Fresh On-Chain Thefts Catalogued, Led by a Roughly 800,000-Dollar Stablecoin Drain

Security researchers documented several incidents over the past day. The largest, labeled BCE, involved roughly 800,000 dollars in Tether, according to a proof-of-concept reproduction published by the research collective DeFiHackLabs. A second incident, labeled CheckoutPool, accounted for about 85,730 dollars in USD Coin. A third, StakeOnMe, lost roughly 0.28 Ether, a small sum that still warranted a documented reproduction.

The published commits reconstruct each attack so other developers can study it, but they do not yet identify a single root cause for the BCE drain. These mid-size losses usually trace to a familiar set of methods: access-control gaps that let an attacker call a privileged function, price or oracle manipulation through a flash loan, or logic and rounding errors in contract math. Without a confirmed post-mortem, the attribution and the precise mechanism remain open.

Separately, the exploit tracker Rekt News continues to maintain entries for protocols including Secret Network and Syscoin, part of a running record of bridge and validator-level compromises that have caused the bulk of large DeFi losses.

The pattern itself is the point. Even with prices subdued and trading volume thin, the rate of small and medium thefts has not slowed, which suggests the attack surface is structural rather than tied to a rising market. None of the funds in the newly catalogued incidents have been reported frozen or recovered.