preferred on
Points of Focus
- Fogo halted mainnet after 400 million FOGO were stolen.
- Injective ecosystem apps were hit through 299 binary-options markets.
- AKE surged more than 370% from its daily low.
- A Rain contract flaw affected more than 2,300 crypto-card users.
- Aquifer lost about $2.45 million across 212 fraudulent settlements.
Some of crypto’s strangest moves this week happened well outside the usual large-cap headlines. Between Aug. 28 and Sept. 3, a Layer 1 lost control of more than 10% of its circulating supply, a little-known AI token briefly traded nearly five times above its daily low, and a Solana AMM processed settlements against accounts claiming roughly $18 trillion in USDC.
Five stories stood out for the size of the numbers and the unusual mechanics behind them.
Fogo halted its chain after 400 million tokens were stolen
Fogo Foundation disclosed that 400 million FOGO, equal to 4% of genesis supply and more than 10% of circulating supply at the time, had been transferred during a compromise. The network continued processing transactions initially before Fogo temporarily halted mainnet on Aug. 29 to restrict movement of the affected assets.
Fogo returned online on Sept. 2. In its restart update, the project said 237 million of the 400 million affected tokens had been recovered and permanently removed from total supply. Recovery efforts for the remainder continued with centralized exchanges and law enforcement.
The shutdown followed another chain-wide emergency earlier in the week, when Cronos halted its entire network after a $75 million Tectonic exploit.
Injective exploit involved 299 binary-options markets
An attacker sent 7,109 transactions over 19 hours, including the creation of 299 insurance funds and 299 instant binary-options markets, according to an analysis of Injective archive-node data. The same investigation traced about 1,979.8 ETH, worth roughly $4.9 million, to an Ethereum address.
Injective later confirmed an exploit affecting a small number of ecosystem applications running binary-options markets and said contributors coordinated an accelerated network upgrade.
The project said its protocol, consensus, INJ, user funds and staked assets remained secure. It also challenged reports describing the incident as an exploit of the underlying blockchain.
AKE briefly climbed more than 370% from its daily low
AKEDO’s AKE token produced one of the week’s sharpest small-cap moves. CoinGecko market data recorded a 24-hour range of $0.007688 to $0.03638, putting the peak about 373% above the low and marking a new all-time high.
Trading activity accelerated with the rally. CoinGecko recorded more than $200 million in rolling 24-hour volume at one point, up more than 1,100% from the previous day. The move joined a run of unusual activity in smaller assets, including a $378 memecoin trade that grew to roughly $695,000 on Robinhood Chain.
Derivatives access expanded on the same day. Bitget launched AKEUSDT perpetual futures on Sept. 2 with leverage of up to 10x and support for trading bots. Available data does not establish a single trigger for the rally.
One Rain contract exposed thousands of crypto-card users
A flaw in an outdated Solana contract used across Rain’s stablecoin-card infrastructure spread across several card programs on Aug. 28. Blockaid’s reconstruction identified 2,945 AddCollateralAdmin calls and 5,288 withdrawals, adding up to 8,233 core exploit transactions in roughly two and a half hours.
Avici lost $500,859 across 1,685 users, and Tria lost about $431,945 across 636 users. Solayer Pay was also affected.
Blockaid traced roughly $1.1 million in proceeds as the attacker swapped stolen stablecoins, bridged funds to Ethereum and sent about 455.9 ETH into Tornado Cash. Rain later upgraded the affected contract version across its programs.
Aquifer paid out 212 swaps against a fake $18 trillion balance
Solana AMM Aquifer lost about $2.45 million in 45 minutes on Aug. 31 after an attacker supplied fake token accounts claiming balances equivalent to roughly $18 trillion in USDC, according to SonarX’s transaction-level reconstruction.
Aquifer was the second notable DeFi exploit around the turn of the month. On Sept. 1, More Markets lost $9.3 million in WFLOW after an attacker used unbacked liquid-staking tokens as collateral.
In Aquifer’s case, the fake accounts used u64::MAX as their recorded balance and were controlled by the attacker’s program. The protocol released real assets across 212 settlements. Arbitrage activity kept replenishing the affected pools, taking gross outflows to $4.06 million against a net loss of $2.45 million.
About 12 hours later, Aquifer’s multisig signed an onchain offer asking for at least 80% of the assets to be returned by Sept. 3 at 14:00 UTC. The attacker could retain up to 20% as a bounty if the terms were met.
Share
Most read articles
