Forta Detects Major Phishing Operation on Ethereum Mainnet

🎣 Silent Thieves Strike Again

By Forta
Aug 4, 2025, 2:44 PM
twitter

Forta's security monitoring revealed a significant phishing campaign on Ethereum Mainnet:

  • 1,069 malicious contracts identified
  • 181.​5 ETH and 178 different tokens stolen
  • Total losses exceed $868K

A detailed case study shows how one victim lost $59,000 in WBTC through a single malicious approval.​ The attack happened gradually:

  • Initial phishing transaction granted token approvals
  • Multiple small withdrawals to avoid detection
  • Victim remained unaware throughout the process

Key Security Tips:

  • Regularly revoke unused approvals
  • Monitor wallet activity frequently
  • Verify all dApp interactions thoroughly

Remember: Most crypto thefts occur silently, one transaction at a time.​

Sources
Read more about Forta

BNB Chain Pool Exploited for $198K via Burn-Based Price Defense Manipulation

BNB Chain Pool Exploited for $198K via Burn-Based Price Defense Manipulation

**Attack Details** An attacker drained approximately $198,000 from the BFB/WBNB liquidity pool on BNB Chain by exploiting a burn-based price defense mechanism. **How It Worked** - The attacker used zero-value self-transfers to manipulate the system - This caused the BFB reserve to collapse - Once depleted, minimal amounts (dust) could be swapped for the pool's entire WBNB holdings **Detection** Forta Firewall successfully flagged the suspicious activity in real-time. **Pattern Recognition** This follows a similar attack on June 22, where $1.11M was drained from the LABUBU pool using a different but related exploit involving fee-on-transfer mechanics.

Summer Finance Loses $6M in Flash Loan Attack Despite Detection

Summer Finance Loses $6M in Flash Loan Attack Despite Detection

**Summer Finance suffered a $6M exploit** through flash loan manipulation on July 6, 2026. **Attack mechanics:** - Attacker borrowed $65.4M via flash loan - Manipulated liquidity pools to extract profit - Forta Firewall detected the attack in real-time **Key limitation:** While Firewall flagged the attack, it could only block execution on Firewall-protected chains. Summer Finance's chain lacked this protection layer. This incident follows a pattern of flash loan exploits in recent weeks, including attacks on Edel Finance ($400K) and DLMC Token ($226K).

IoTeX Bridge Loses $8M in 90 Minutes Through Compromised Private Key

IoTeX Bridge Loses $8M in 90 Minutes Through Compromised Private Key

**IoTeX Bridge Exploit: $8M Drained** The @iotex_io Bridge suffered a major security breach on February 28, 2026, losing $4.3M initially and escalating to $8M within 90 minutes. The attack was executed through a single compromised private key. **Key Details:** - Attack vector: Compromised private key - Timeline: $4.3M → $8M in 90 minutes - Detection: Forta Firewall caught the attacker's mainnet movements in real-time **Recent Context:** Just two days earlier, a @FOOMCASH lottery-contract exploit put $1.8M at risk. Forta Firewall flagged the attack in real-time and successfully blocked it on Firewall-enabled chains. This incident highlights the ongoing security challenges in cross-chain infrastructure and the critical importance of private key management in blockchain systems. Real-time detection systems like Forta Firewall are proving essential for identifying threats, though prevention remains dependent on proper security practices. Learn more about Forta Firewall: [Introducing Forta Firewall](https://forta.org/blog/introducing-forta-firewall/)

Forta Firewall Featured in Messari's State of AI Report

**AI-powered blockchain security gains recognition** as Forta Firewall appears in Messari's latest State of AI report. The inclusion highlights how **artificial intelligence is becoming integral** to onchain security infrastructure. Forta's AI-driven transaction screening technology represents the evolution of blockchain defense mechanisms. - AI-powered attackers require AI-powered defenders - Real-time transaction screening at scale - Growing integration across multiple blockchain networks With **290M+ transactions already screened**, Forta Firewall demonstrates practical AI implementation in blockchain security, moving beyond theoretical applications to active threat detection.

🚨 Yearn Finance Loses $9M

🚨 Yearn Finance Loses $9M

**Yearn Finance suffered a $9M exploit** on mainnet through a sophisticated price manipulation attack. **How the attack worked:** - Attacker drained liquidity pools - Broke pricing mechanisms - Minted cheap yETH tokens - Sold them for regular ETH at inflated prices **Detection vs Prevention:** Forta Firewall **flagged the exploit in real time** but couldn't stop it. The attack happened so fast that only real-time detection was possible. **Key insight:** Pre-execution screening could have **prevented this attack entirely** rather than just detecting it after the damage was done. This follows a pattern of recent price manipulation exploits, including attacks on DRLVaultV3 (~$100K) and RWB (~$180K), highlighting the critical need for **proactive security measures** in DeFi protocols.

otherGovernance