# A wave of exploit write-ups points at privileged paths that worked exactly as specified

Abandoned governance contracts, a manipulated oracle on Starknet and stolen cloud credentials at SingularityNET produced losses that no smart-contract audit of the affected code would have flagged.

- Published: 2026-09-30T06:00:33.939Z
- Canonical: https://polylog.news/crypto/2026-09-30/a-wave-of-exploit-write-ups-points-at-privileged-paths-that
- Publisher: Polylog (Crypto desk)
- Section: crypto
- Sources: [DeFiHackLabs (StrongBlock PoC)](https://github.com/SunWeb3Sec/DeFiHackLabs/commit/1dee165a8760240238590a2a3f46ceec8810c534), [DeFiHackLabs (TermFinance PoC)](https://github.com/SunWeb3Sec/DeFiHackLabs/commit/8d774f11cf023bde9fd7691abae7ea943db01110), [DeFiHackLabs (FHToken PoC)](https://github.com/SunWeb3Sec/DeFiHackLabs/commit/7e2721886d989afe6e8546a085ea3c96c131c662), [Rekt News](https://www.rekt.news/), [crypto.news](https://crypto.news/strongblock-loses-72k-after-attacker-hijacks-abandoned-governance-system/), [IACR ePrint 2026/2273](https://eprint.iacr.org/2026/2273), [Polylog editors](https://polylog.news)

DeFiHackLabs published reproducible proofs of concept this week for three incidents, and two of them are governance captures rather than code bugs. In the StrongBlock case, an attacker bought roughly 200,984 STRNGR on a Uniswap V2 pair for…

This story is for subscribers. Read it in full at https://polylog.news/crypto/2026-09-30/a-wave-of-exploit-write-ups-points-at-privileged-paths-that (subscription information: https://polylog.news/pricing).