Explore the mechanism, follow the evidence and understand the limits. Films and sourced reading, connected in one place.
A vesting balance and its share records came apart. Check what left the Ethereum manager, then inspect the later return as its own transaction.
Vesting accounting · Written caseOpen the record ↗
1:51 film ↗Twenty-seven minutes between the test transaction and the first large transfer. The film reads each one from its receipt, including a stranger's contract that wrote a thousand token events into one transaction.
Exchange · Film & evidenceOpen the record ↗
1:55 film ↗One signature check, then about 2.3 billion tokens minted across four projects. The headline said $16.77M. Followed sale by sale, the liquid proceeds come to roughly $2.29M.
Bridge · Film & evidenceOpen the record ↗
2:14 film ↗A thin pool, a ninety-nine dollar quote and an oracle that returned the midpoint. The exploit happened on Starknet, which Forensia does not read, so the film reports that part with its sources and starts its own record where the money lands on Ethereum.
Oracle · Film & evidenceOpen the record ↗
2:17 film ↗About four thousand bitcoin left a sidechain's reserve and no key was stolen. Four hours later a note appeared in a transaction: we are whitehats. 3,400 bitcoin came back. 598 did not, and it is still sitting at the same address.
Bridge · Film & evidenceOpen the record ↗
2:59 film ↗KiiChain reported 18 drains exploiting shared Cosmos EVM balance accounting. Follow the film from prepared vesting accounts to the BNB Chain sales, and see why a network halt could only contain funds that had not left.
Balance accounting · Film & evidenceOpen the record ↗
2:47 film ↗Two wallets lost roughly 720.9 million MANTRA through shared Cosmos EVM balance accounting. The film follows the preparation, repeated transfers and chain halt, then separates funds contained from funds recovered.
Balance accounting · Film & evidenceOpen the record ↗
2:06 film ↗A firmware update left some hardware wallets choosing keys with weak randomness. 594 bitcoin arrived at one address, 562 moved once in a 341-input transaction, and it is still sitting there.
Key generation · Film & evidenceOpen the record ↗
2:50 film ↗Ostium accepted a Bitcoin price of $5,000, then roughly $60,000 inside the same transaction. The film follows the artificial profits, the vault payouts and the reported exit into ETH.
Oracle · Film & evidenceOpen the record ↗
1:24 film ↗No keys were stolen. Three signers approved what looked like a routine transfer. The call trace shows what it was: a delegatecall that ran someone else's code with the wallet's authority.
Signing · Film & evidenceOpen the record ↗The signing interface and the executed transaction told different stories. Start with the ownership event, then follow the record.
Signing · Written caseOpen the record ↗A donation changed a position before a profitable self-liquidation.
Lending accounting · Sourced readingOpen the record ↗A verification failure enabled many addresses to repeat similar withdrawals.
Bridge verification · Sourced readingOpen the record ↗A curated learning catalogue, not an exhaustive loss database. Multi-day incidents sort by their first listed date. Historical incident coverage does not imply a current vulnerability. No aggregate dollar total mixes differing dates or valuation methods.