Top story
Compiling today's incident record
From the DefiLlama hacks catalogue
The front page is assembled from public records each time it is opened. Incidents appear below once the catalogue has been read.
The front page is assembled from public records each time it is opened. Incidents appear below once the catalogue has been read.
Amounts are DefiLlama's estimates at the time of each incident. A dash means no figure was published.
Loading roughly 350,000 listed domains…
Printed defanged, as text only. These are not links. Do not type them into a browser.
No. The ledger holds what DefiLlama has catalogued under the Solana chain. Individual wallet drains, small rugs and most phishing losses never reach a public database.
Attack techniques travel: approval abuse, leaked keys, hijacked front ends. Items that mention Solana or its apps carry a Solana slug so you can filter to them.
ScamSniffer releases its open list with a seven-day delay and keeps the live feed for partners. An unlisted domain is not a safe one; open apps from your own bookmarks.
Move whatever remains to a newly created wallet, revoke token delegates from a block explorer or your wallet's settings, and refuse anyone who asks for your recovery phrase to "fix" it. That request is the second half of the scam.