Amm
Investigations tagged with this subject. A topic describes what a page is about — an attack type, a jurisdiction, a regulator, a named actor — as distinct from the source that produced it.
2 investigations on this topic
Velodrome is a decentralized exchange and liquidity hub built on the Optimism network, using a ve(3,3) governance and emissions model derived from Andre Cronje's Solidly design. The protocol's core smart contracts have undergone multiple third-party audits and have not been directly exploited, but Velodrome and its sister protocol Aerodrome (both developed by Dromos Labs) have a recurring history of front-end and domain-level compromises — including a 2022 insider theft by a team member, DNS hijacks in 2023, and a 2025 registrar insider-threat incident — plus an active landscape of impersonation and wallet-drainer phishing sites.
avoid.net/pendle→50/100[WARNING]Pendle is a permissionless yield-trading protocol on Ethereum, launched in 2021 by TN Lee and Vu Nguyen, that allows users to separate and trade the principal and yield components of yield-bearing assets. In September 2024, Penpie — an independent yield optimizer built on top of Pendle — suffered a $27 million reentrancy exploit that was made possible in part by Pendle's permissionless market creation design. Although Pendle's own contracts were not directly exploited, the protocol's architecture contributed to the attack surface, and all 11,261 ETH in stolen funds were subsequently laundered through Tornado Cash.