Whale Drained Twice: $25.6 Million Crypto Disaster

Crypto security didn’t just have a bad week — it had the kind of week where the entire industry wakes up face-down on the floor, one sock missing, staring at a ceiling that has started to peel in perfect rectangular strips. Between August 9 and August 15 the sector managed to lose another $37 million to phishing drains, cross-chain breaches, minting fiascos, and one protocol whose pricing logic apparently stood up, stretched, and walked out for a very long lunch. And that was before the Coldcard firmware exploit kept working its way through seed-vulnerable wallets with the quiet determination of something that had found an unlocked back door and decided the furniture looked comfortable.

The headliner was the same crypto whale who got drained for $25.6 million — again. Same wallet, same tragic encore. In 2023 the whale signed malicious approvals and lost $24.2 million, only to get most of it back from an attacker who either possessed a conscience or an unusually sophisticated sense of public relations. This time the refund window stayed closed. Just 20 million DAI and 3,000 ETH sitting in four attacker wallets like expensive trophies arranged on a very public shelf. Security researchers still cannot decide whether it was phishing or a private-key compromise, but the image remains the same: a grown adult slipping on the identical banana peel in front of the entire industry for the second time while everyone else pretends the peel is part of the décor.

Coinsbuy delivered a $7.9 million cross-chain drain that hit Ethereum and TRON at the exact same moment — a coordinated two-chain siphon that looked less like elite hacking and more like someone calmly walking into the server room, flipping a series of labeled switches, and then leaving with a polite nod. The attacker tested the system with 5 USDT, drained millions, and washed the proceeds through Monero with the tidy efficiency of a person who had practiced the route in advance.

Harmony supplied the week’s purest visual absurdity: an alleged 4 billion ONE mint, roughly 26 percent of the circulating supply, generated through “empty blocks” while the totalSupply endpoint continued reporting that everything was perfectly normal. The dilution hit like a sudden weight drop. The price cratered 38 percent in a single day. Harmony rushed out an emergency patch, paused the bridge, and began the familiar ceremony of asking exchanges to freeze whatever funds still had visible addresses attached.

Coreum’s bridge lost 200,000 XRP because its relayer decided memos were good enough and verification was optional. Oraichain shut its entire network after unauthorized ORAI minting. USM Protocol lost $136K because its redemption math cheerfully paid attackers who simply sliced transactions into smaller, more profitable pieces.

The pattern is no longer subtle. The code is not the only thing failing. Keys, permissions, minting paths, verification logic, firmware — the parts everyone assumes will simply behave — keep proving they will not. Crypto did not merely get hacked this week. Crypto got a very public, very expensive reminder that the infrastructure still contains more open doors than anyone is prepared to admit.