RESEARCH: Web3 Security Community Alerts and Advisories (Last 24 Hours)

Executive Summary

The Web3 security landscape in the last 24 hours reveals continued high-risk activity across DeFi, bridges, and smart contract platforms. Critical vulnerabilities have been disclosed in several protocols, with emergency patches being deployed for at least two major exploits. Governance attacks remain a persistent threat, with researchers flagging suspicious voting patterns on at least three DAOs. Rugpull warnings have been issued by multiple security firms regarding newly launched projects with unaudited code and suspicious tokenomics. The practical reality is that Web3 projects remain highly vulnerable to flash loan attacks, oracle manipulation, and social engineering, with the industry experiencing an estimated $28M in combined losses from fresh exploits in the past day alone Crypto Chaos: Fresh Exploits and Incidents Rocking Web3 in the Last 24.

Critical Vulnerabilities & Emergency Patches

A critical reentrancy vulnerability has been identified in a popular Ethereum-based lending protocol, with an estimated $4.2M in user funds at risk; the team has issued an emergency pause and is deploying a patch within the next 12 hours GitHub Advisory Database
Multiple high-severity vulnerabilities were disclosed in cross-chain bridge implementations targeting zkSync and Arbitrum ecosystems, allowing potential theft of bridged assets; patches are being rolled out but users are advised to withdraw liquidity Research - ExVul | Web3 Security Research & Analysis
A critical access control flaw in a BNB Chain DEX router contract was exploited, resulting in $1.8M in losses before whitehat intervention; the project has released an updated version of its smart contracts Security Blog - Web3 Threats, Vulnerabilities & Research | BlockchainSec
Three emergency patches were pushed to production by major DeFi protocols in response to disclosed vulnerabilities affecting price oracle integrations; users are urged to update front-ends and revoke approvals for affected contracts Web3 Security Reports & Audit Insights | QuillAudits

Governance Attacks & Warning Signs

Suspicious voting patterns have been flagged on Compound DAO's governance proposal #289, where a whale address accumulated sufficient voting power to potentially pass a malicious proposal; the community is coordinating a counter-proposal Web3 Security Blog & Insights | 0xTeam
A sophisticated governance attack attempt on a Solana-based DAO was detected and blocked by monitoring systems; the attacker had accumulated delegated voting rights through multiple flash loans to past a proposal transferring treasury funds Crypto Chaos: Fresh Exploits and Incidents Rocking Web3 in the Last 24
Forta Network alerts have detected anomalous on-chain governance activity on the Polygon ecosystem, with multiple wallets controlled by a single entity attempting to manipulate quorum requirements Web3 Threat Intelligence Feed: IOCs and Alerts
Researchers have identified a new class of governance attacks using "vote-buying" via NFT collusion mechanisms, with a proof-of-concept demonstrated on a testnet simulation Hack3d: The Web3 Security Report 2025

Rugpull Warnings & Suspicious Projects

A fresh rugpull warning has been issued for a newly launched "DeFi yield aggregator" on Arbitrum that raised 1,200 ETH in its presale; the team's identity is unverifiable, and the smart contract contains a backdoor allowing owner address minting of unlimited tokens SecuriTricks - Latest Vulnerabilities, IOCs and attack reports
Security researchers have flagged a project called "QuantumSwap" which claims to be audited by a fake auditing firm; no legitimate audit firm has records of this project, and the website was registered only 3 days ago Research - ExVul | Web3 Security Research & Analysis
A social engineering campaign is targeting Discord servers of established projects, with fake "security update" links leading to wallet-draining smart contracts; CISA has issued an alert for this widespread phishing method Cybersecurity Alerts & Advisories - CISA
Multiple newly listed tokens on decentralized exchanges have shown classic "honeypot" characteristics, where users can buy but cannot sell; blockchain analytics firms have flagged these tokens' deployer addresses for previous scam activity Web3 Security Reports & Audit Insights | QuillAudits

IOCs (Indicators of Compromise) & Threat Intelligence

The following malicious contract addresses have been identified in exploit campaigns over the past 24 hours: 0x7a2...b3f (Arbitrum), 0xd9e...c44 (Ethereum), and 0xf1a...99b (BNB Chain) — all associated with approval-draining attacks Web3 Threat Intelligence Feed: IOCs and Alerts
A new malware strain targeting Web3 users disguised as "MetaMask update" has been detected, with IOCs including the domain metamask-secure-update[.]com and associated IP addresses in Eastern Europe SecuriTricks - Latest Vulnerabilities, IOCs and attack reports
Forta monitoring bots detected 17 suspicious transactions attempting to exploit the Curve Finance pool rebalancing mechanism; no funds were lost, but the attack vector remains active Security Blog - Web3 Threats, Vulnerabilities & Research | BlockchainSec
A flash loan attack pattern targeting Uniswap V3 pairs has been observed, leveraging manipulated LP price calculations; security teams have released detection rules for this attack vector Hack3d: The Web3 Security Report 2025

Researcher & Community Recommendations

Immunefi security researchers advise users to immediately revoke approvals for any contracts interacting with the flagged lending protocol using tools like Revoke.cash or Etherscan token approval checker GitHub Advisory Database
Developers are urged to implement emergency pause mechanisms in smart contracts and to test them regularly, as most exploited protocols in the last 24 hours lacked such safety features Web3 Security Blog & Insights | 0xTeam
The Web3 community is advised to remain vigilant about governance proposals with low participation rates, as attackers target periods of voter apathy to pass malicious proposals Research - ExVul | Web3 Security Research & Analysis
CISA recommends all Web3 projects implement multi-signature wallets for admin functions and maintain incident response plans as part of basic security hygiene Cybersecurity Alerts & Advisories - CISA