Cybercentry Exploit Watch 🚨 Gamdom - $4.2M Lost Attack Vector: Private key leaked through compromised infrastructure Failure: Frontend & Infrastructure

Cybercentry Exploit Watch 🚨 GMX V1 EVM - $565K Lost Attack Vector: Stale Price Arbitrage Failure: Market Manipulation

Cybercentry Exploit Watch 🚨 AlpsCon AI Trade Hub - $153K Lost Attack Vector: Incorrect share accounting, where the contract miscounted user shares Failure: Token & Share Accounting

Cybercentry Exploit Watch 🚨 GMX V1 EVM - $42M Lost Attack Vector: Reentrancy Failure: Reentrancy

Railway has disclosed a security incident: an unauthorised third party may have accessed encrypted customer environment variables and, in some cases, obtained the decrypted contents. These can include API keys, database credentials, and registry secrets. Railway believes it is part of a series of attacks targeting platform companies to compromise AI inference providers. Action required: Immediately revoke and reissue all environment variables and secrets stored in Railway. Also review logs for unusual activity. Deployments are currently paused. Full disclosure: blog.railway.com/p/security-…

UK NCSC is urging organisations to take immediate action on critical PHP vulnerabilities CVE-2026-109618 & CVE-2026-109619 (PHP2Shell). Unauthenticated RCE possible on any PHP web server. Update now to 8.5.12 / 8.4.27 / 8.3.36 / 8.2.35 (or supported vendor equivalent). If you can’t patch or apply temporary mitigations, take the system offline. ncsc.gov.uk/news/critical-se…

Cybercentry Exploit Watch 🚨 Demex Perp - $192K Lost Attack Vector: Cross-Chain Message Spoofing Failure: Bridge & Cross-Chain

Cybercentry Exploit Watch 🚨 Makina - $4.2M Lost Attack Vector: Spot Price Manipulation Failure: Oracle Manipulation

Cybercentry Exploit Watch 🚨 GoldPesa - $115K Lost Attack Vector: Incorrect Share Accounting Failure: Token & Share Accounting

EVM Security Snapshot | Last 7 Days A weekly look at the security health of the EVM ecosystem Cybercentry supports. This week: ➠ Incidents: 3 ➠ Total Value Hacked: $578K ➠ DeFi Losses: $578K ➠ Bridge Losses: $0 Attack types: ➠ Access Control — $538K ➠ Token & Share Accounting — $22K ➠ Solidity — $18K 3 incidents across the supported chains this week, totalling $578K. Every entry is one more pattern the network learns from. As the ecosystem grows, we'll continue tracking incidents, losses and emerging risks week by week.

Cybercentry Exploit Watch 🚨 MakerDAO ETH-A Liquidation Keeper Bot - $538K Lost Attack Vector: Improper access control Failure: Access Control

Protocol logic that allows arbitrary address registration without subsequent verification steps invites gradual privilege escalation over time. Introducing an explicit approval window after registration, followed by a separate activation call, breaks the escalation chain.

The most reliable way to surface emerging attack patterns is continuous comparison of live contract behaviour against a baseline of expected state transitions. Deviations appear first as anomalies in call frequency or storage writes long before value is lost.

Bridge designs that treat incoming messages as trusted after a single signature verification continue to surface the same structural weakness. Requiring an additional on-chain state proof before executing cross-chain actions changes the risk profile without adding noticeable

Access control checks placed only at the outer layer create a single point that, once bypassed, exposes every internal function. Placing redundant verification deeper in the call stack forces any attacker to satisfy multiple independent conditions.

Cybercentry Exploit Watch 🚨 FlashLoopAdapter - $305K Lost Attack Vector: Improper Access Control Failure: Access Control

EVM Security Snapshot | Last 7 Days A weekly look at the security health of the EVM ecosystem Cybercentry supports. This week: ➠ Incidents: 4 ➠ Total Value Hacked: $6.4M ➠ DeFi Losses: $6.4M ➠ Bridge Losses: $5.9M Attack types: ➠ Bridge & Cross-Chain — $3.8M ➠ Social Engineering — $2.1M ➠ Access Control — $305K ➠ Protocol Logic — $183K 4 incidents across the supported chains this week, totalling $6.4M. Every entry is one more pattern the network learns from. As the ecosystem grows, we'll continue tracking incidents, losses and emerging risks week by week.

Cybercentry Exploit Watch 🚨 NEAR Intents - $3.8M Lost Attack Vector: Bridge logic flaw Failure: Bridge & Cross-Chain

Cybercentry Exploit Watch 🚨 SKYDAO - $183K Lost Attack Vector: Swap logic flaw Failure: Protocol Logic

Cybercentry Exploit Watch 🚨 Fake GIWA Bridge - $2.08M Lost Attack Vector: Impersonation Scam Failure: Social Engineering