Skip to content

Ilse Vandermeer

Incidents & exploits

Covers exploits, exchange failures and key-compromise incidents for Conisec. Most of the work is reconciling a project's own post-mortem against on-chain evidence and any regulatory filing, then stopping at what those documents actually support.

An editorial identity. This byline marks the desk answerable for the work; it is not a claim about an individual's verified credentials. How our bylines work

Published work

DMM Bitcoin Unauthorised Outflow, May 2024: What Happened & What to Check

Japanese exchange DMM Bitcoin lost 4,502.9 BTC in an unauthorised outflow. The company later announced it would wind down and transfer accounts.

31 May 2024 · 1 min read

Munchables Insider Key Compromise, March 2024: What Happened & What to Check

A developer with privileged access drained roughly $62m from Munchables, then returned the funds without conditions.

26 Mar 2024 · 1 min read

Orbit Chain Bridge Compromise, December 2023: What Happened & What to Check

Roughly $81.5m left Orbit Bridge on New Year's Eve 2023 in transactions that carried valid signatures.

31 Dec 2023 · 1 min read

Ledger Connect Kit Supply Chain Attack, December 2023: What Happened & What to Check

A compromised npm package injected a wallet drainer into every dapp loading Ledger Connect Kit from the CDN — regardless of whether…

14 Dec 2023 · 2 min read

Infrastructure compromise

Mixin Network Database Compromise, September 2023: What Happened & What to Check

Mixin reported roughly $200m lost after the database of its cloud service provider was attacked, and suspended deposits and withdrawals.

23 Sep 2023 · 1 min read

Curve Finance Vyper Compiler Reentrancy, July 2023: What Happened & What to Check

A bug in specific Vyper versions silently broke reentrancy locks, exposing several Curve pools whose own code was correct.

30 Jul 2023 · 1 min read

Multichain Unauthorised Outflows, July 2023: What Happened & What to Check

Assets left Multichain bridge contracts with no exploit visible on-chain, amid the reported detention of the project's chief executive.

6 Jul 2023 · 1 min read

Atomic Wallet User Fund Theft, June 2023: What Happened & What to Check

Funds were drained from Atomic Wallet users across multiple chains. The root cause has never been conclusively published.

3 Jun 2023 · 1 min read

Euler Finance Donation Attack, March 2023: What Happened & What to Check

A missing health check on a donation function let an attacker force their own liquidation at a profit, taking about $197m. Nearly…

13 Mar 2023 · 2 min read

Wintermute Vanity Address Compromise, September 2022: What Happened & What to Check

A weakness in the Profanity vanity-address generator made the private key for Wintermute's DeFi operations recoverable. About $160m was taken.

20 Sep 2022 · 2 min read