Trusted by Coinbase, MetaMask, Stellar, and more to detect, understand, and protect against fraud, scams, and exploits in real time.
New York & Tel Aviv
Joined February 2023
- Tweets1.9K
- Following444
- Followers25.1K
- Likes1.7K
Pinned Tweet
Blockaid has partnered with @LayerZero_Core to bring real-time threat intelligence verification to its cross-chain messaging.
Bridge Sentinel is a Blockaid-operated DVN available to issuers on LayerZero.
It screens every message against Blockaid's fraud detection engine for forged source events, malicious counterparties, and stolen funds before the DVN signs and assets move cross-chain.
Learn more: blockaid.io/blog/blockaid-pa…
Traditional finance and payment institutions are rapidly adopting onchain technology, and @money2020 Las Vegas showcased that momentum.
Stablecoins, tokenized assets, and agentic payments are creating new ways to move money, and the security underneath has to evolve with them.
We are the Money Security Company, and the team that can help these new use cases scale safely.
Blockaid met with customers and prospects, learned what the industry needs, and showed why new financial rails need new risk infrastructure. We look forward to working with everyone building on these rails.
It was a proud week for the team that put this together, and for everyone behind the scenes bringing security onchain.
In 2026 so far, $1.18B has been stolen across 60 major onchain exploits. Less than 1% of the funds (just $9.8M) has made it back to those who lost it.
Since our H1 report, Blockaid has followed that money to see where it ended up and how much of it could have been frozen.
Today we’re publishing Blockaid’s 2026 Fund Recovery Threat Landscape, tracing each stolen asset to where it sits today, covering attacker speed, exit routes, freeze channels, and fund recovery mechanisms.
The findings that stood out most:
- Stolen funds typically moved within 17 minutes of the exploit
- In 68% of incidents, funds were moving within the first hour
- Every recovery relied on a freeze mechanism already in place
- Issuer blacklists and exchange freezes returned $0
- Only 5 of 60 incidents saw any funds recovered or frozen
Attackers moved over $1 billion in flash loans through one of the largest lending protocols to manipulate Balancer and extract $250K.
Illicit funds moving through the same markets expose traditional institutions to AML and sanctions risk.
Blockaid’s Risk Exposure gives compliance teams operating onchain real-time visibility into illicit fund flows and the understanding they need to stay compliant.
Read more: blockaid.io/blog/a-billion-d…
Root cause: eth.token::withdraw never requires max_fee ≥ 0 and debits quantity + max_fee. max_fee = −quantity charges 0; the bridge still logs a full withdrawal. The fee check is skipped when fee is 0; the safety check is an identity. Solana/Ethereum releases were honest.
Attack flow: 09:06 fasdfas.al created → 09:46 WAXUSDC withdraw −52,986.50 → 09:47 same on USDT/DAI/WETH/WBTC → 10:00 Solana pays 52,986.50 USDC → 10:05 Ethereum releases. ~$1,522 leftover is inventory vs WAX books. Code unchanged; still live.
We are all in on @money2020 Las Vegas!
New financial rails are here. Stablecoins. Tokenized assets. Agentic payments. The time to secure them is now.
Blockaid: The Money Security Company.
Visit us at Booth 21077
🚨 Update: The Unicrypt Vesting V2 (@UNCX_token) exploit has now hit 4 chains.
Total stolen: ~$1.49M
• BSC: ~$969k
• Ethereum: ~$242k
• Robinhood Chain: ~$169k
• Base: ~$114k
11 drain txs, including copycats and MEV bots. Full list 👇
🚨 Blockaid detected an ongoing exploit on @UNCX_token on ethereum.
~$86k drained from the shared vesting pool so far across 1 drain tx. Attack still ongoing. 🧵
Ethereum (~$242k)
Main drain (~$86k): app.blocksec.com/phalcon/exp…
Free Speech (𝕏) drain (~$152k): app.blocksec.com/phalcon/exp…
ZC copycats: app.blocksec.com/phalcon/exp… app.blocksec.com/phalcon/exp…
BSC (~$969k)
Setup: app.blocksec.com/phalcon/exp… app.blocksec.com/phalcon/exp… app.blocksec.com/phalcon/exp… app.blocksec.com/phalcon/exp… app.blocksec.com/phalcon/exp…
Drain: app.blocksec.com/phalcon/exp…
Dump to USDT: app.blocksec.com/phalcon/exp…
Robinhood Chain (~$169k)
CASHCAT drain (~$91k): app.blocksec.com/phalcon/exp…
RKST drain (~$78k): app.blocksec.com/phalcon/exp…
RKST sold: app.blocksec.com/phalcon/exp…
Base (~$114k)
Attack contract deployed, never used by its deployer: app.blocksec.com/phalcon/exp…
Same attack run by another address 3 blocks later (~$114k): app.blocksec.com/phalcon/exp…
Copycats: app.blocksec.com/phalcon/exp… app.blocksec.com/phalcon/exp… app.blocksec.com/phalcon/exp…
Blockaid is attending @money2020.
Adoption of stablecoins, tokenized assets, and agentic payments is accelerating, driven by blockchain-powered financial rails.
This infrastructure needs a new security layer, and that’s what Blockaid is delivering.
Find us at Booth 21077.
🚨 Blockaid detected an ongoing exploit on @UNCX_token on ethereum.
~$86k drained from the shared vesting pool so far across 1 drain tx. Attack still ongoing. 🧵
The attacker created vesting positions in the shared token pool, released a large one, donated tokens in, then cancelled a topped-up vest so a tiny leftover vest could withdraw other users' locked tokens.
Exploiter addresses: etherscan.io/address/0x78C9B… etherscan.io/address/0x6cEbD… etherscan.io/address/0xf6D07…
Example exploit tx: etherscan.io/tx/0x352065378c…
Victim / abused token: etherscan.io/address/0xA98F0…
Blockaid retweeted
1/ Security isn’t a feature. It’s infrastructure.
We’re excited to announce our partnership with @blockaid_.
Bringing industry-leading security infrastructure to Concrete Vaults and the depositors who use them.
Blockaid has partnered with @ConcreteXYZ to bring onchain monitoring and transaction validation to its vault infrastructure.
Onchain Monitoring watches its vaults and the venues they allocate into while Cosigner validates each transaction before signing, protecting the platform and every depositor on it.
Learn more: blockaid.io/blog/blockaid-br…
Blockaid retweeted
AI is getting better and better at hacking and the obvious target is financial infra & apps. If you are building in finance, security should be top of mind.
Since we released our H1 report in August the number of cyber incidents taking place onchain have continued to hit record highs month over month.
Threat actors are financially motivated and targeting onchain infrastructure is the highest ROI for hackers to make money.
This trend grows more acute as agentic access to capital grows.
Blockaid retweeted
Since we released our H1 report in August the number of cyber incidents taking place onchain have continued to hit record highs month over month.
Threat actors are financially motivated and targeting onchain infrastructure is the highest ROI for hackers to make money.
This trend grows more acute as agentic access to capital grows.
🤖 Made with AI
Blockaid retweeted
Together with @blockaid_ we're launching Blockaid Bridge Sentinel, a new DVN that screens proposed transactions against Blockaid's real-time threat intelligence engine.
Learn more about how it works↓
Blockaid has partnered with @LayerZero_Core to bring real-time threat intelligence verification to its cross-chain messaging.
Bridge Sentinel is a Blockaid-operated DVN available to issuers on LayerZero.
It screens every message against Blockaid's fraud detection engine for forged source events, malicious counterparties, and stolen funds before the DVN signs and assets move cross-chain.
Learn more: blockaid.io/blog/blockaid-pa…