On July 26, 2026, two decentralized finance protocols—DripsNetwork and 42dao—reported significant security breaches resulting in combined losses of nearly $937,000. Both incidents were brought to light by blockchain security commentator @SlowMist_Team, exposing critical vulnerabilities in smart contract design and oracle price feeds.
DripsNetwork disclosed a loss of 24,882.99 DAI due to an integer conversion flaw in its DaiDripsHub contract. The vulnerability resided in the `give(address,uint128)` function, which failed to properly validate input. This allowed an attacker to reverse fund flows, effectively draining DAI from the protocol’s reserves. The error underscores the importance of strict input validation in smart contracts, especially those handling user funds.
Meanwhile, 42dao confirmed a loss of approximately $912,000 stemming from a manipulated BTCB price on its oracle system. Attackers exploited the lack of price validation checks to liquidate multiple vaults at an artificially low BTCB rate. The incident highlights the dangers of relying on oracle mechanisms without robust safeguards against price manipulation.
Both exploits have heightened concerns about security across the DeFi ecosystem, prompting calls for enhanced auditing and real-time monitoring. As the market braces for potential regulatory scrutiny, users and developers are reminded of the persistent risks in decentralized finance.
