2025-02-21 · FBI estimate, 2025-02-26: approximately $1.5B in stolen virtual assets; not a current net-loss figure.
Bybit: a compromised presentation path can make several independent keys approve the same misunderstood action.
Verify transaction effects through a genuinely independent interpretation path, including changes to future authority.
2022-08-01 · Historical incident scale: approximately $190M; Coinbase measured over $186M in its observation window.
Nomad: absence of a message proof collided with a zero root accepted by configuration.
Prove existence and validity separately. Default state must never silently become authorization.
2023-04-09 · Impact includes standing allowances across deployments. Gross loss, rescued funds and residual loss require separate accounting.
Sushi RouteProcessor2: route and callback validation must constrain the use of persistent spending approvals.
Inventory reachable authority, bind callbacks to their initiating operation, and retire obsolete approvals.