No keys were stolen. Three signers approved what looked like a routine transfer. The call trace shows what it was: a delegatecall that ran someone else's code with the wallet's authority.
One signature check, then about 2.3 billion tokens minted across four projects. The headline said $16.77M. Followed sale by sale, the liquid proceeds come to roughly $2.29M.
A firmware update left some hardware wallets choosing keys with weak randomness. 594 bitcoin arrived at one address, 562 moved once in a 341-input transaction, and it is still sitting there.
Twenty-seven minutes between the test transaction and the first large transfer. The film reads each one from its receipt, including a stranger's contract that wrote a thousand token events into one transaction.
A thin pool, a ninety-nine dollar quote and an oracle that returned the midpoint. The exploit happened on Starknet, which Forensia does not read, so the film reports that part with its sources and starts its own record where the money lands on Ethereum.
Everything on Starknet is reported, not observed. The record here starts at the Ethereum arrival and stops at an address that has not sent a transaction.
About four thousand bitcoin left a sidechain's reserve and no key was stolen. Four hours later a note appeared in a transaction: we are whitehats. 3,400 bitcoin came back. 598 did not, and it is still sitting at the same address.
The flaw itself happened on Liquid, which Forensia does not read, so that part is reported. Forensia shows the note transactions and their amounts but does not decode the note text; the wording is read from the transactions on a public explorer.
KiiChain reported 18 drains exploiting shared Cosmos EVM balance accounting. Follow the film from prepared vesting accounts to the BNB Chain sales, and see why a network halt could only contain funds that had not left.
Native KiiChain transactions and full Hyperlane settlement are not independently verified by this page. Reported recovery is separate from assets actually returned; no person is identified.
Two wallets lost roughly 720.9 million MANTRA through shared Cosmos EVM balance accounting. The film follows the preparation, repeated transfers and chain halt, then separates funds contained from funds recovered.
Forensia does not currently read native MANTRA Chain transactions. External explorer links are source reading, not workspace captures. The related KiiChain BNB lookup is a separate incident, not a bridge trail from MANTRA.
Ostium accepted a Bitcoin price of $5,000, then roughly $60,000 inside the same transaction. The film follows the artificial profits, the vault payouts and the reported exit into ETH.
The reports do not establish exactly how price-reporting access was obtained or who controlled the addresses. A mixer deposit does not establish a matching withdrawal.
Watch · 1:24 ↗
