioneered a 'Volatility Farming' yield mechanism using asset-backed Pods and Leveraged Volatility Farming (LVF). The protocol has suffered three distinct security incidents since its December 2023 launch, including a $231K reentrancy exploit, a slippage manipulation attack, and a $200K oracle price manipulation attack in July 2025. On-chain investigator ZachXBT identified that the individual behind the initial 2023 'white hat' exploit had dumped a portion of stolen funds before returning the remainder, raising questions about the altruistic framing of that recovery.

Kevin Rose is an American internet entrepreneur, venture investor, and co-founder of the PROOF Collective and Moonbirds NFT project. On January 25, 2023, Rose was the victim of a sophisticated spear-phishing attack in which he was socially engineered into signing a malicious transaction, resulting in the theft of approximately 40 NFTs valued at an estimated $1.09–$1.5 million USD from his personal krovault.eth wallet. Rose is categorized as a victim of crypto fraud, not a perpetrator; the incident is notable for illustrating signature-based approval risks in NFT marketplaces.

Keep3r Network (KP3R) is a decentralized keeper-job matching protocol launched in October 2020 by Andre Cronje, the creator of Yearn Finance. The protocol has experienced multiple security incidents including a $211k exploit in June 2023, a latent two-year-old vulnerability in its GaugeProxyV2 contract discovered in September 2022, and its oracle was implicated in the $15.6M Inverse Finance hack of April 2022. ZachXBT has flagged the protocol in the context of broader DeFi security concerns, and the project has been surrounded by scam forks, impersonator accounts, and fraudulent staking services operated by unaffiliated parties.

Zabu Finance was an Avalanche-based yield farming protocol that suffered a $3.2 million flash loan exploit on September 12, 2021, marking what was widely described as the first major DeFi hack on the Avalanche blockchain. The vulnerability — a known deflationary token accounting flaw that had already been exploited on Polygon two months prior — drained the protocol's SPORE staking pool and caused the ZABU token to collapse from approximately $0.004 to near-zero. The protocol attempted a v2 token relaunch but has since gone effectively dormant, with a TVL of approximately $5,000 and a website SSL certificate that expired in August 2022.

Allbridge Core is a cross-chain stablecoin bridge protocol operating across EVM-compatible chains, Solana, Tron, and Stellar. On April 1-2, 2023, the protocol suffered a flash loan price-manipulation exploit on BNB Chain that drained approximately $570,000 from its BUSD and USDT liquidity pools. The attacker was subsequently identified via on-chain analysis by BNB Chain and AvengerDAO, and ultimately returned roughly $465,000 of the stolen funds after Allbridge offered a white hat bounty with immunity from legal action.

KyberSwap is a multi-chain decentralized exchange aggregator and concentrated liquidity protocol operated by Kyber Network. On November 22, 2023, its Elastic liquidity pool contracts were exploited via a sophisticated tick-manipulation and liquidity double-counting attack, resulting in approximately $48.8 million in losses across 13 chains. The alleged attacker, Canadian national Andean Medjedovic, subsequently attempted to extort full corporate and governance control of Kyber Network in exchange for returning 50% of stolen funds; he was indicted by the U.S. Department of Justice in February 2025 and remains a fugitive.

Tinyman is an automated market maker (AMM) and decentralized exchange (DEX) built on the Algorand blockchain, launched on mainnet in October 2021. On January 1, 2022, attackers exploited a logic flaw in the protocol's pool-token burn function to drain approximately $3 million in wrapped Bitcoin and Ethereum assets across 43 pools. Tinyman subsequently patched the contracts, launched a compensation program covering all affected liquidity providers, and released a fully re-audited v2.0 protocol in early 2023.

Coinsbuy is a cryptocurrency processing exchange primarily serving business clients, offering payment processing and wallet services across 25+ digital assets. On August 9, 2026, the platform suffered a coordinated cross-chain attack across Ethereum and TRON that drained approximately $8.07 million in USDT and ETH from eleven hot wallets in under one hour. Coinsbuy stated it absorbed the losses from its own reserves, covering all affected client funds, and offered a $100,000 bounty for identifying the attackers.

USX is a Solana-native synthetic stablecoin issued by Solstice Finance, a DeFi protocol incubated by Deus X Capital, a $1 billion institutional digital-asset investment firm. Launched on September 30, 2025 with $160 million in TVL, USX is backed 1:1 by a diversified reserve of USDC, USDT, tokenized Treasuries, and delta-neutral hedged positions, with reserves attested in real time via Chainlink and Accountable. In December 2025, USX briefly depegged to $0.10 on secondary Solana DEX markets due to a liquidity crunch; the issuer attributed the event to secondary-market illiquidity rather than collateral failure, and USX subsequently restabilized near $1.00.

USDS is the primary stablecoin of Sky (formerly MakerDAO), launched in September 2024 as the successor to DAI within Sky's product line, with holders able to convert 1:1 between the two tokens. USDS is over-collateralized by a mix of crypto assets, USDC held via peg stability modules, and tokenized real-world assets including U.S. Treasuries, but it has drawn recurring criticism over a wallet-freezing capability, a custody arrangement for hundreds of millions of dollars in reserves that relied on a single externally-owned wallet, and rising governance complexity under Sky's 'Endgame' restructuring. No confirmed hack or sustained depeg of USDS itself has been documented as of this writing, though it inherits pass-through depeg risk from its USDC backing.

YLDS is a yield-bearing, SEC-registered debt security issued as a tokenized face-amount certificate by Figure Certificate Company (FCC), a wholly owned subsidiary of Figure Technology Solutions, Inc. (Nasdaq: FIGR). It is the first interest-bearing transferable stablecoin to be registered under the U.S. Investment Company Act of 1940, and as of mid-2026 has approximately $540 million in circulation across Provenance Blockchain, Solana, Stellar, and Sui. While the product carries legitimate regulatory backing, parent company Figure Technology Solutions faces outstanding short-seller allegations regarding blockchain misrepresentation, lending quality, and a significant 2026 data breach affecting nearly one million customers.

Monad is a high-performance Layer-1 blockchain with disputed tokenomics and airdrop distribution. $269M raised, 230,000+ airdrop recipients.

Lighter is a venture-backed, zero-fee perpetual futures decentralized exchange built as a custom zero-knowledge rollup on Ethereum, founded by former Citadel engineer Vladimir Novakovski. It has raised roughly $89 million from high-profile investors including Founders Fund, Ribbit Capital, Haun Ventures, Craft Ventures, Dragonfly and Robinhood Markets, reaching a $1.5 billion valuation, and briefly ranked among the top perpetuals DEXs by volume. The platform has drawn scrutiny over post-token-launch withdrawal delays, a front-end chart-manipulation controversy following a bot-driven price spike, heavy team/investor token allocation, and a sharp decline in trading volume and user activity after its December 2025 airdrop.

Global Dollar (USDG) is a fiat-backed stablecoin issued by Paxos Digital Singapore Pte. Ltd. and regulated by the Monetary Authority of Singapore, launched in November 2024 to anchor the Global Dollar Network (GDN), a consortium of exchanges and fintechs including Robinhood, Kraken, Galaxy Digital, Anchorage Digital, Bullish, Nuvei, and Visa. USDG differentiates itself from USDT and USDC by sharing reserve yield with network partners rather than retaining it at the issuer, and publishes monthly third-party reserve attestations. The stablecoin itself has no confirmed depeg incidents or direct regulatory enforcement action to date, but its issuer, Paxos, has a documented history of AML/KYC compliance failures tied to the BUSD stablecoin, and USDG's yield-distribution model sits in a regulatory gray area under the GENIUS Act's interest-payment prohibitions that lawmakers and banking groups are actively seeking to close.

GHO is a decentralized, crypto-collateralized stablecoin native to the Aave protocol, launched in July 2023 and minted through governance-approved 'Facilitators.' The token suffered a prolonged sub-$1 depeg for roughly seven months after launch and a sharper flash depeg during the July 2023 Curve Finance exploit, before stabilizing near $1.00 in 2024–2026 following the introduction of a Peg Stability Module-style mechanism. As of mid-2026, GHO's peg is largely stable and its supply has grown to roughly $500–650 million, but the protocol carries residual risks tied to collateral concentration, stablecoin-backed peg defenses, and recent turmoil in Aave DAO governance following the exit of the Aave Chan Initiative, a delegate that had driven much of GHO's growth.

Ledger Live is the official companion application published by Ledger SAS for managing Ledger hardware wallets. The genuine application itself has no documented vulnerabilities that have led to direct fund loss, but the "Ledger Live" name and branding have been repeatedly and successfully counterfeited on major app marketplaces (Apple App Store, Microsoft Store, Google Play, Chrome Web Store), resulting in tens of millions of dollars in alleged theft from users who mistook fake listings for the real app. Separately, a genuine Ledger-published software component in the same ecosystem (the Ledger Connect Kit library) was compromised in a December 2023 supply-chain attack that briefly redirected funds from users of dApps integrating with Ledger hardware wallets.

GMGN.ai is a Singapore-based, primarily Chinese-run multi-chain memecoin trading terminal and Telegram trading bot, launched in mid-2023, focused on Solana, Ethereum, Base, and BNB Chain token discovery, smart-money wallet tracking, and copy trading. The platform states it is non-custodial and cannot move user wallet balances itself, but it carries a poor Trustpilot rating driven by complaints about copy-trading losses and unclear fees, and it has been the target of extensive phishing and impersonation campaigns — including fake mobile apps and cloned websites — that have drained victims' wallets. No confirmed breach of GMGN's own infrastructure or misappropriation of user funds by the company has been documented in available sources.

Ambient Finance (formerly CrocSwap, operated by Crocodile Labs) is a decentralized exchange protocol running its entire DEX inside a single smart contract, deployed on Ethereum and several Layer 2 networks. The project raised $6.5 million in a seed round in July 2023 from credible institutional investors including BlockTower Capital, Jane Street, and Circle Ventures. It has experienced two notable security incidents: a DNS hijacking attack in October 2024 that compromised its frontend, and an on-chain smart contract exploit in June 2026 that resulted in approximately $110,600 in losses.

Antier Solutions Pvt. Ltd. is an India-based blockchain and Web3 development firm headquartered in Mohali, Punjab, founded in 2005 and led by CEO Vikram R. Singh. The company provides custom blockchain development, crypto exchange development, DeFi platforms, and enterprise blockchain services to global clients. In May 2026 it received its first institutional funding of $3 million led by GVFL; it carries generally positive ratings on B2B review platforms, though a small number of Trustpilot reviews allege fraudulent conduct, a claim not corroborated by regulatory filings or major news sources.

Ondo US Dollar Yield (USDY) is a tokenized yield-bearing note issued by Ondo USDY LLC, a Delaware bankruptcy-remote special purpose vehicle affiliated with Ondo Finance, and backed by short-duration U.S. Treasuries, iShares Short Treasury Bond ETF shares, and bank demand deposits. The token is offered exclusively to non-U.S. persons under a Regulation S exemption, accrues yield through a rising token price or daily rebasing, and had grown to approximately $740 million in supply across ten blockchains as of early 2026. A two-year SEC investigation into Ondo Finance was closed without charges in December 2025, though ongoing risks include centralized price-setting infrastructure, limited FDIC deposit coverage on a portion of reserves, and access and composability constraints imposed by the token's on-chain allowlist system.

The Janus Henderson Anemoy AAA CLO Fund (JAAA) is a tokenized real-world asset fund providing on-chain exposure to AAA-rated tranches of Collateralized Loan Obligations (CLOs), actively managed by Janus Henderson Investors U.S. LLC as sub-advisor and issued by Anemoy Capital SPC Limited, a British Virgin Islands regulated professional fund. Launched in June 2025 with a $1 billion seed allocation from the Sky/MakerDAO ecosystem via the Grove DeFi protocol, the tokenized fund had approximately $686 million in assets under management as of June 2026. The fund is restricted to non-US qualified institutional investors who pass KYC/AML onboarding via the Centrifuge platform, and carries inherent risks from CLO market credit spreads, smart contract infrastructure, cross-jurisdictional regulatory uncertainty, and stablecoin dependency.

PayPal USD (PYUSD) is a US dollar-pegged stablecoin issued by Paxos Trust Company, a New York-chartered limited purpose trust company regulated by the NYDFS, and marketed by PayPal. Reserves are attested monthly by an independent accounting firm and are held in cash and short-term US Treasuries, with redemption rights subject to Paxos and PayPal compliance review. PYUSD carries the same centralization risks common to bank-issued stablecoins (issuer freeze and address-wipe functions) and its issuer, Paxos, has a prior NYDFS enforcement history tied to its Binance-branded BUSD stablecoin, though PYUSD itself has not been the subject of a depeg event, and a 2023 SEC subpoena into PYUSD was closed in February 2025 without enforcement action.

The Spiko Amundi Overnight Swap Fund EUR (ticker: eurSAFO) is a tokenized UCITS money market fund launched in March 2026, co-developed by French fintech Spiko and Amundi, Europe's largest asset manager with approximately €2.4 trillion under management. The EUR share class is regulated by France's Autorité des Marchés Financiers (AMF) and operates as a sub-fund of SPIKO SICAV, using fully collateralized total return swaps with Tier 1 bank counterparties to deliver yields above overnight benchmarks. As of mid-2026, eurSAFO had approximately $830 million in total asset value across five blockchain networks, ranking among the largest tokenized RWA funds globally.

Midnight is a privacy-focused Layer 1 blockchain developed by Input Output Global (IOG), the engineering firm behind Cardano, and overseen by the Cayman-based Midnight Foundation. It uses zero-knowledge proofs and a dual-token model (NIGHT and DUST) to offer selective data disclosure for compliant private smart contracts. The NIGHT token launched in December 2025 with a 24 billion fixed supply; in July 2026, a third-party Wanchain bridge connecting Cardano to BNB Chain was exploited for approximately 515 million NIGHT tokens (~$10-13 million), crashing the token price 30-43% to an all-time low, though Midnight's core Layer 1 protocol was not compromised.

0x Protocol (ticker: ZRX) is a decentralized exchange infrastructure protocol founded in 2016 by Will Warren and Amir Bandeali, enabling peer-to-peer token trading on Ethereum and multiple other chains. The project conducted a $24 million ICO in August 2017, has processed over $200 billion in cumulative trading volume, and operates the Matcha DEX aggregator. In September 2023, the U.S. CFTC settled charges against ZeroEx, Inc.—the corporate entity behind 0x—for $200,000 related to the unlicensed offering of leveraged token trading; and in January 2026 a third-party integration (SwapNet) used in Matcha Meta suffered a $13.4 million exploit, though 0x's core protocol contracts were not compromised.

Zilliqa is a Singapore-founded, sharded layer-1 blockchain launched in 2017 out of National University of Singapore research, with a track record of independent smart-contract audits and no history of SEC or DOJ enforcement action against the project itself. Its trust profile is weighed down by two distinct security incidents: a February 2025 exploit of Zilliqa's own X-Bridge token-manager contracts (protocol-level fault, roughly $42,000 realized loss) and a July 2026 theft of ZIL tokens from an exchange partner's cold wallet, which Zilliqa's own preliminary findings attribute to a technical flaw in legacy ZIL1 wallet transaction-signing rather than to the exchange's custody practices — a claim that as of this writing is corroborated by only one secondary source and remains unconfirmed by Zilliqa's promised full post-mortem.

Playsomo, operating under the brand SOMO (@playsomo, somo.xyz), is a Web3 digital-collectibles and gaming company founded in 2021 in Tortola, British Virgin Islands, that was acquired outright by Animoca Brands on January 14, 2026. A pseudonymous X/Twitter account (@0xd_eth) has alleged that Taj Tarsha — separately indicted by the U.S. Attorney's Office for the Southern District of New York on August 5, 2026 on securities and wire fraud charges tied to his company Few and Far Limited — 'launched' a Playsomo token and implicated Animoca Brands and its co-founder Yat Siu. No court filing, DOJ statement, or mainstream news coverage of the Tarsha indictment names Playsomo, SOMO, or Animoca Brands, and no evidence of an official Playsomo/SOMO token with a verifiable contract address was found. This investigation treats the Tarsha connection as an unsubstantiated social-media allegation pending independent verification.

0xdF8C3A7FFbdC144f462687120E4AE4C4e5E55abE is an Ethereum externally owned account (EOA) with no recorded on-chain transaction history, zero ETH balance, and no token holdings as of August 2026. No verifiable associations with scams, fraud, sanctions, regulatory actions, or illicit activity were found across any checked source; however, the absence of on-chain history and public intelligence makes a definitive trust assessment impossible.

In August 2026, a critical, actively exploited vulnerability in BTCPay Server allowed unauthenticated remote attackers to obtain LND macaroon credential files, granting full administrative access to victim Lightning nodes and enabling fund theft. BTCPay Server released emergency patch v2.4.2 on August 7, 2026 to close the exposure, though already-stolen macaroon files remained valid until operators manually revoked them at the node level. Confirmed victims include hardware wallet company Foundation and Bitcoin publication Citadel21, with total losses undisclosed.

Cosmos is a Layer 1 blockchain protocol and interoperability hub founded by Jae Kwon and Ethan Buchman, with its mainnet launching in March 2019. The project pioneered the Inter-Blockchain Communication (IBC) protocol, enabling sovereign blockchains to transfer assets and data across networks. While the protocol has broad institutional adoption and a large ecosystem, it has faced material governance controversies, a serious security incident involving alleged North Korean developer contributions to its Liquid Staking Module, leadership fragmentation, and persistent concerns over the Interchain Foundation's financial transparency.

Astroport is a decentralized exchange (DEX) and automated market maker (AMM) protocol originally launched on the Terra blockchain in December 2021 and subsequently rebuilt across multiple Cosmos ecosystem chains after Terra's collapse in May 2022. On July 30, 2024, the protocol suffered a significant security exploit on the Terra (Phoenix) chain resulting in approximately $6.4 million in losses due to a reentrancy vulnerability in IBC hooks that had been patched in April 2024 but accidentally reintroduced in a June 2024 upgrade. The protocol itself was the victim of this exploit; partial recovery was achieved by seizing attacker funds on Neutron and blacklisting addresses on Terra, though a portion of stolen assets reached Ethereum and remain unrecovered.

Allo Protocol is an open-source, EVM-compatible smart contract framework for on-chain capital allocation, developed by Gitcoin and launched on Ethereum mainnet in November 2023. It served as the underlying infrastructure for Gitcoin Grants Stack from 2023 through May 2025, when Gitcoin's software division (Grants Lab) was shut down due to financial constraints, placing Allo in maintenance mode. No fraud allegations, regulatory actions, or security exploits have been publicly documented against the protocol itself.

Bits of Gold is Israel's largest regulated cryptocurrency broker, founded in 2013 and licensed by the Israeli Capital Market, Insurance and Savings Authority since 2022. On August 16-17, 2026, the company disclosed that a third-party analytics vendor breach exposed personal data on approximately 200,000 customers — including national ID numbers, bank account details, and public wallet addresses — stemming from CVE-2026-72898, an actively exploited zero-day in self-hosted Metabase software. Customer crypto funds and private keys were not compromised, and the company has engaged a cybersecurity incident-response firm while notifying Israeli regulators.

Leap Wallet was a non-custodial multi-chain crypto wallet founded in 2021 and backed by $3.2 million from Pantera Capital and CoinFund. Originally built for the Terra ecosystem, it pivoted to Cosmos after Terra's 2022 collapse and grew to support 100+ chains. On April 3, 2026, the team announced permanent cessation of all products effective May 28, 2026, without disclosing a specific reason, creating an eight-week compressed migration window that raised user security concerns.

Zapper was a DeFi portfolio tracking and interaction platform founded in 2019 that reached 2 million monthly active users and raised approximately $16.5 million from investors including Mark Cuban and Framework Ventures. The platform announced it would permanently shut down all services on August 3, 2026, following a sustained decline in market demand and a damaging April 2025 domain hijacking incident in which attackers socially engineered Zapper's domain registrar to redirect users to a phishing page. The shutdown creates immediate user-protection concerns: lingering wallet permissions granted to Zapper's contracts should be revoked, and the closure creates conditions favorable for scammers to launch fake 'Zapper migration' or 'fund recovery' phishing campaigns targeting former users.

Sturdy Finance V1 was a DeFi lending protocol that allowed users to earn yield on deposits while borrowers accessed interest-free loans backed by staked collateral. On June 12, 2023, an attacker exploited a read-only reentrancy vulnerability in the protocol's price oracle integration — a third-party flaw originating in Balancer — and drained approximately 442 ETH (roughly $800,000). Sturdy V1 paused markets immediately, reopened its stablecoin market within days, and later formally sunset V1 in favor of Sturdy V2, which launched in early 2024 with a redesigned, modular architecture and three additional audits.

Manta Network is a modular zero-knowledge blockchain platform consisting of Manta Pacific (an Ethereum L2) and Manta Atlantic (a Polkadot parachain being deprecated as of August 2026). The project launched its MANTA token in January 2024, an event marred by a large-scale DDoS attack on its RPC infrastructure and concurrent allegations — sourced from on-chain data and social media, not regulatory or court filings — that a Korean business development representative dumped 2 million ecosystem tokens at launch. No formal criminal charges or regulatory actions against Manta Network or its founders have been identified as of mid-2026.

Fluid, formerly known as Instadapp, is a DeFi lending, borrowing, and trading protocol founded in 2018 by brothers Samyak and Sowmay Jain. The protocol rebranded from Instadapp to Fluid in December 2024 following the launch of its DEX product. As of mid-2026, Fluid operates with approximately $720 million in TVL across multiple chains and has been subject to two notable security incidents: a March 2026 bad-debt event stemming from a third-party hack of the Resolv protocol (~$19.3 million absorbed), and a May 2026 off-chain key compromise of its Merkle rewards distribution infrastructure that drained approximately 125,000 FLUID and 51,900 GHO.

BONK.fun (also marketed as LetsBONK.fun) is a no-code meme coin launchpad on the Solana blockchain, launched in April 2025 as a joint initiative between the BONK community and Raydium protocol. The platform rapidly captured majority market share from Pump.fun by mid-2025 before losing significant ground later that year, and suffered a domain-level security breach in March 2026 caused by a social engineering attack on its domain service provider — an incident attributed to the third-party infrastructure provider, not the platform's own code or contracts. The platform is operationally linked to Bonk, Inc. (Nasdaq: BNKK), a publicly traded company that holds a revenue sharing interest in the platform.

Bond Protocol is a permissionless DeFi infrastructure platform launched in October 2022, originating from OlympusDAO's bonding mechanism, that enables protocols to create bond markets for treasury diversification and Protocol Owned Liquidity (POL). The protocol suffered a smart contract exploit in October 2022 in which approximately 30,437 OHM tokens (~$300,000) were drained from its Fixed-Expiry Teller contract; all funds were returned by the attacker within hours of the incident. The protocol raised a $2.5M seed round from credible venture investors and has since expanded to Ethereum, Arbitrum, and Optimism, though it shows signs of reduced activity as of 2025-2026.

Clober Liquidity Vault is an automated market-making product built on top of CloberDEX, a fully on-chain central limit order book (CLOB) DEX deployed on Coinbase's Base network. On December 10, 2024, the Liquidity Vault suffered a reentrancy exploit that drained approximately 133.7 ETH (~$501,000) from the newly launched vault — one day after it received its first liquidity injection. The core CloberDEX protocol was unaffected, and the team offered a 20% white-hat bounty, which the attacker declined; funds were not recovered.

Sweat Economy is a move-to-earn cryptocurrency project built on the NEAR Protocol, originating from the Sweatcoin fitness app which reportedly has over 200 million registered users. The project raised $13 million in a 2022 private token sale and launched the SWEAT token in September 2022. On April 29, 2026, an external attacker exploited a vulnerability in the SWEAT token smart contract, draining approximately 13.71 billion tokens (roughly 65-67% of total supply) from foundation-controlled accounts; the team responded by pausing the contract, coordinating exchange freezes, and restoring all external user balances.

PeopleDAO is a community-governed metaDAO that emerged in December 2021 from the dissolution of ConstitutionDAO, adopting the $PEOPLE ERC-20 token as its governance mechanism. The organization aims to incubate subDAOs and projects advancing Web3 and social good. In March 2023, PeopleDAO suffered a social engineering incident in which an unknown third party exploited an accidentally shared editable payment spreadsheet to steal approximately 76.5 ETH (~$120,000) from the DAO treasury; no rug pull, founder fraud, or regulatory action has been documented.

Polkadot is a Layer 0 blockchain interoperability protocol founded by Gavin Wood (co-founder of Ethereum) and backed by the Web3 Foundation. It introduced a multi-chain architecture connecting independent blockchains via a central Relay Chain and launched its native token DOT in 2017. As of mid-2026, the project is classified as a digital commodity by U.S. regulators, has launched a spot ETF, and is executing a major technical upgrade (JAM), but faces credible concerns around treasury management, an ecosystem exodus of flagship parachains, a bridge exploit, and persistent adoption challenges relative to competitors.

WooFi is the decentralized exchange (DEX) component of WOO Network, a liquidity and trading ecosystem founded in 2019 and incubated by Kronos Research. The platform has suffered two significant security incidents — a March 2024 flash loan oracle exploit costing approximately $8.75 million, and a July 2025 phishing-driven breach of the affiliated centralized exchange WOO X costing $14 million — both of which are attributed to external attackers rather than insider misconduct. WOO X committed to full user reimbursement for the 2025 incident, and no regulatory actions or fraud allegations against WooFi's operators have been identified.

Midnight Network is a privacy-focused blockchain launched as a partner chain to Cardano, developed by Shielded Technologies (an IOG spinout) and governed by the Midnight Foundation. The project uses zero-knowledge proofs and a 'rational privacy' model to offer selective disclosure rather than full anonymity, targeting enterprise and regulated use cases. The network launched its federated mainnet in March 2026 with institutional validators including Google Cloud and Vodafone, but its NIGHT token suffered severe post-launch volatility and was affected by a third-party bridge exploit in July 2026 that drained approximately 515 million tokens.

BTCPay Server is a widely used open-source, self-hosted Bitcoin payment processor created in 2017. On August 7, 2026, the project disclosed and patched a critical pre-authentication vulnerability (present in all versions before 2.4.2) that allowed remote attackers to steal LND macaroon credential files and drain connected merchant Lightning nodes. The vulnerability was actively exploited before the public disclosure, with confirmed victims including hardware wallet maker Foundation and Bitcoin publication Citadel21; the attacker remained unidentified as of mid-August 2026.

Dexodus Finance is a perpetual decentralized exchange (DEX) built on the Base network, founded in 2023 and based in Barcelona, Spain. The protocol offers oracle-based perpetual trading with copy trading, gasless trading, and gamified features. On May 26, 2025, the protocol suffered a smart contract exploit resulting in approximately $291,000–$300,000 in losses from its liquidity pool due to a stale Chainlink oracle signature replay vulnerability; the team reported full fund recovery within 24 hours and subsequently launched a revised V2 protocol audited by Halborn.

Render Network (RENDER) is a decentralized GPU rendering network for AI and 3D graphics founded by Jules Urbach (OTOY CEO, 70+ patents). $30M raised in December 2021 from Multicoin Capital, Solana Foundation, and Alameda Research. Migrated from Ethereum to Solana in November 2023. No protocol-level exploits recorded. Key concerns include Alameda Research co-investment, OTOY's 5% perpetual fee and dual governance role, ~50% treasury/escrow token concentration, and 86% decline from ATH. OctaneX featured in Apple M4 keynote.

Polkadot (DOT) is a multi-chain protocol founded by Gavin Wood, ranked #41 by market cap (~$2.3B). The project faces significant headwinds: a $133M treasury overspending crisis (projected 2-year depletion), the 2017 Parity wallet freeze that locked ~$98M of ICO proceeds, an April 2026 Hyperbridge exploit minting $1B in fake bridged DOT (losses ~$2.5M), and steep ecosystem decline with active parachains dropping from 200+ to ~30. No SEC enforcement actions exist, and ETF applications are under review.

WazirX is an Indian cryptocurrency exchange founded in 2018 by Nischal Shetty, Sameer Mhatre, and Siddharth Menon and operated by Zanmai Labs Pvt Ltd (India) and its Singapore parent Zettai Pte Ltd. The exchange suffered a catastrophic $234.9 million hack on July 18, 2024 attributed by a joint US-Japan-South Korea government statement to North Korea's Lazarus Group, causing a 16-month operational shutdown; the Singapore High Court approved a restructuring scheme in October 2025 under which users began receiving approximately 85% of pre-hack balances, with remaining claims represented by non-tradable Recovery Tokens as of mid-2026. Separately, India's Enforcement Directorate has pursued the exchange under FEMA and money-laundering provisions since 2021, and a disputed ownership relationship with Binance remained unresolved at the time of the hack.

Monero (XMR) is a legitimate, open-source, community-funded privacy cryptocurrency launched in 2014 with no premine and a clean protocol-level security track record. However, it carries significant third-party risk: Archetyp Market ($267M, Monero-exclusive) was dismantled by DOJ/Europol in June 2025; $330M+ in stolen BTC was laundered via XMR in 2025; Binance, Kraken EEA, OKX, and 60+ exchanges have delisted it; and the EU AMLR bans CASP handling of privacy coins by July 2027. Former lead maintainer Riccardo Spagni faces 378 fraud/forgery charges in South Africa (pre-dating Monero).

AKT is the native utility token of Akash Network, a decentralized cloud computing marketplace built on the Cosmos SDK and founded in 2015 by Greg Osuri and Adam Bozanich under Overclock Labs. The project operates as a legitimate, open-source DePIN (Decentralized Physical Infrastructure Network) with public governance, audited code, and institutional partnerships including an indirect connection to NVIDIA through the Brev.dev acquisition. No regulatory actions, fraud allegations, or major exploits have been identified, though a responsibly disclosed critical vulnerability was patched in May 2024 and a spam attack disrupted the network briefly in March 2025.

Hxro Network is a decentralized derivatives and liquidity primitive built on the Solana blockchain, providing shared exchange, risk management, and settlement infrastructure for on-chain futures, options, and parimutuel betting markets. The project raised $49 million across two token rounds in 2021 from well-regarded institutional investors including Jump Crypto, Blockchain Capital, Susquehanna International Group, and Alameda Research. While the team is publicly identified with traditional finance credentials and multiple third-party security audits have been completed, the HXRO token has experienced a severe decline from its all-time high, and the network has struggled to achieve meaningful adoption relative to competing Solana derivatives protocols.

Alpha Finance Lab (also known as Alpha Venture DAO, later rebranded to Stella) is a DeFi protocol builder founded in 2020 and best known for Alpha Homora, the first leveraged yield farming protocol on Ethereum. In February 2021, a vulnerability in Alpha Homora V2's own smart contract code was exploited by a third party, resulting in approximately $37.5 million drained from Cream Finance's Iron Bank through an uncollateralized protocol-to-protocol lending arrangement. Alpha bore primary responsibility for the exploited vulnerability; subsequent disputes over the resulting bad debt led to Iron Bank freezing approximately $41 million in Alpha Homora user deposits on Ethereum in March 2023, a dispute that as of mid-2023 remained unresolved with Iron Bank, with Alpha establishing a goodwill compensation fund for affected depositors.

Exactly Protocol is a decentralized, non-custodial fixed- and variable-rate lending protocol deployed on Optimism and Ethereum, developed by Exa Labs. On August 18, 2023, the protocol suffered a smart contract exploit in its DebtManager periphery contract that resulted in the loss of approximately $7.3 million (4,324 ETH) belonging to 117 user accounts; the protocol itself was a victim of the attack, not the perpetrator. The team responded with a governance-approved compensation plan, law-enforcement engagement, and a substantially expanded post-incident audit program, and the protocol has continued operating with an evolving consumer app product.

Helium is a decentralized physical infrastructure network (DePIN) founded in 2013 by Amir Haleem, Shawn Fanning, and Sean Carey, operated by Nova Labs, Inc. The network incentivizes individuals to deploy wireless hotspots for IoT (LoRaWAN) and mobile coverage using its HNT token, which migrated to the Solana blockchain in April 2023. The project has a documented history of misrepresenting partner relationships to investors, resulting in a $200,000 SEC civil settlement in April 2025, but has demonstrated meaningful real-world usage growth through verified carrier data-offload partnerships with AT&T, T-Mobile, and Telefonica.

Gemini is a New York-based cryptocurrency exchange and custodian bank founded in 2015 by Cameron and Tyler Winklevoss, regulated under a NYDFS Limited Purpose Trust Charter. The exchange gained significant notoriety following the collapse of its Gemini Earn lending program in late 2022, which left approximately 340,000 users with roughly $900 million in frozen assets; subsequent SEC and NYDFS enforcement actions were resolved by early 2024 and 2026 respectively with full customer restitution. Gemini went public on the Nasdaq in September 2025 under the ticker GEMI, but its stock has since declined more than 80% amid deepening losses, executive departures, mass layoffs, and a contested post-IPO strategic pivot to prediction markets.

BitMEX (Bitcoin Mercantile Exchange) is a cryptocurrency derivatives exchange founded in 2014 by Arthur Hayes, Ben Delo, and Samuel Reed that pioneered the perpetual swap contract and at its peak was one of the largest crypto derivatives platforms in the world. In October 2020, the CFTC and DOJ charged the exchange and its co-founders with operating an unregistered trading platform and willfully failing to implement anti-money laundering and know-your-customer programs in violation of the Bank Secrecy Act. All three co-founders subsequently pleaded guilty, the exchange paid a $100 million civil settlement, and in March 2025 the founders and the corporate entity received presidential pardons from Donald Trump.

Injective Protocol is a Layer 1 blockchain built on the Cosmos SDK, designed for decentralized finance applications including derivatives, perpetuals, and spot trading via a fully on-chain order book. Founded in 2018 by Eric Chen and Albert Chon and backed by Binance Labs, Pantera Capital, and Mark Cuban, it launched its canonical mainnet in November 2021 and has grown to a top-tier DeFi chain. No regulatory enforcement actions have been identified against Injective; however, concerns exist around a 2025-2026 bug bounty dispute involving an alleged $500 million critical vulnerability, validator stake concentration, and third-party scams impersonating the protocol.

Bitrefill is a Stockholm-headquartered crypto e-commerce platform founded in 2014 that allows users to purchase gift cards, eSIMs, and phone top-ups with Bitcoin and other cryptocurrencies. On March 1, 2026, the company suffered a confirmed cyberattack in which attackers compromised an employee laptop, escalated access to production infrastructure and hot wallets, drained an undisclosed amount of cryptocurrency, and exfiltrated approximately 18,500 purchase records. Bitrefill publicly attributed the attack to North Korea's Lazarus Group (Bluenoroff subgroup) based on malware signatures, on-chain tracing, and reuse of IP and email addresses consistent with prior DPRK-linked operations.

The Ethereum Foundation (Stiftung Ethereum) is a Swiss nonprofit organization founded in 2014 to support the development and growth of the Ethereum blockchain network, the world's second-largest by market capitalization. On June 23, 2026, the Foundation announced a sweeping restructuring that eliminated approximately 54 positions (roughly 20% of its workforce), cut its 2026 operating budget by 40%, closed its Privacy and Scaling Explorations (PSE) ZK research unit, and reorganized into five protocol-focused work clusters. The restructuring follows nine senior-level departures since January 2026, including both co-executive directors, and coincides with a credible warning from former core contributor Trent Van Epps that Ethereum's core development ecosystem could face a structural funding shortage within three to nine months.

Berachain is an EVM-compatible Layer 1 blockchain that launched mainnet on February 6, 2025, using a novel Proof-of-Liquidity (PoL) consensus mechanism developed by the pseudonymous team at Big Bera Labs. The project raised $142 million across multiple funding rounds from prominent investors including Polychain Capital, Framework Ventures, and Brevan Howard Digital, but faced significant controversy at launch over airdrop fairness, a co-founder's token sales, a secret investor refund clause, and a major DeFi exploit in November 2025 that forced an emergency network halt and hard fork. As of mid-2026, Berachain is undergoing a substantial protocol redesign under the PoL Next upgrade, with TVL having declined sharply from its $3 billion peak.

Jump Trading is a Chicago-based proprietary trading firm founded in 1999, operating one of the largest high-frequency trading operations globally across futures, equities, fixed income, FX, and cryptocurrency markets. Its crypto division, Jump Crypto, became a major force in DeFi infrastructure between 2021 and 2023, co-developing Wormhole, Pyth Network, and the Firedancer Solana validator client. The firm has faced significant regulatory and legal exposure: its subsidiary Tai Mo Shan settled with the SEC in December 2024 for $123 million over TerraUSD manipulation, the Terraform bankruptcy administrator filed a $4 billion civil lawsuit in December 2025 naming Jump and individual executives, and a separate CFTC investigation was reported in 2024 with no public resolution as of mid-2026.

Synthetix is an Ethereum-based decentralized derivatives liquidity protocol originally launched in 2017 as Havven by Australian entrepreneur Kain Warwick, rebranding in 2018 to enable the creation of synthetic assets tracking real-world prices. The protocol reached a peak total value locked during the 2021 DeFi bull market and has been a pioneer in on-chain derivatives, but has faced recurring issues including a critical oracle exploit in 2019, persistent front-running vulnerabilities, a contentious DWF Labs market-maker arrangement, and a prolonged sUSD stablecoin depeg crisis beginning in 2025 triggered by the SIP-420 protocol overhaul.

Algorand is a Layer-1 blockchain founded in 2017 by Silvio Micali, a Turing Award-winning MIT cryptographer who co-invented zero-knowledge proofs and verifiable random functions. The protocol uses a Pure Proof-of-Stake consensus mechanism with genuine academic credibility, and has attracted institutional partnerships including FIFA and Visa-adjacent integrations. However, ALGO has been named as an alleged unregistered security in SEC complaints against both Bittrex and Binance, the Algorand Foundation conducted a highly criticized 2019 token auction that resulted in a mass refund event, the token trades approximately 96% below its 2021 all-time high, and the Foundation cut 25% of its workforce in 2025 while relocating from Singapore to the United States.

Claynosaurz is a Solana-native NFT collection and web3 animation studio launched in November 2022, comprising 10,222 animated 3D dinosaur characters. Founded by Montreal-based animation professionals with verifiable film industry credits, the project has delivered multiple product milestones including physical merchandise, a Solana Phone exclusive NFT drop, cross-chain expansion to Sui, and a forthcoming Gameloft mobile game. No fraud, rug pull, or regulatory actions have been identified; the primary risk factors relate to NFT market depreciation, complex multi-token ecosystem mechanics, and the inherent execution risk of an early-stage gaming and entertainment IP.

Gate.io (rebranded to Gate.com in May 2025) is a major global cryptocurrency exchange founded in 2013 as Bter.com by Lin Han, currently incorporated in the Cayman Islands and serving over 52 million users across more than 4,600 assets. The exchange has faced significant scrutiny including an alleged undisclosed $230 million hack in 2018 attributed to North Korean state actors, a 2025 public notice from the Cayman Islands Monetary Authority (CIMA) confirming it has never been licensed in its ostensible home jurisdiction, and a pattern of user complaints regarding account freezes, withdrawal blocks, and a disputed $LA futures incident in 2025. The exchange publishes monthly proof-of-reserves reports audited by Hacken and holds licenses in several jurisdictions including Malta (MiCA), Dubai (VARA), Cyprus (CySEC), and Australia (AUSTRAC).

Satori Finance was a decentralized perpetual futures exchange that raised $10 million in May 2022 from Polychain Capital, Coinbase Ventures, and Jump Crypto, and processed a reported $134 billion in cumulative trading volume before announcing its shutdown on June 16, 2026. The platform cited prolonged unfavorable market conditions and insufficient revenue as the reason for closure, giving users a 30-day window to withdraw funds before a hard deadline of July 16, 2026 at 23:59 UTC. No hacks, exploits, or fraud allegations have been substantiated; the shutdown appears to be an orderly wind-down of a VC-backed DeFi project that failed commercially.

Quant Network (QNT) is a UK-incorporated enterprise blockchain interoperability platform built on proprietary Overledger technology. Founded by Gilbert Verdian, the company has verified partnerships with major UK banks (Barclays, HSBC, Lloyds, NatWest) through the UK Regulated Liability Network, and completed Project Rosalind with the Bank of England and BIS. No SEC enforcement actions exist. Key concerns include closed-source code limiting auditability, centralized governance, a pay-to-play developer licensing model, and some partnership announcements with limited verifiable follow-through.

Extensive web research found no credible evidence connecting any individual named Rahul Ravinder Malhotra to cryptocurrency fraud, scams, hacks, regulatory enforcement, or sanctions. The only verifiable public match for this exact name is Rahul Ravinder K. Malhotra, a finance executive appointed as Chief Business Development Officer and Business Head for North America at Prabhudas Lilladher Private Limited in June 2024, with no reported crypto-risk associations. Due to very limited findable public information and significant name-collision risk — 'Rahul Malhotra' is a common Indian name with dozens of distinct LinkedIn profiles — a definitive risk assessment cannot be made.

Inertia Protocol (INRT) is a modular liquid restaking token (LRT) and lending protocol built on the Initia blockchain, launched to mainnet in April 2025. The protocol suffered a confirmed exploit in May 2025 in which approximately $152,000 was drained from five lending markets via a known ERC4626 share-price inflation attack; the protocol states its Insurance Fund restored affected user balances. Team composition, smart contract audit history, and investor backing are not publicly disclosed.

Granary Finance was a decentralized, non-custodial lending and borrowing protocol forked from Aave V2, built by Byte Masons and an anonymous developer known as Fantom Menace, launching on Fantom in March 2022 before expanding to eight chains. The protocol raised over $5 million USDC via a community liquidity generation event in March 2023 and introduced the GRAIN governance token, but its TVL collapsed from a peak of approximately $60 million to under $200,000. By early 2025, the team announced the full withdrawal and discontinuation of Granary Finance across all chains, with GRAIN and OATH token holders migrated to the successor platform Cod3x (CDX). No regulatory actions, rug-pull allegations, or direct hacks of Granary contracts were documented; key risks include near-total value decline, deeply pseudonymous founding team, and protocol end-of-life.

On April 3, 2026, the frontend domain hypurr.fi of HypurrFi — a DeFi lending protocol on Hyperliquid EVM — was hijacked via a social engineering attack targeting the domain registrar Openprovider. No user funds were confirmed drained and the protocol's smart contracts remained intact throughout; the team migrated frontend operations to hypurrfi.com and subsequently recovered control of the original domain. The incident is part of a documented six-week cluster of DeFi registrar-level frontend attacks in March–April 2026 targeting Neutrl, HypurrFi, and CoW Swap.

Ethena is a synthetic-dollar protocol launched on Ethereum in 2023, issuing USDe — a delta-neutral synthetic dollar backed by crypto spot collateral and offsetting short perpetual futures positions rather than fiat bank deposits. The protocol also issues a governance token (ENA) and a yield-bearing staked variant (sUSDe) marketed as an 'Internet Bond.' While it achieved a peak supply exceeding $14 billion in 2025, it has faced regulatory enforcement in Germany under MiCAR, a localized depeg event on Binance in October 2025, ongoing counterparty and negative-funding-rate risk critiques, and comparisons — contested by the founding team — to the failed Terra/UST model.

LayerZero is a major omnichain interoperability protocol operated by LayerZero Labs, deployed across 130+ blockchains and processing over 200 million cross-chain messages as of early 2026. The protocol gained institutional backing from Citadel Securities, ARK Invest, Tether, and Sequoia Capital, and is the infrastructure behind USDT0, which processed over $70 billion in cross-chain USDT transfers. In April 2026, LayerZero's off-chain DVN infrastructure was compromised via a social engineering attack attributed to North Korea's Lazarus Group (TraderTraitor), enabling the $292 million KelpDAO rsETH bridge exploit — the largest DeFi hack of 2026 — and triggering a multi-billion-dollar client exodus to competing bridge providers.

On June 1, 2026, Gnosis Pay's Zodiac Delay Module — a third-party smart contract add-on designed to impose mandatory waiting periods on outgoing Safe transactions — was exploited via a signature-verification flaw in the Delay Modifier v1.1.0 and Roles Modifier v2. Blockchain security firm CertiK estimated losses at approximately $265,000 affecting 41 Gnosis Safes, with stolen funds partially bridged to Hyperliquid and converted to Monero. Gnosis co-founder Martin Köppelmann publicly pledged full reimbursement for all affected users, card services were restored for over 99% of users by June 7, and Safe core contracts were confirmed unaffected.

THORChain is a decentralized cross-chain liquidity protocol built on the Cosmos SDK that enables native asset swaps across major blockchains without wrapped tokens. The protocol has suffered at least six significant security incidents since 2021, including a May 15, 2026 exploit in which a malicious validator node exploited a GG20 threshold signature scheme vulnerability to drain approximately $10.7–10.8 million across nine chains. THORChain has also faced documented use by the North Korean Lazarus Group as a primary money laundering channel, a $200 million insolvency crisis in early 2025 requiring a debt-to-equity restructuring, and ongoing questions about its permissionless design and unwillingness to block illicit flows.

Spicenet is an early-stage DeFi interoperability protocol founded in 2023 and headquartered in Kingston, Canada, with a technical hub in Bengaluru, India. The project raised $3.4 million in a December 2024 seed round led by Hack VC and Magnus Capital, and is building a cross-chain brokerage network comprising two products — Spice Flow (multi-chain distribution) and Spice Edge (execution layer). As of May 2026, Spicenet remains pre-mainnet; no regulatory actions, fraud allegations, or security breaches have been publicly documented.

Famous Fox Federation (FFF) is a Solana-native NFT ecosystem founded in September 2021, comprising a genesis collection of 7,777 fox PFP NFTs and several sub-collections under the 'Foxosphere' umbrella. The team, operating under the pseudonyms 'DraxxTs' and 'FoxyDev', has built and shipped multiple on-chain utilities including the Rafffle raffle platform, the Citrus NFT lending protocol, a token marketplace, and gamified staking missions. No regulatory actions, exploits, or rug-pull incidents have been identified through public sources, though the founders remain pseudonymous and $FOXY token value has declined substantially from its all-time high.

Cega (cega.fi) was a decentralized exotic options and structured products protocol that operated from June 2022 through late 2024 on Solana, Ethereum, and Arbitrum. Founded by Arisa Toyosaki, a named former derivatives trader, and backed by Dragonfly Capital, Pantera Capital, and Coinbase Ventures, the protocol processed over $500 million in cumulative transaction volume without a reported user fund loss. In November 2024 Cega was acquired by an undisclosed party and wound down its public-facing product suite, urging remaining depositors to withdraw.

Optimism is an Ethereum Layer 2 optimistic rollup network operated by OP Labs PBC, with ecosystem governance stewarded by the Optimism Foundation. Launched on mainnet in January 2021, it issues the OP governance token and anchors the Superchain — a shared framework that powers Base, Zora, Mode, and more than two dozen other OP Stack-based chains. The network has a credible technical pedigree and documented decentralization progress, but retains meaningful centralization in its sequencer and upgrade-key infrastructure, and has experienced several notable security incidents.

CoW Protocol (trading interface: CoW Swap) is a decentralized exchange aggregator and MEV-protection protocol spun out of GnosisDAO in 2022. On April 14, 2026, the protocol's cow.fi domain was hijacked via a social engineering attack that exploited registrar Gandi SAS and the Finnish .fi registry authority Traficom using forged identity documents, redirecting users to a phishing interface for approximately 90 minutes and causing confirmed losses of approximately $1.2 million. The protocol's smart contracts were not compromised; CoW DAO subsequently passed CIP-86 in May 2026 to offer discretionary grants reimbursing verified victims up to 100% of their losses.

Helium Mobile is a Mobile Virtual Network Operator (MVNO) launched by Nova Labs, Inc. in 2023, marketed as the world's first crypto-powered consumer cellular service. It provides coverage primarily via T-Mobile's wholesale 5G network, supplemented by a community-built Wi-Fi hotspot layer, and issues MOBILE token rewards to subscribers and hotspot operators. Parent company Nova Labs settled a $200,000 SEC fraud charge in April 2025 over misrepresentations made to investors about enterprise partnerships, while the MOBILE token has been deprecated in favor of HNT under community governance proposal HIP 138.

GooseFX was a Solana-based decentralized finance platform founded in 2021 that offered an AMM DEX (GAMMA), single-sided liquidity pools, perpetual futures trading, and an NFT aggregator under the GOFX utility token. The project raised $4.5 million in seed funding from reputable investors including Animoca Brands and CoinShares, received at least one published security audit from Halborn, and accumulated over $700 million in cumulative trading volume during 2024 before announcing a voluntary wind-down in August 2025. No regulatory actions, theft-related exploits, or rug-pull signals have been identified; the protocol sunsetting appears to reflect commercial failure rather than fraud.

Decaf (decaf.so) is a non-custodial stablecoin wallet and payments platform built on Solana and Stellar, founded in 2022 and headquartered in Miami, FL, targeting emerging-market users who need low-cost cross-border payments and fiat cash-out. The company has raised a seed round from recognizable crypto-native and fintech investors including Visa, and has established formal partnerships with Circle, MoneyGram, and the Stellar Development Foundation. No regulatory actions, hacks, or fraud allegations have been identified as of the investigation date.

Frax Finance is a decentralized stablecoin protocol launched in December 2020, originally pioneering a fractional-algorithmic design for its FRAX stablecoin. Following the collapse of algorithmic stablecoins in 2022, the protocol voted in 2023 to move to full collateralization, and has since expanded into a broader DeFi ecosystem including liquid staking (frxETH), a lending market (Fraxlend), a Layer 2 blockchain (Fraxtal), and a fully-backed institutional stablecoin (frxUSD) collateralized by BlackRock's BUIDL fund. The protocol faces documented concerns about historical centralization via a core-team-controlled multisig, an unresolved bug bounty attribution dispute, and prior security incidents including a DNS domain hijacking and an X account compromise.

Uniswap is a decentralized exchange (DEX) protocol built on Ethereum, founded in November 2018 by Hayden Adams and operated commercially by Uniswap Labs. It is the largest DEX by trading volume globally, using an automated market maker (AMM) model. The protocol has faced significant regulatory scrutiny — including an SEC Wells notice in April 2024 (closed without action in February 2025), a CFTC settlement resulting in a $175,000 penalty in September 2024, and a multi-year scam-token class action dismissed with prejudice in March 2026 — while remaining operationally active and technologically mature through its v4 release.

On April 9, 2023, SushiSwap's RouteProcessor2 contract — deployed just one day earlier across 14 blockchain networks — was exploited due to a failure to validate user-supplied pool addresses, allowing an attacker to redirect token transfers from wallets that had approved the contract. Approximately $3.3 million (roughly 1,800 WETH) was drained, with a single high-profile victim (@0xsifu) accounting for the majority of losses. Whitehat security teams front-ran further exploitation and recovered over $750,000, while SushiSwap committed to making all affected users whole through a two-tier compensation process.

Lifinity was a proactive market maker and oracle-based decentralized exchange built on Solana, operating from February 2022 until it voluntarily shut down in December 2025 after processing approximately $150 billion in lifetime trading volume. The protocol was notable for its use of Pyth oracle pricing instead of traditional AMM mechanics, a no-VC community-funded launch via a veIDO, and a transparent wind-down that distributed roughly $43.4 million in treasury assets to LFNTY token holders. Risk factors include an anonymous pseudonymous founder operating as 'Durden' or 'durdenwannabe,' a $699,090 pool drainage incident in December 2023 caused by a protocol-level bug, and structural dependence on the Pyth oracle as a single external pricing dependency.

Fuse Wallet is a Solana-based smart wallet developed by Squads Labs, the team behind Squads Protocol, Solana's leading multisig and smart account infrastructure. Launched in public TestFlight in June 2024 and on the Apple App Store in December 2025, Fuse replaces traditional seed phrases with a multi-factor authentication model built on Squads Protocol's audited smart account standard. Squads Labs has raised approximately $40.9 million across multiple funding rounds from institutional investors including Electric Capital, Coinbase Ventures, and Multicoin Capital, and no known regulatory actions, hacks, or fraud allegations have been identified against the product.

Fragmetric (fragmetric.xyz) is a Solana-native liquid restaking protocol that issues fragSOL, fragJTO, and fragBTC as Liquid Restaking Tokens (LRTs) built on Jito's restaking infrastructure. The protocol raised $12 million across seed and strategic rounds from recognized institutional backers including Hashed, Finality Capital, and RockawayX, and has undergone multiple independent security audits by Certora and Quantstamp. Material risks include smart-contract complexity inherent to restaking, slashing exposure through Node Consensus Networks (NCNs), partial team pseudonymity, and significant FRAG token price depreciation following the July 2025 listing.

DRiP Haus (drip.haus) is a Solana-based digital collectibles distribution platform that uses compressed NFT technology to enable creators to deliver free or low-cost weekly drops to subscribers. Founded in late 2022 by Vibhu Norby, a named serial entrepreneur with a verifiable track record, the company raised $11.5 million across two funding rounds before being acquired by Jupiter, Solana's leading DeFi aggregator, in an all-cash deal announced April 2, 2025. No regulatory actions, fraud allegations, or significant security incidents have been identified; the primary risk factors are platform-level policy changes that reduced accessibility for collectors and the uncertainties inherent in post-acquisition integration.

Access Protocol is a Solana-based Web3 content monetization platform operated by Access Labs Inc., founded by Mika Honkasalo in 2022. The protocol enables users to stake its native ACS token into publisher stake pools in lieu of traditional subscriptions, with launch partners including CoinGecko and The Block. While the project raised modest seed funding, listed on Coinbase at launch, and has not been implicated in fraud or regulatory action, significant concerns exist around its highly inflationary tokenomics, sharp price decline of roughly 99% from its all-time high, a small and lightly-documented team, and the absence of publicly disclosed smart contract audit reports.

XRP is a cryptocurrency native to the XRP Ledger (XRPL), a public blockchain co-designed in 2011–2012 by Jed McCaleb, David Schwartz, and Arthur Britto. Ripple Labs, Inc. is the San Francisco-based company that co-developed the ledger and has historically used XRP sales to finance operations, accumulating approximately 80 billion of the fixed 100 billion token supply at launch. A landmark U.S. Securities and Exchange Commission lawsuit filed in December 2020 — alleging over $1.3 billion in unregistered securities offerings — concluded in August 2025 when both parties dropped their appeals, cementing a $125 million civil penalty and a permanent injunction against further unregistered institutional XRP sales in the U.S.

Robinhood Crypto, LLC is the cryptocurrency trading subsidiary of publicly-traded Robinhood Markets, Inc. (NASDAQ: HOOD), offering retail crypto trading in the United States and Europe. The entity has accumulated over $170 million in regulatory fines and settlements across multiple U.S. jurisdictions since 2020 related to AML deficiencies, misleading disclosures, customer asset restrictions, and cybersecurity failures, though it remains a licensed and operational platform with growing global ambitions including the $200 million acquisition of Bitstamp completed in June 2025.

Celestia is a modular blockchain network that provides a dedicated data availability (DA) and consensus layer for rollups and application-specific chains, using data availability sampling to allow light nodes to verify block data without downloading full blocks. Developed by Celestia Labs and launched on mainnet on October 31, 2023, the project raised $155 million from prominent venture capital firms including Bain Capital Crypto and Polychain Capital. The project has faced significant controversy over its tokenomics, alleged insider token selling, and a 95%+ decline in the TIA token from its June 2024 all-time high of approximately $20.91.

Flare (FLR) is a Layer-1 blockchain founded by Hugo Philion focused on cross-chain data oracles (FTSO) and interoperability, with deep roots in the XRP ecosystem. The FLR token airdrop to XRP holders was delayed two years (snapshot Dec 2020, distribution Jan 2023), crashing 83-87% on launch day. Critics noted the airdrop delivered only 15% upfront rather than the expected 1:1 ratio. Protos reported the network attracted just 80 new users per day despite its billion-dollar valuation. A Flare 2.0 upgrade targeting TEE-based confidential compute is planned for Q3 2026. Current metrics show ~860K active addresses, ~500K daily transactions, and ~$200M TVL.

Orion Protocol is a decentralized liquidity aggregator that connects centralized and decentralized exchanges into a single non-custodial trading interface, launched in 2020 with its native ORN token. On February 2, 2023, the protocol suffered a reentrancy exploit that drained approximately $3 million across its Ethereum and Binance Smart Chain deployments through a malicious fake-token attack against an unaudited exchange contract. The protocol subsequently rebranded to Lumia in late 2024, migrating all ORN tokens to LUMIA at a 1:1 ratio.

Bedrock Protocol is a multi-asset liquid restaking protocol developed by RockX, offering synthetic Bitcoin (uniBTC), liquid-staked ETH (uniETH), and IoTeX staking (uniIOTX). On September 27, 2024, the protocol suffered a critical smart contract exploit in which a flawed minting function allowed an attacker to mint uniBTC tokens at a 1:1 ETH-to-BTC ratio, draining approximately $2 million from DEX liquidity pools. Subsequent investigation by security firm Fuzzland, disclosed in June 2025, alleged that a former Fuzzland employee planted a supply-chain backdoor to execute the attack; Fuzzland stated it compensated Bedrock for losses and reported the matter to law enforcement.

Lulo (lulo.fi), formerly known as Flexlend, is a Solana-based DeFi lending aggregator that automatically routes stablecoin deposits to the highest-yielding protocols on the network, including Kamino, Drift, Marginfi, Morpho, Maple, and Pendle. Founded in 2022 and formally launched in early 2024, the protocol has grown to over $86 million in TVL and surpassed $100 million in cumulative deposits, supported by five independent security audits and backing from Circle Ventures and Solana Ventures. The platform's primary risk profile is composability-layer exposure: deposits are routed across multiple third-party protocols, meaning a failure at any underlying venue could affect user funds, although Lulo's 'Protected' tier includes automated on-chain coverage for such events.

Exponent Finance is a Solana-based yield tokenization protocol launched in late 2024 that enables users to separate yield-bearing assets into tradable Principal Tokens (PT) and Yield Tokens (YT), analogous to Pendle Finance on Ethereum. The protocol has attracted $7.1 million in venture funding from institutional backers including Multicoin Capital, Solana Ventures, and RockawayX, and processed over $2 billion in yield volume across 35,000+ users. Key risk considerations include a small but growing team, a SAFE-plus-token-warrant capital structure suggesting a future token launch, TVL that experienced a sharp 60%+ drawdown tied to incentive expiry, and an audit history that is active but still maturing.

BonkBot is a Solana-focused Telegram trading bot launched in 2023, affiliated with the BONK memecoin community but operated as a legally separate entity. It has grown to become one of the largest Telegram-based trading bots by volume, reporting over $14 billion in lifetime trades and more than 500,000 total users, with all 1% trading fees directed toward purchasing and burning BONK tokens. The platform operated in a custodial manner for most of its history before announcing a non-custodial key management system upgrade in October 2024; a March 2024 incident in which 302 users lost approximately $523,000 in SOL highlighted custody risks common to this class of product, though BonkBot attributed the losses to a compromise at a rival bot (Solareum) rather than its own infrastructure.

Arbitrum is an Ethereum Layer-2 optimistic rollup developed by Offchain Labs, co-founded in 2018 by Princeton academics Steven Goldfeder, Ed Felten (former U.S. Deputy Chief Technology Officer), and Harry Kalodner. It is the largest Layer-2 by total value locked and has achieved L2BEAT Stage 1 decentralization through its BoLD permissionless validation protocol launched in early 2025. The protocol has faced significant governance controversies since its March 2023 ARB token launch, including the AIP-1 pre-ratification scandal, a Gaming Catalyst Program funding dispute, vote-buying incidents, and a high-profile April 2026 Security Council emergency freeze of $71M in ETH linked to North Korean hackers that reignited centralization debates.

Cosmos Hub (ATOM) is the flagship chain of the Cosmos ecosystem, built on Tendermint/CometBFT with IBC protocol. Founded by Jae Kwon and Ethan Buchman, the project has endured severe governance crises: ATOM 2.0 rejected (37.4% NoWithVeto), Jae Kwon's AtomOne fork, a no-confidence vote against ICF leadership, and North Korean-linked developers contributing to the Liquid Staking Module. ATOM was named a security in SEC lawsuits against Binance and Kraken (both dropped without adjudication). Three critical IBC vulnerabilities were disclosed but patched without exploitation. Ecosystem health is declining with key projects departing.

Internet Computer (ICP) is a layer-1 blockchain protocol developed by the DFINITY Foundation, designed to host decentralized applications and web services natively on a distributed compute network. The protocol launched publicly in May 2021 and attracted significant controversy after its token lost approximately 95% of its value within weeks of listing, coinciding with on-chain evidence of large-scale token transfers from addresses linked to project insiders and the foundation treasury. Multiple class-action lawsuits alleging unregistered securities sales and market manipulation were subsequently dismissed on procedural grounds rather than their merits. The protocol remains operational with ongoing development activity, a 2026 tokenomics reform (Mission 70), and a ~$1.7 billion market capitalization as of May 2026.

Jupiter Perps is a perpetual-futures decentralized exchange (DEX) built on Solana, operated by Jupiter Exchange, offering up to 250x leveraged trading on SOL, ETH, and wBTC against a shared liquidity pool called JLP (Jupiter Liquidity Pool). The protocol has grown to become the dominant perps venue on Solana with a JLP TVL that surpassed $2 billion in September 2025 and over $100 billion in cumulative trading volume as of 2024. The platform has undergone multiple independent smart contract audits with no critical exploits against its own contracts reported, though JLP token holdings in third-party vaults were implicated as stolen assets in the April 2026 Drift Protocol breach.

Flash Trade (flash.trade) is a non-custodial, asset-backed perpetuals and spot exchange built on Solana, founded in early 2023 by Anas Khader and Zoheb Shahzan (previously of the Investin project). The protocol is bootstrapped, has undergone multiple third-party security audits, publishes an open-source reference implementation, and has processed over $20 billion in cumulative trading volume. No exploits, regulatory actions, or fraud allegations have been identified; primary risk factors are a modest TVL (~$10.7M), a low-cap governance token (FAF, ~$3.7M market cap), oracle dependency on Pyth Network, and limited public background on the founding team.

Backpack is a Solana-ecosystem crypto wallet and centralized exchange (operating as Trek Labs Ltd FZE) founded in 2022 by Armani Ferrante and Tristan Yver, both veterans of the FTX and Alameda Research organizations prior to those firms' 2022 collapse. The exchange holds a VARA VASP license in Dubai and a MiFID II license (via acquisition of FTX EU from CySEC in January 2025), has published daily zero-knowledge proof-of-reserves since August 2025, and raised funding at a reported $1 billion valuation in early 2026. Key risk signals include the founders' FTX-era history, a contested FTX EU acquisition that drew a public rebuke from the FTX bankruptcy estate, a 60-plus percent post-TGE collapse of its native BP token, and ongoing US regulatory limitations.

Scroll is an Ethereum Layer 2 ZK rollup that launched its mainnet in October 2023, offering bytecode-level EVM compatibility via zero-knowledge proofs. The project raised $83 million in venture funding and launched its SCR governance token in October 2024, but faced significant community backlash over airdrop distribution mechanics, concentrated whale allocations, and a 32% same-day price decline. By early 2026, Scroll's TVL had collapsed approximately 96% from its peak and the project triggered further controversy by proposing to dissolve its Security Council and reduce DAO contributor roles.

Ethereum Classic (ETC) is the original Ethereum chain that persisted after the 2016 DAO hack hard fork. It has suffered three documented 51% attacks totaling over $7M in double-spend losses (2019 and 2020), has minimal DeFi ecosystem depth (~$150K TVL), and faces unresolved governance controversy over the Olympia treasury proposal. Post-Merge hashrate improvements have raised the cost of attack substantially. Grayscale's ETCG trust is SEC-filed with ~$283M NAV. No explicit SEC/CFTC classification exists for ETC.

Bitcoin Cash (BCH) is a proof-of-work cryptocurrency that forked from Bitcoin on August 1, 2017, at block 478,559, increasing the block size limit from 1 MB to 8 MB to enable higher on-chain transaction throughput. It is classified as a commodity by U.S. regulators and ranked approximately #14 by market capitalization (~$8.8B as of May 2026). The project carries meaningful reputational risk tied to its primary promoter Roger Ver, who was indicted for $48 million in tax fraud in 2024 and reached a deferred prosecution settlement; additionally, the network experienced a contentious hash war in 2018 that split the chain, and Bitcoin.com operated a wallet app and website that allegedly misled users into purchasing BCH instead of Bitcoin.

Houdini Swap (also known as HoudiniSwap) is a non-custodial, privacy-focused cross-chain swap aggregator founded in 2022 by Louis Goldberg and incorporated as HoudiniSwap LLC, with reported headquarters in the Caribbean (Saint Vincent or Saint Kitts and Nevis). The platform processes swaps across 100+ blockchains without taking custody of funds, routing transactions through intermediary partners to obscure on-chain trails, and reported approximately $13 million in revenue and $2.5 billion in cumulative volume as of 2025. As of May 2026, the company is pending acquisition by publicly-traded SOL Strategies Inc. for $18 million, subject to Canadian Securities Exchange approval.

Ripple Labs is a San Francisco-based financial technology company founded in 2012 that developed the XRP Ledger and issues the XRP token for cross-border payments. The company was the subject of a landmark five-year SEC enforcement action alleging a $1.3 billion unregistered securities offering, which concluded in August 2025 via joint dismissal of appeals following a 2024 court-imposed $125 million civil penalty. A 2023 federal court split ruling established that institutional XRP sales constituted unregistered securities while secondary market sales did not, making the case the first significant federal court ruling to distinguish token sale contexts under securities law.

PaintSwap is a decentralized NFT marketplace and DeFi protocol originally launched on the Fantom Opera blockchain in May 2021, which migrated to the Sonic chain (formerly Fantom) in late 2024. The platform operates an open NFT marketplace, an AMM DEX, yield farming, and an on-chain idle MMORPG called Estfor Kingdom, all powered by its native BRUSH token. No confirmed rug pull, hack, or regulatory action has been identified; the primary documented incident is a domain hijacking by a third-party registrar in October 2025.

Aerodrome Finance is a decentralized exchange (DEX) and automated market maker (AMM) launched on August 28, 2023 on Coinbase's Base Layer-2 network. It operates a ve(3,3) tokenomics model inherited from Velodrome Finance and has grown to become the dominant DEX on Base by total value locked and trading volume. The protocol has no history of smart contract exploits but suffered a significant DNS hijacking attack in November 2025 that resulted in approximately $700,000 to $1 million in user losses.

Sei Network is a Layer 1 blockchain developed by Sei Labs, co-founded in 2021 by Jayendra Jog and Jeff Feng, designed to optimize high-throughput trading and DeFi with a parallelized EVM architecture. The project raised $35 million across seed and Series A rounds from prominent crypto VCs, launched its mainnet in August 2023, and has grown to over $600 million in TVL as of mid-2025. While no regulatory enforcement actions have been brought against Sei Labs or the Sei Foundation directly, the project faced community backlash over its 2023 airdrop distribution and carries structural risk concerns related to token unlock schedules, insider allocation concentration, and a low validator decentralization score.

Aptos is a Layer-1 proof-of-stake blockchain founded in 2021 by Mo Shaikh and Avery Ching, former employees of Meta's Diem (Libra) project, using the Move programming language originally developed for Diem. The project raised $350 million across two rounds in 2022 from investors including a16z, FTX Ventures, Jump Crypto, and Three Arrows Capital, launching its mainnet in October 2022 amid significant criticism over opaque tokenomics, low initial throughput, and heavy insider allocations. While Aptos has since grown its DeFi TVL above $1 billion, attracted institutional partnerships with BlackRock, Microsoft, and Brevan Howard, and received digital commodity classification from the SEC and CFTC in 2026, early controversies around token distribution, FTX investor exposure, a 5-hour network outage in October 2023, and the departure of co-founder CEO Mo Shaikh in December 2024 remain part of the project's documented record.

Linea is a zkEVM Layer 2 rollup built by Consensys that launched on Ethereum mainnet in July–August 2023 and uses a proprietary zk-SNARK proving library called gnark. The network is classified as Stage 0 by L2BEAT, operates a single centralized sequencer with no permissionless fallback, and demonstrated this centralization risk in June 2024 when it unilaterally halted block production during the Velocore DEX hack. The LINEA token launched in September 2025 and suffered a 93% price collapse within hours amid a delayed community airdrop contract, sequencer outage, and allegations of treasury wallet selling pressure.

Blast is an Ethereum Layer 2 optimistic rollup that launched in November 2023, distinguished by its 'native yield' mechanism routing bridged ETH and stablecoins through Lido and MakerDAO respectively. Founded by Tieshun Roquerre ('Pacman'), the creator of the Blur NFT marketplace, Blast raised $20 million from Paradigm and others, attracted over $2 billion in TVL before its February 2024 mainnet launch, and airdropped the BLAST token in June 2024. The network has since experienced a dramatic decline, losing approximately 97% of its peak TVL and facing persistent criticism over centralization, lack of fraud proofs, a controversial airdrop distribution, and multiple high-profile exploits on ecosystem applications.

Pudgy Penguins (PENGU) is an NFT brand turned crypto token. Original founders (Cole Villemain et al.) were ousted in January 2022 after accusations of cash-grabbing and draining the treasury. Luca Netz purchased the project for 750 ETH in April 2022 and rebuilt it into a consumer brand. PENGU token launched December 2024 on Solana but dropped 86% from peak by April 2025. Abstract L2 network launch disappointed holders expecting airdrops. Canary Capital filed a PENGU ETF (SEC acknowledged July 2025). Partnerships with VanEck (NFC collectibles) and Visa (Pengu Card debit card) announced April 2026.

Avalanche (AVAX) is a Layer-1 proof-of-stake blockchain launched in September 2020 by Ava Labs, a company co-founded by Cornell University computer scientist Emin Gün Sirer alongside Maofan 'Ted' Yin and Kevin Sekniqi. The network is distinguished by its tri-chain architecture (X-Chain, P-Chain, C-Chain) and the Avalanche Consensus Protocol, which targets sub-second transaction finality. While the project has accumulated significant institutional backing, ETF filings, and a March 2026 CFTC/SEC commodity classification, it has also faced a significant 2022 whistleblower scandal alleging weaponization of litigation against competitors, multiple DeFi exploits on its ecosystem, and two disclosed critical infrastructure vulnerabilities.

Zcash (ZEC) is a privacy-focused proof-of-work cryptocurrency launched on October 28, 2016, notable as one of the first large-scale deployments of zero-knowledge proofs (zk-SNARKs) outside academia. The project has a transparent organizational history, credentialed academic founders, and a resolved SEC investigation, but has faced significant controversies including a critical counterfeiting vulnerability disclosed in 2019, ongoing governance disputes that caused the entire Electric Coin Company development team to resign in January 2026, and regulatory pressure in multiple jurisdictions resulting in exchange delistings.

OKX (formerly OKEx) is one of the world's largest centralized cryptocurrency exchanges by trading volume, founded in 2017 by Mingxing 'Star' Xu and operated by Aux Cayes Fintech Co. Ltd, incorporated in the Seychelles. In February 2025 its Seychelles operating entity pleaded guilty in U.S. federal court to operating an unlicensed money transmitting business for over seven years, agreeing to pay more than $504 million in fines and forfeitures. The exchange carries a moderate-to-elevated risk profile due to this criminal conviction, a pattern of AML failures across multiple jurisdictions, and historical incidents including a 42-day withdrawal freeze in 2020; it has taken substantive remediation steps including monthly proof-of-reserves publication since 2022, a MiCA license in the EU, and a US relaunch in April 2025 under new regional leadership.

Stellar (XLM) is a payments-focused blockchain co-founded by Jed McCaleb in 2014, ranked #22 by market cap (~$5.4B). The Stellar Development Foundation (SDF) is a non-profit with active institutional adoption including Franklin Templeton's BENJI fund ($1.98B AUM) and MoneyGram integration. No regulatory enforcement actions exist. Key risks include McCaleb's prior associations (Mt. Gox, eDonkey), SDF centralization (~30B XLM retained), a 35-day undetected Soroban Protocol 23 bug in October 2025, and third-party wallet/phishing incidents.

NiceHash is a Slovenian cryptocurrency mining marketplace founded in 2014 that allows users to buy and sell hashing power. In December 2017 the platform suffered one of the largest crypto exchange hacks of that year, with attackers stealing approximately 4,736 BTC (valued at roughly $64 million at the time) after compromising an employee's computer through a spear-phishing attack. The breach was subsequently attributed to North Korea's Lazarus Group, and NiceHash completed a full user repayment program in December 2020 after a three-year effort funded from operational revenue.

Polygon (formerly Matic Network) is a Layer 2 scaling solution for Ethereum, originally founded in 2017 by Jaynti Kanani, Sandeep Nailwal, and Anurag Arjun. The project rebranded from Matic Network to Polygon in February 2021 and has grown into one of the most widely used Ethereum scaling platforms, though it has faced regulatory scrutiny from the SEC, allegations of token misallocation by on-chain analytics firm ChainArgos, and a significant undisclosed security vulnerability patched in 2021. The network's native token migrated from MATIC to POL in September 2024 as part of a broader Polygon 2.0 roadmap.

DeXe (DEXE) is a DAO governance infrastructure protocol enabling permissionless DAO creation and management. TVL tripled from ~$500M to ~$1.7B between end of 2024 and early Q2 2026. Over 100 DAOs launched on the platform by end of 2024. However, only ~50,000 holders suggests high concentration risk with capital flows growing faster than user growth. DEXE token remains down ~63% from its March 2021 ATH of $33.54. No major security incidents or regulatory actions found. Limited independent media coverage relative to its TVL. Treasury growth has significantly outpaced token price appreciation.

Polygon (formerly MATIC) is a Layer-2/sidechain scaling solution for Ethereum that completed its MATIC-to-POL token migration in September 2024. The SEC named MATIC as an alleged unregistered security in the June 2023 Binance lawsuit. Two major vulnerabilities were caught by Immunefi bounty hunters ($850M and $24B at risk respectively). Three of four co-founders departed within 24 months. Three rounds of layoffs occurred between 2023-2026. zkEVM was deprecated in June 2025 citing $1M annual operating loss.

Sky (formerly MakerDAO) is a DeFi lending protocol founded by Rune Christensen that governs the DAI/USDS stablecoin system. Rebranded in August 2024 with USDS and SKY token migration. Key risks include the March 2020 Black Thursday oracle failure ($8.32M in losses, $28M class action dismissed), governance centralization (top 3 holders controlled 78%+ of votes per academic research), DAI depeg events, and USDS freeze function controversy. No SEC/CFTC enforcement actions exist. USDS supply grew ~86% to ~$9.86B through 2025.

Mantle is a modular Ethereum Layer 2 network launched in July 2023, emerging from a merger of the BitDAO DAO and the Mantle L2 project. The MNT token was converted 1:1 from BitDAO's BIT token following a May 2023 community vote. The protocol holds a treasury of over $6 billion in assets and ranked approximately #43 by market cap as of mid-2026, but carries notable centralization risks including a single sequencer, zero-delay contract upgrade capability, and deep strategic and financial dependence on Bybit, the centralized exchange that held approximately 60% of the initial BIT token supply and suffered a $1.5 billion North Korean hack in February 2025.

FIGR_HELOC is the ~$18B market-cap tokenized HELOC pool on Provenance Blockchain originated by Figure Lending LLC (NASDAQ: FIGR). It sits at #9 among all cryptos by market cap as of May 2026. The issuer faces two active federal class actions, a credible short-seller report from Morpheus Research alleging blockchain misrepresentation backed by Figure's own SEC filings, rising delinquency rates, Provenance blockchain centralization concerns, and a 2026 data breach affecting ~967,000 users.

Fantom is a layer-1 blockchain founded in 2018 by Dr. Ahn Byung-Ik and technically led by Andre Cronje, operating the Opera mainnet using a DAG-based Lachesis consensus mechanism. In 2024 the project rebranded to Sonic Labs and launched a new high-throughput chain (Sonic) with a native S token replacing FTM at a 1:1 ratio. The project has experienced significant controversies including a $122 million loss from the Multichain bridge hack in 2023, a founder-level plagiarism finding in South Korean courts, SEC scrutiny of key leadership, allegations of a stablecoin liquidation scheme, and a 70%+ token price collapse in 2025.

Drift Protocol is a decentralized perpetual futures exchange built on the Solana blockchain, founded in 2021 by Cindy Leow, David Lu, and co-founders. The protocol has experienced two significant security incidents: a $14.5 million PnL accounting bug in May 2022 triggered by the LUNA collapse (fully reimbursed), and a catastrophic $285–286 million exploit on April 1, 2026, attributed with medium-high confidence to the North Korean state-sponsored threat actor UNC4736 (also tracked as Lazarus Group, AppleJeus, and Citrine Sleet), which constituted the largest DeFi hack of 2026. A $295 million recovery plan involving Tether-led financing and user-issued recovery tokens was announced in May 2026; a class action lawsuit was simultaneously filed against Circle Internet Financial.

Filecoin (FIL) is a decentralized storage network built by Protocol Labs, founded by Juan Benet. Raised a record $257M in a 2017 ICO via SAFT structure. SEC classified FIL as a security in Binance/Kraken lawsuits but later removed FIL from the Binance complaint (July 2024). Miner protests erupted at mainnet launch (October 2020) over economic model requiring heavy collateral. Mining historically concentrated in China. Binance delisted FIL/BNB pairs in October 2024.

Titan Exchange is a Solana-based meta-DEX aggregator founded in 2024 that routes swaps across multiple aggregators, including its own proprietary routing engine, to deliver competitive pricing. The platform raised $10.5M in venture funding and publicly launched in September 2025, positioning itself as the primary competitor to Jupiter, the dominant Solana DEX aggregator. While no verified fraud or regulatory action has been found against Titan itself, the investigation surfaces several concerns: self-reported and inconsistent performance benchmarks, an unconfirmed token/airdrop creating speculative user activity, an API-blocking dispute with major incumbent aggregators, and the context of Titan capitalizing on a reputational controversy surrounding Jupiter's founder.

Fomo (fomo.family) is a consumer social crypto trading app developed by FOMO Labs, Inc. of San Francisco, co-founded by former dYdX employees Paul Erlanger and Se Yong Park. Launched in May 2025 and backed by $19 million in funding led by Benchmark Capital, the platform operates on Solana, Base, and BNB Chain with a non-custodial wallet architecture. The platform is explicitly unregulated, has no publicly disclosed security audits, charges flat per-trade fees that disadvantage small traders, and has spawned at least one active phishing/wallet-drainer scam site impersonating its brand.

Binance is the world's largest cryptocurrency exchange by trading volume, founded in 2017 by Changpeng Zhao (CZ). In November 2023, Binance and CZ pleaded guilty to U.S. federal charges and agreed to pay $4.3 billion in combined penalties for Bank Secrecy Act violations, unlicensed money transmission, and sanctions evasion — the largest financial penalty ever imposed on a cryptocurrency company. CZ resigned as CEO, served a four-month prison sentence in 2024, and was controversially pardoned by President Trump in October 2025. Under CEO Richard Teng, Binance has pursued an aggressive global licensing strategy while remaining subject to ongoing compliance monitoring and new civil litigation tied to terrorist financing allegations.

TD Bank is a major North American financial institution formed in 1955 from the merger of two Canadian banks. In October 2024, the bank faced historic penalties totaling over $3 billion after pleading guilty to money laundering conspiracy charges, resulting in severe business restrictions and regulatory oversight.

Tether is the issuer of USDT, the world's largest stablecoin by market capitalization. The company has faced ongoing regulatory scrutiny, transparency concerns, and legal challenges regarding its reserves and business practices, though it continues to operate as a major cryptocurrency infrastructure provider.

Velodrome is a decentralized exchange and liquidity hub built on the Optimism network, using a ve(3,3) governance and emissions model derived from Andre Cronje's Solidly design. The protocol's core smart contracts have undergone multiple third-party audits and have not been directly exploited, but Velodrome and its sister protocol Aerodrome (both developed by Dromos Labs) have a recurring history of front-end and domain-level compromises — including a 2022 insider theft by a team member, DNS hijacks in 2023, and a 2025 registrar insider-threat incident — plus an active landscape of impersonation and wallet-drainer phishing sites.

TON (The Open Network) is a public layer-1 blockchain originally developed by Telegram and now deeply integrated with the Telegram messaging app under Pavel Durov's direction. It is a live, widely used network with legitimate exchanges, DeFi protocols, and hundreds of millions of Telegram Mini App users, but it has also become a recurring venue for phishing drainers, pyramid schemes, rug pulls, malware command-and-control infrastructure, and illicit Telegram-based marketplaces, in part because analytics and forensic tooling for TON lagged behind more established chains. Separately, Telegram co-founder Pavel Durov faces an unresolved criminal investigation in France opened in 2024 and, since July 2026, an in-absentia terrorism-related charge in Russia; neither has resulted in a conviction.

Bittensor is a decentralized blockchain protocol functioning as a peer-to-peer marketplace for machine intelligence, using the TAO token to reward AI model contributors. In July 2024, the protocol was the target of a supply chain attack via a malicious version of its official PyPI package, resulting in the theft of approximately $28 million in TAO tokens from 32 wallets. A civil lawsuit filed in January 2025 alleges that former Opentensor Foundation employees orchestrated the attack, and on-chain investigator ZachXBT identified a key suspect through NFT wash-trade analysis and Railgun de-mixing.

Compound Finance is one of the earliest and most established decentralized lending protocols on Ethereum, launched in 2018 and governed since 2020 by a DAO around the COMP token. The protocol's smart-contract core has never suffered a direct exploit of user funds, but it has been repeatedly hit by operational and front-end security failures — a costly 2021 token-distribution bug, a 2023 X/Twitter account compromise used for phishing, a 2024 DNS hijack of its website, and a 2024 governance controversy in which a whale-backed group used purchased voting power to pass a treasury allocation over community objections. Combined with declining total value locked and a 2023 leadership departure, these incidents warrant continued scrutiny even though the underlying lending contracts have a long audit history and no reported loss of user deposits from a core-protocol hack.

Trust Wallet is a widely-used non-custodial mobile and browser cryptocurrency wallet, originally acquired by Binance in 2018 and later divested as an independent entity. It has been the subject of multiple documented security incidents spanning 2022–2025, including a critical WebAssembly entropy vulnerability (CVE-2024-23660), a supply-chain compromise of its Chrome extension in December 2025 that resulted in approximately $8.5 million in user losses, and a historical low-entropy key generation flaw exploited in 2023. Blockchain investigator ZachXBT flagged the December 2025 browser extension incident and documented hundreds of victims.

Trezor is a legitimate Prague-based hardware wallet manufacturer (SatoshiLabs) and one of the oldest in the industry, but it has accumulated a significant threat ecosystem around its brand. A January 2024 breach of its third-party support portal exposed contact data for approximately 66,000 users, which subsequently fueled targeted phishing campaigns delivered via email, physical mail, and fake apps. Trezor hardware devices have also been subject to disclosed physical attack vectors, including an alleged unpatchable flaw in the STM32 microcontroller used in the Trezor T model.

Ledger is a France-based manufacturer of hardware cryptocurrency wallets (Nano S, Nano X, Stax, Flex) and maker of the Ledger Live companion app, reportedly securing over $100 billion in client assets across more than 7 million devices sold and preparing a US IPO targeting a valuation above $4 billion. The company has a strong core security record for its hardware products but has been repeatedly implicated in data-handling and supply-chain incidents: a 2020 breach of its own e-commerce/marketing database exposed roughly 1 million emails and 270,000 physical addresses, leading to years of phishing and alleged extortion attempts against customers and an ongoing US class action; a December 2023 npm supply-chain compromise via a former employee's account led to roughly $600,000 in DeFi losses; a May 2023 product announcement ('Ledger Recover') triggered a major trust backlash over perceived key-extraction capability; and in January 2026 a breach at third-party processor Global-e exposed customer order data. Separately, third parties impersonating Ledger — including a fraudulent 'Ledger Live' app that passed Apple App Store review in April 2026 — have caused further customer losses that Ledger did not directly control.

CoinSpot is an Australian cryptocurrency exchange operated by Casey Block Services Pty Ltd, registered with AUSTRAC since 2018 and holding an Australian Financial Services Licence as of 2026. The exchange has no record of regulatory findings of fraud or misconduct against it, but it has been the subject of a November 2023 hot-wallet security breach of roughly $2.4 million, a 2021 phishing campaign that impersonated its emails, and a recurring pattern of user complaints about withdrawal freezes and customer support. CoinSpot's own disclosure of the 2023 breach was minimal, and no attacker has been publicly identified or prosecuted.

EigenLayer is a legitimate Ethereum restaking protocol operated by Eigen Labs that became a high-value target for phishing campaigns, wallet drainer attacks, and social engineering in 2024 following the launch of its EIGEN token. In October 2024 alone, the protocol's official X account was compromised to promote a fake airdrop resulting in at least $800,000 lost by one victim, and a separate email-based social engineering attack redirected approximately $5.7 million in locked investor tokens to an attacker's wallet. EIGEN holders and restakers face an elevated and persistent threat surface from impersonation sites, fake airdrop claims, and token-approval drainer schemes that exploit the protocol's name and brand recognition.

Crypto.com is a Singapore-headquartered centralized cryptocurrency exchange founded in 2016 (originally as Monaco) by Kris Marszalek, Bobby Bao, Gary Or, and Rafael Melo. The platform has been subject to multiple serious security incidents, including a confirmed January 2022 hack in which $34 million was stolen via a 2FA bypass and laundered through Tornado Cash, and an alleged 2023 data breach linked to the Scattered Spider hacking group that the company did not publicly disclose to affected users. Blockchain investigator ZachXBT has publicly accused Crypto.com of governance manipulation and tokenomics fraud, citing the March 2025 reissuance of 70 billion CRO tokens that had been permanently burned in 2021, and the company's controversial 2020 forced swap from its original MCO token to CRO at unfavorable rates.