Three Major DeFi Attacks in Five Days as May 2026 Hack Count Reaches 14

Echo Protocol has been hit by an exploit tied to a vulnerability on the Monad network, enabling an attacker to mint 1,000 eBTC worth about $76.64 million, ChainCatcher reported. PeckShield data shows the attacker deposited 45 eBTC (around $3.45 million) into Curvance, borrowed 11.29 WBTC, bridged the funds to Ethereum and swapped into ETH. A total of 384 ETH was then sent to Tornado Cash. Curvance said it has suspended the impacted market and emphasized its smart contract was not breached, adding that other markets remain unaffected. Echo Protocol has halted all cross-chain transactions. Monad CEO Keone Hon said the issue did not compromise the Monad network itself. Security researchers estimate the realized loss at roughly $816,000. The episode lifts the number of crypto hacks recorded in May to 14, including three major DeFi incidents over the past five days. THORChain suffered a treasury exploit on May 15 with losses exceeding $10 million. Three days later, the Verus Ethereum cross-chain bridge was attacked, with estimated losses of about $11.58 million. The clustering of incidents underscores persistent, system-level security risks across the DeFi sector.