Morning Edition · Wednesday, September 16, 2026Published at 1:44 AM EDT · New York
New exploit reproductions published this week cover a dormant DAO takeover for roughly $337,000, a Uniswap V4 hook that valued collateral at unbounded spot price, and a refund-before-sell reentrancy bug.

Three exploit reproductions were published in the DeFiHackLabs repository over the past two days, and none of them involve a compiler bug or an obscure cryptographic flaw. Each involves a component that worked exactly as its authors specifi…
Track on-chain flows, protocol shifts, stablecoins, and regulation.
The Global Intelligence Brief stays free.
Part of a tracked trend
Losses Move to Components That Worked as Designed
A growing share of DeFi losses will come not from buggy contract code but from components behaving exactly as specified — oracle forwarders, validator signature sets, governance votes and other trusted off-contract inputs — so audits and bug bounties scoped to on-chain code keep missing the failure surface, and protocols will be repeatedly forced to extend review, scope and monitoring to their privileged operational infrastructure.
Start a discussion in Townsquare.
More from this edition
Comments
0No comments yet.