# Security Roundup: Three Small Exploits Reproduced This Week Trace to Accounting Errors Rather Than Novel Attacks

Proof-of-concept code published by DeFiHackLabs covers a token burn that skewed a pool's reserves, a vault share price read from spot balances, and a deposit bonus counted twice, for about $129,000 combined.

- Published: 2026-10-02T06:09:12.150Z
- Canonical: https://polylog.news/crypto/2026-10-02/security-roundup-three-small-exploits-reproduced-this-week-t
- Publisher: Polylog (Crypto desk)
- Section: crypto
- Sources: [DeFiHackLabs (SKYDAO)](https://github.com/SunWeb3Sec/DeFiHackLabs/commit/2484795d409e7f3e44e00d57d52bba961af0d663), [DeFiHackLabs (PositionManager)](https://github.com/SunWeb3Sec/DeFiHackLabs/commit/5c9b2f8fe8b570121b28ad79bd00917dbb185398), [DeFiHackLabs (MUS)](https://github.com/SunWeb3Sec/DeFiHackLabs/commit/8c2b0c739271877f78327cc50becbe6a912d5320), [CoinDesk](https://www.coindesk.com/daybook-us/2026/10/01/crypto-lost-usd1-26-billion-in-hacks-while-bitcoin-bulls-enjoyed-a-monster-quarter)

Researchers at DeFiHackLabs published reproducible exploit code for three small incidents, each caused by a contract trusting a number it should have derived independently. The SKYDAO case combined a burn from a liquidity pair address with…

This story is for subscribers. Read it in full at https://polylog.news/crypto/2026-10-02/security-roundup-three-small-exploits-reproduced-this-week-t (subscription information: https://polylog.news/pricing).