Web3 Security - Web3 Daily Exploits

Daily Brief

Web3 Daily Exploits — 28 Aug 2026: Moonwell’s $8.7M MAMO hit; CCC pair drained on BNB

Moonwell on Base is still the window’s largest confirmed loss after an illiquid-collateral price attack; a separate CashCowCoin drain on BNB Chain took about $117K.

Daily Brief

Web3 Daily Exploits — 27 Aug 2026: Moonwell on Base left with ~$9M bad debt after MAMO collateral attack

Moonwell Base Core markets were drained via manipulated MAMO collateral; about $8.7M DAI now sits on Ethereum while protocol-side bad debt is tracking near $9.15M.

Exploits

Web3 Daily Exploits — 26 Aug 2026: Realio webapp signing-key, ENJ DELEGATECALL, Comet AMM, ...

Realio webapp key compromise swept 124M+ RIO across five chains; Enjin Crypto Items proxy takeover minted a manager and melted ~5.24M ENJ; Comet AMM on Stellar was drained ~$750K; a Pendle TWAP nudge forced ~$36M in Morpho PT-reUSD liquidations.

Exploits

Web3 Daily Exploits — 25 Aug 2026: Comet AMM $750K Drain on Stellar & Enjin $142K ERC-1155 Bypass

Comet AMM $750K Stellar drain via same-asset swap accounting bug; Enjin $142K via malicious ERC-1155 transfer adapter; warp.green $93K bridge hit. White-hat offers active.