16h ago
Unleash Protocol governance exploit drains $3.9 million and routes 1,337.1 ETH through Tornado Cash
Unleash Protocol suffered a governance-level exploit that allowed an attacker to deploy an unauthorised contract upgrade and withdraw about $3.9 million in user assets. The incident, identified by PeckShieldAlert and later confirmed by the team, affected tokens including WIP, USDC, WETH, stIP, and vIP, with 1,337.1 ETH ultimately funneled into Tornado Cash via Ethereum bridges. Platform operations have been paused while external security specialists investigate how the multi-signature admin controls were bypassed.