Authentic investigative journalism and unfiltered creative commentary

KILOEX - REKT
Monday, April 21, 2025

KiloEx just learned the hard way that fancy multi-chain deployments don't protect you from basic security flaws.

Their multi-chain perpetual protocol lost almost $7.5 million after an attacker slid into their oracle's code with a wallet funded through Tornado Cash.

One minute you're celebrating your Binance backing, the next you're begging a faceless hacker to accept a 10% bounty and return your users' funds.

While the team was busy expanding across Base, BNB Chain, and Taiko, they somehow missed the gaping hole in their oracle implementation that practically screamed "rob me."

The attacker didn't need some novel zero-day exploit - just the digital equivalent of walking through an unlocked front door.

When will protocols learn that having "Kilo" in your name doesn't automatically give you the heavyweight security needed in DeFi's bloodsport arena?

Read more

MEV isn’t just some passive tax on-chain users pay when bots front-run their swaps. It’s evolved. What started as a handful of bots sandwiching trades has become a full-blown shadow industry—complete with auction markets, private relay networks, and validators running exclusive deals under the radar.

Welcome to the era of dark pool validators.

If you thought block production was neutral, think again. MEV is now a business model. Validators are no longer just securing the network — they’re auctioning off blockspace to the highest bidder, selling early access, and running private mempools to give their friends an edge. Some even bypass the public mempool altogether, working with searchers in sealed channels where the only rule is profit.

Private relays were supposed to help by keeping things fair. But they’ve just created new gatekeepers. Builders pitch transparency, but the reality is most of the game happens in places you can’t see, between actors you can’t track. It’s not censorship resistance anymore — it’s selective inclusion.

And the more these relays dominate, the more the chain becomes a dark pool. Users think they’re interacting with a public system. In reality? Their transactions are competing in a hidden auction they never agreed to.

This isn’t extraction anymore. It’s coordination. A structured, multi-player MEV machine where builders, validators, and searchers all get their cut. And if you’re not in that circle? You’re just funding it.

Decentralization promised fairness. MEV turned it into a bidding war.

And the block goes to whoever pays the most — not whoever needs it most.

•The whale, the hack and the psychological earthquake that hit HEX [Read more]

•DeFi platform KiloEx offers $750K bounty to hacker [Read more]

•4chan Breach Exposes Internal Chaos, Data in Major Hack by Rival Soyjak Party [Read more]

•Bots are killing social media, but decentralization can save it [Read more]

•Cybersecurity firm buying hacker forum accounts to spy on cybercriminals [Read more]

He hacked the feds, leaked a billion identities, and built a forum the FBI still can’t kill. They got Pom Pom Purin—but Breach kept breathing. In this world, jail is just a speed bump, and the forums never log off.

We provide an anonymous platform for whistleblowers and DeFi detectives to present their information to the community. All authors remain anonymous. 
We are all rekt.