Web3 Daily Exploits — 26 Aug 2026: Realio webapp signing-key, ENJ DELEGATECALL, Comet AMM, ...

Realio webapp key compromise swept 124M+ RIO across five chains; Enjin Crypto Items proxy takeover minted a manager and melted ~5.24M ENJ; Comet AMM on Stellar was drained ~$750K; a Pendle TWAP nudge forced ~$36M in Morpho PT-reUSD liquidations.

Web3 Daily Exploits — 25 Aug 2026: Comet AMM $750K Drain on Stellar & Enjin $142K ERC-1155 Bypass

Comet AMM $750K Stellar drain via same-asset swap accounting bug; Enjin $142K via malicious ERC-1155 transfer adapter; warp.green $93K bridge hit. White-hat offers active.

Web3 Daily Exploits — 22 Aug 2026: Sandbox LayerZero OFT Delegate Hijack, BounceBit, MANTRA

LayerZero OFT delegate tokeover, BounceBit retirement and address poisoning

Web3 Daily Exploits — 20 Aug 2026: Maya Protocol, Allbridge CCTP Bridge, Tornado Cash

Technical incident report from the last 24 hours