📝 NOXCAT On-Chain Security Weekly | 2026.10.19–10.25
-CoinDCX: $15.99M USDT was drained from 40 TRON wallets reportedly still handling deposits; Tether froze $2.21M.
-X100: A flash-loan governance takeover captured 2 of 3 Senate seats and drained ~$4.85M USDT; the X token fell over 96%.
-Initia: A MoveVM cache flaw enabled $7.48M in unbacked token mints; $2.73M was bridged out before the network halted.
-Arkadiko: A single-wallet governance attack drained Arkadiko and StackSwap of ~$1.16M, with funds routed to Bitcoin, Ethereum, and Tornado Cash.
-CoinDCX: $15.99M USDT was drained from 40 TRON wallets reportedly still handling deposits; Tether froze $2.21M.
-X100: A flash-loan governance takeover captured 2 of 3 Senate seats and drained ~$4.85M USDT; the X token fell over 96%.
-Initia: A MoveVM cache flaw enabled $7.48M in unbacked token mints; $2.73M was bridged out before the network halted.
-Arkadiko: A single-wallet governance attack drained Arkadiko and StackSwap of ~$1.16M, with funds routed to Bitcoin, Ethereum, and Tornado Cash.
🔥11
📝 NOXCAT On-Chain Security Weekly | 2026.10.26–11.01
Binance: Attackers used Binance’s withdrawal system to move ~$6.3B across nine chains; ~$2.7B was frozen or rescued on-chain.
Polymarket: A compromised third-party provider routed drains through Polymarket’s relayer, costing 737 wallets ~$2.73M in about one hour.
b14g: A zero-withdrawal bug let one wallet empty 91 staking orders, taking 97.05M CORE (~$1.47M) before contracts were paused.
Bloom: A rapid wallet drain took 9,408 SOL (~$953K) from nine trading-bot users in 94 seconds; the precise access vector remains unconfirmed.
Weekly takeaway: Even the industry’s largest exchange faced a major security incident last week. As threats evolve, staying alert and protecting on-chain assets has never mattered more🙏🙏
Binance: Attackers used Binance’s withdrawal system to move ~$6.3B across nine chains; ~$2.7B was frozen or rescued on-chain.
Polymarket: A compromised third-party provider routed drains through Polymarket’s relayer, costing 737 wallets ~$2.73M in about one hour.
b14g: A zero-withdrawal bug let one wallet empty 91 staking orders, taking 97.05M CORE (~$1.47M) before contracts were paused.
Bloom: A rapid wallet drain took 9,408 SOL (~$953K) from nine trading-bot users in 94 seconds; the precise access vector remains unconfirmed.
Weekly takeaway: Even the industry’s largest exchange faced a major security incident last week. As threats evolve, staying alert and protecting on-chain assets has never mattered more🙏🙏
❤8🤯5