Tools Crypto Exploit Tracker exploit-0046
Exploit record
TrustedVolumes
- Loss
- $6M
- Attack vector
- Access Control
- Chain
- Ethereum
- Sector
- DeFi
What happened
Liquidity provider TrustedVolumes lost about $5.87 million in WETH, USDT, WBTC and USDC on 7 May 2026 after an attacker exploited its request-for-quote (RFQ) order flow.
Analysts described the incident as an access-control failure in which forged RFQ orders were used to pull funds from the market maker; the exploiter began laundering proceeds through Tornado Cash, RailGun and THORChain. Global Ledger noted the firm's public incident report followed roughly 11 minutes after the initial transaction.
Sources
- Global Ledgerblog.globalledger.io/research-investigations/crypto-hacks-ma…
- Nominis May 2026 reportwww.nominis.io/insights/nominis-monthly-report-crypto-exploi…
One record from the Crypto Exploit Tracker, maintained by the Security Desk. Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 15 September 2026