Security Intelligence
In-depth breakdowns of real security incidents — what happened, why it happened, and what the industry can learn.
Maya Protocol's $11M Exploit: How Six Chained Bugs Turned a Ghost Transaction Into a $CACAO Money Printer
Maya Protocol halted MAYAChain on August 19, 2026 after an attacker exploited a chain of six discrete software vulnerabilities to manufacture 49 million $CACAO tokens from thin air, drain pools of Bitcoin and other assets, and trigger an 89% collapse in the token's price — causing $10.9M in total losses across liquidity providers, arbitrageurs, and token holders.
Harmony's $ONE Plunges 40% After Attacker Mints Four Billion Tokens Equal to a Quarter of Supply
An attacker exploited the Harmony blockchain to mint four billion $ONE tokens without authorisation — roughly 25% of the circulating supply — causing the token price to fall 40%. Harmony paused its token bridge, requested exchange freezes on four attacker addresses, and raised the possibility of a full blockchain rollback, reviving an ongoing debate about immutability versus incident recovery in public blockchains.
Ravencoin's KAWPOW Consensus Flaw: How a Single Unchecked Header Field Put Four Days of Transactions at Risk
A critical gap in Ravencoin's KAWPOW proof-of-work validation allowed an attacker to insert invalid blocks from height 4,487,776, splitting the network and threatening to reverse nearly four days of transactions. Major mining pools deployed an emergency patch and began rebuilding a clean chain from the last known-good block while exchanges suspended RVN flows to limit double-spend exposure.