Blockaid

Introducing Blockaid's Risk Exposure: A real-time onchain compliance solution that lets organizations monitor addresses, transactions, and act the moment they're exposed to illicit funds. Powered by Blockaid’s first-party signals to make policies programmatically enforceable.

🚨 Community alert - BarnBridge Smart Yield approval risk Old BarnBridge Smart Yield governance proposals may put existing token approvals at risk if executed/upgraded maliciously. There is no confirmed drain at this time, but we recommend checking and revoking relevant Ethereum approvals ASAP. On-chain check: only proposals #14 and #15 are currently relevant; no other active/queued/executable BarnBridge governance proposals were found. Proposal #14 is in the executable grace window; proposal #15 is queued with on-chain ETA 2026-07-16 09:23:58 UTC. Relevant governance txs: #14 propose:0x07ff84e9372b9166f54f3de69b92371c113a370f08b1bef1e116c10ee48b7009 #14 queue:0x660048e026a8d2caa9f9d1e54ba8cdf197030ba8f99e8c0b935f950164ae4492 #14 abrogation:0xcb165e19f06bb481141ded0106cbfe84329c3d92fd035bc62cb04b802950fe80 #15 propose:0x33f10a42107ab4f80d1c39bad0233c8fd4ab56f15c0c6041ece18670c9edf82b #15 queue:0x2b6e6c2aec97f9dbc4efdc10b3aa86d4e4fe279a709d8a52a19b4f2ce672d824 #15 abrogation:0x11328fb729d9f697a28fce8adb17de890258d1110321a3602dbe272c7eebd412 Please use a trusted approval manager and type the URL directly: revoke.cash Check/revoke approvals to these Ethereum spender addresses: #14 USDC: 0xDAA037F99d168b552c0c61B7Fb64cF7819D78310 #15 DAI: 0x372d02e58a8Fcf42114232F614D57f31401d4C7D 0xe6c1A8E7a879d7feBB8144276a62f9a6b381bd37 0x37923EB0F4a9097B2774eAB9D928AFaD6196cf76 #15 USDC: 0x99230f93135f3650ab5706b7B6D4B30b4EE961C9 0xA4f8310CD972b1fc3CA9F130b235A91bc882baDb #15 USDT: 0xbF5649526aa1DC1dAA82ED29dDc65149278CA5d8 0x6ac048eE380cBf0Cb22c30401e710c28d91EB94d 0x7B1E1A841afE589F1b5337a2Eec41A18a58475Be #15 GUSD: 0x5cFcFb6171db72a26b84bc50EdD2d80b0F3fc094 #15 RAI: 0x02Cbe7FeAa8B969aCC43ab368B6ed45Cb63F3354 Do not trust reply links, “support” accounts, or DMs. Do not send funds or sign transfers — only revoke approvals through a trusted tool.

@atomic_kurogane @liquidityXBT @baseapp Thank you for reaching out. We've sent you a DM!

@liquidityXBT @blockaid_ @baseapp I did fill the form couple of times but nothing happened, idk their email 😅 and they don't have a DC or TG to get in touch with

Hi @blockaid_ team, I've submitted multiple appeals through the appeal form because my app has been incorrectly flagged as unsafe. It's simply a small arcade game, and this warning is making it difficult to onboard new users through @baseapp. It's also causing concern among my existing users. Since I've already appealed several times, I wanted to reach out here in the hope of getting your attention on this issue. Website: baseboard.cc Thanks for taking the time to look into this. cc: @Glennmon @DegenShaker @idobn @guye1296

Blockaid has been a Robinhood Chain partner since Day 1. Our team has continued to bolster detection across the ecosystem and help protect users from malicious threats. Blockaid already supports Robinhood Wallet by @RobinhoodCrypto, @uniswap, @fomo, and some of the biggest builders in the Robinhood Chain ecosystem. We're now opening up that same security tooling to Robinhood Chain builders, with access to the Blockaid platform and APIs. Eligible developers can get free access to Blockaid’s platform for up to 90 days. Get started here: blockaid.io/robinhood

Blockaid brings real-time transaction protection to @RobinhoodCrypto. Robinhood Chain brings RWAs onchain, and Blockaid adds a real-time security layer that protects users at the point of every transaction. Read More: blockaid.io/blog/blockaid-…

In financial services the product is trust.

Example exploit tx: arbiscan.io/tx/0x020995ec0… Exploiter: arbiscan.io/address/0xce1a… Root cause: Sodium smart accounts performed token approvals as a side effect of UserOp validation, letting an attacker-controlled paymaster/spender obtain allowances from many accounts, then drain them.

🚨Blockaid's exploit detection system has identified an ongoing exploit related to @Lumi_Finance protcol on Arb. ~$270k drained so far. More details in 🧵

The malicious classification is based on a front-end compromise of streamflow.finance, not the underlying protocol itself. We identified that the primary "Streamflow application" link on the homepage redirects users to uflow.finance instead of the legitimate app.streamflow.finance. Uflow is a confirmed wallet drainer that attempts to trick users into connecting their wallet and signing malicious transactions, potentially resulting in asset theft. The malicious link is still present, so until the issue is confirmed to be fully remediated, we will continue classifying the site as malicious to prioritize user safety. If needed, you can create an organization-specific benign override so your users won't see this classification. That said, we generally don't recommend doing so while the malicious link remains active, as it goes against our security-first best practices.

Please @SlushWallet help 😢 🐸 cc: @EmanAbio, @0xd34th

@PacificMeta 🔒

📣 Blockaid is now a Silver Sponsor of the Onchain Finance Summit on Wednesday, July 15! A business summit bringing together Japan's major financial institutions and leading global players at the frontier of blockchain × finance. Details & sign-up in the thread👇

@0xPredicate @trmlabs 🔒

Theft remains a barrier to blockchain adoption, with over $2.87B in digital assets stolen in 2025 according to @trmlabs. That’s why we’re partnering with @blockaid_ to provide automated compliance policies that protect against exploits, drainers, and other malicious activity.

Major recent events such as the SpaceX IPO and the 2026 FIFA World Cup attract malicious actors who deploy wallet drainers and fake investment platforms. Blockaid detects and prevents these threats in real time for wallets and exchanges. Read more: blockaid.io/blog/wallet-dr…

Update: After speaking with @justinsuntron and the @BitTorrent team, we've confirmed that the fund movement was intentional and not an exploit. The original tweet has been deleted.

The team approved the upgrade and drain done as part of internal operation, Not an exploit.

The team has notified me that they have completed the BTTC Bridge Sunset Program. Going forward, the BitTorrent team will focus more on decentralized AI and the maintenance of the BitTorrent decentralized protocol. All funds are safe, and users can continue to deposit and withdraw their BTTC Bridge funds through our partner centralized exchanges. @BitTorrent

Blockaid is attending Fintech Junction: Excited to be among the builders shaping the future of finance, creating tools that move the world forward. It's the same drive behind our work, bringing real-time security onchain. We look forward to meeting with everyone there.

@zubic_eth @gem_ilm 🔒

@gem_ilm > @blockaid_

Damn, yet another crazy exploit 😅 Blockaid caught an active exploit yesterday and around $6M was drained from Summer Finance’s Lazy Summer USDC vault. The attacker used a massive $65M flash loan to manipulate the vault’s accounting, inflating total assets in the Fleet Commander through an Ark strategy donation trick, then redeemed far more than they deposited and walked away with the difference in DAI. The attacker wallet is: 0x7bF716167B48CF527725722C6d79494b45B3BDCa The exploit contract is: 0x0514F827C129C16418a0933E03C99A6AF982FC61 Summer Finance has already paused the Lazy Summer vaults and is investigating the root cause. Just another DeFi reminder that flash loan accounting exploits keep happening because smart contract assumptions get tested in ways audits sometimes miss. Double check approvals, stay cautious with yield platforms, and don’t get too comfortable. What a way to start the week. Stay safe out there!

@0xPredicate 🔒

Predicate customers can now set automated compliance policies powered by @blockaid_ data. As soon as Blockaid identifies an address associated with an active exploit or malicious smart contract, Predicate prevents it from interacting with your onchain application or asset.