Futures
Access hundreds of perpetual contracts
TradFi
Gold
One platform for global traditional assets
Options
Hot
Trade European-style vanilla options
Unified Account
Maximize your capital efficiency
Demo Trading
Introduction to Futures Trading
Learn the basics of futures trading
Futures Events
Join events to earn rewards
Demo Trading
Use virtual funds to practice risk-free trading
Launch
CandyDrop
Collect candies to earn airdrops
Launchpool
Quick staking, earn potential new tokens
HODLer Airdrop
Hold GT and get massive airdrops for free
Pre-IPOs
Unlock full access to global stock IPOs
Alpha Points
Trade on-chain assets and earn airdrops
Futures Points
Earn futures points and claim airdrop rewards
So I've been following this DeFi hack news pretty closely, and there's definitely a pattern emerging that's hard to ignore. Looks like older DeFi protocols that everyone forgot about are getting systematically targeted, and the scale is getting concerning.
Truebit just got hit hard on Thursday - we're talking $26 million extracted through a pretty straightforward integer-overflow vulnerability in their verification layer contract. The attacker minted massive amounts of TRU tokens, burned them, and walked away with 8,535 ETH. Price went to zero instantly. What's wild is this code had been sitting there vulnerable for almost five years since launch. The contract was holding 44,000 ETH at one point, so it could've been exponentially worse.
Then Futureswap got hit again today - second attack in a month. They lost another $400K on top of the $550K governance attack from December. The whole thing adds up to roughly $27 million across these recent incidents, and it's clearly not slowing down.
What's interesting about this DeFi hack news cycle is the theory that AI tools are helping attackers systematically work through old, unaudited code. One security researcher mentioned that fuzzing bots are "eating this up like piranhas." Makes sense - legacy contracts from the 2020-2022 boom are sitting there with minimal ongoing security attention.
Storming0x, who used to work on security at Yearn, has been pretty vocal about this. They're saying teams need to either fully sunset these old contracts or get them re-audited. Users should just pull their funds out of anything legacy at this point.
The bigger picture here is that we're seeing a coordinated reassessment of forgotten DeFi infrastructure, and it's going to keep happening until protocols actually address it. This DeFi security issue isn't going away on its own.