HIGHData Breach
Verified
Global

Lazarus Group Targets DeFi Protocols with New Smart Contract Exploit Kit

·Source: Chainalysis / SlowMist

Updated:

Executive Summary

Lazarus Group deploys modular smart contract exploit toolkit targeting DeFi protocols. $200M stolen across four platforms in March.

Analysis

Chainalysis and SlowMist report that Lazarus Group has developed a modular toolkit for exploiting DeFi smart contracts, focusing on flash loan vulnerabilities, oracle manipulation, and cross-chain bridge weaknesses. Four DeFi protocols lost a combined $200M in March. The toolkit automates vulnerability scanning of deployed contracts and generates custom exploits.

Timeline

Discovered
Mar 5, 2026
Exploitation Detected
Mar 5, 2026
Published
Mar 27, 2026
Source Attribution

Originally published by Chainalysis / SlowMist on Mar 27, 2026. Verified by: Chainalysis, SlowMist, FBI.

Related Threats

HIGHData Breach

Grafana breach caused by missed token rotation after TanStack attack

The Grafana data breach was caused by a single GitHub workflow token that slipped through the rotation process following the TanStack npm supply-chain attack last week. [...]

BleepingComputer
HIGHData Breach

Verizon: Healthcare Sector Facing Sustained, Multi-vector Attacks

Verizon has published its 2026 Data Breach Investigations Report, which shows that the healthcare sector continues to be targeted by […] The post Verizon: Healthcare Sector Facing Sustained, Multi-vector Attacks appeared first on The HIPAA Journal .

HIPAA Journal
HIGHData Breach

Data Breaches Announced by Lumexa Imaging; FMRS Health Systems

The diagnostic imaging service provider Lumexa Imaging has been affected by a security incident at one of its vendors. FMRS […] The post Data Breaches Announced by Lumexa Imaging; FMRS Health Systems appeared first on The HIPAA Journal .

HIPAA Journal