A tough weekend for DeFi hacks saw a total of $7 million lost in four separate incidents.
The disruption on the Sui network lasted until the end of last week and eventually expanded to three incidents. Early this week, the popular Euro crypto card Gnosis Pay warned users to withdraw their money.
The hacks
Despite acting first, Fluid did not announce a compromise of its ‘rewards distribution infrastructure’ until Sunday, four days later.
The announcement came after X account YieldsAndMore drew attention to the loss of 125,000 FLUID (worth about $200,000 at the time) and 52,000 of the GHO stablecoin on May 27.
Fluid was criticized by X for delaying announcing the $250,000 loss and instead encouraging users to take advantage of high returns after a $77 million withdrawal.
The exploit took place on May 27.
A lender withdrew $77 million $USDC starting on the 28th.
The team reported high deposit rates for $USDC on the 28th.
This exploit surfaced earlier today (May 31) and was only revealed afterwards.
Why was this only announced now?
— jpn memelord🛡️ (@jpn_memelord) May 31, 2026
There were also two bridge hacks this weekend, affecting the Gravity and Alephium bridges.
Alephium’s $815,000 loss was first noticed by Blockaid on Saturday. The company later backtracked on its initial theory that “compromised guardian keys” caused the loss, following the Alephium team’s post.
Also on Saturday, the Gravity bridge Hours earlier, on-chain researcher SpectreAnalyst reported the theft of $5.4 million $USDCWETH, USDT and PAXG.
So far this year, at least ten bridge hacks have rocked the crypto sector.
Finally, yield vault platform Artificial Financial Intelligence announced a “security incident” in its afiUSD Vault.
While the team’s alert did not specify the amount lost, a quick look at the vault’s transaction history reveals a withdrawal of approximately $500,000 worth of various DeFi tokens. The vault’s dashboard shows a TVL of almost $400,000, but the portfolio section only lists $300 worth of tokens.
In a follow-up post on Monday, the team confirmed that around $480,000 had been lost due to an ‘advanced exploit’, with a full post-mortem to follow.
The standstill
Last Thursday, Sui Network went down during the third outage of the year so far.
With three being the magic number, the downtime turned out to be just the first of three disruptions over the next 48 hours.
Sui’s status page shows an outage of almost six hours on Thursday and two outages of eight and a half hours and 45 minutes on Friday.
A blog post published by the Sui Foundation on Sunday explained that the first two incidents were related to a recent update. The third was caused by a hasty fix, which the foundation described as an “interim measure intended to restore functionality [which] had a known problem with a low probability of discontinuation.”
The warning
After such a volatile weekend, there’s nothing like a vague but urgent warning to start the week.
On Monday morning, Martin Koeppelmann of Gnosis warned users of the Gnosis Pay crypto card to withdraw their money. It was later removed, with Koeppelmann later clarifying that “most users won’t be able to do this.”
Deleted a previous tweet asking users to withdraw money. Most users won’t be able to do this, but we are actively working to limit the damage. We think we can control most of it, and we will at least make sure that all users are cured.
— koeppelmann (@koeppelmann) June 1, 2026
The danger apparently lies in the “Zodiac delay module” that allows a hacker to initiate transactions from users’ Safe accounts. Koeppelmann assured users that if they were affected, they would be reimbursed.
May DeFi hack roundup
There appears to be no end in sight to the recent string of crypto exploits that started attracting attention in April; more than $60 million was lost in May.
Losses are down from April, which was dominated by losses of $280 million from Drift Protocol and $290 million from Kelp DAO/LayerZero. However, the number of significant incidents listed on Protos’ hack tracker is similar; 30 in May versus 33 in April.