Ink Finance

Syndicate

DeFi

GoPlus Security

Two DeFi protocols, Ink Finance and Renegade, have lost a combined $349,000 in separate exploits that occurred in less than two days.
Renegade, which raised around $3.4 million in a 2023 seed round led by Dragongly Capital, currently holds over $129,500 in total value locked across its Base and Arbitrum deployments, according to <a href="https://defillama.com/protocol/renegade" rel="noopener noreferrer nofollow">DefiLlama</a>. The protocol held over $338,000 before the hack.
<figure class="wp-caption alignnone"><img src="https://www.cryptopolitan.com/wp-content/uploads/2026/05/renegade-tvl.webp" alt="Ink Finance and Renegade exploited for $349K as DeFi hacks spill into May." width="1601" height="401">
 <figcaption>
 Renegade’s TVL dropped sharply after the May exploit. Source: DeFiLlama.
 </figcaption>
</figure>
Ink Finance has not acknowledged or released any public statements on the exploit.
The latest exploits are being seen as an extension of the streak of attacks that made April 2026 the <a href="https://www.cryptopolitan.com/crypto-hacks-hit-record-high-in-april/" rel="noopener noreferrer nofollow">worst month on record</a> for smart contract losses.
<h3 id="span-ink-finance-and-renegade-suffer-exploits-span">Ink Finance and Renegade suffer exploits</h3>
<a href="https://x.com/blockaid_/status/2053749924085268569" rel="noopener noreferrer nofollow">Ink Finance’s exploit</a> was flagged by blockchain security firm Blockaid on May 11. According to Blockaid, the attacker drained approximately $140,000 from the protocol’s Workspace Treasury Proxy contract on Polygon.
The bad actors deployed a contract at an address matching a whitelisted claimer entry in Ink Finance’s Workspace controller, then called the claim function to pass the eligibility check and trigger an authorized transfer from the treasury proxy.
Renegade, the dark pool DEX, suffered its own exploit the previous day, May 10. Confirming a post by Blockaid, the <a href="https://x.com/renegade_fi/status/2053531772634427599?s=46" rel="noopener noreferrer nofollow">protocol stated</a> that a legacy V1 deployment on Arbitrum was exploited for approximately $209,000.
It informed the public that the white hat has already returned around $190k and added that all affected users will be made whole.
Renegade confirmed that the vulnerability was isolated to the V1 Arbitrum deployment and did not affect its other contracts.
<h3 id="span-syndicate-bridge-losses-add-to-the-toll-span">Syndicate bridge losses add to the toll</h3>
The two exploits follow a string of incidents that began in late April. On April 30, <a href="https://x.com/syndicateio/status/2049866027106963905" rel="noopener noreferrer nofollow">Syndicate Labs</a> announced it had suffered a security incident. This was a private key compromise that enabled malicious upgrades to bridge contracts on two chains, and resulted in the loss of around 18.5 million SYND tokens and $50,000 in other tokens.
On May 10, Syndicate stated that it had reimbursed all <a href="https://x.com/syndicateio/status/2053577751920304171" rel="noopener noreferrer nofollow">affected SYND holders</a> on Commons Chain in full, plus an additional 15% of the total amount lost. The reimbursements were sent directly to affected wallets on Base, with gas fees covered by Syndicate Labs.
<h3 id="span-ai-assisted-attacks-raise-the-stakes-span">AI-assisted attacks raise the stakes</h3>
DeFi exploits are on the rise at a pace never seen before. There is growing evidence that AI tools are being leveraged to lower the barrier for attackers.
An <a href="https://www.cryptopolitan.com/ai-hackers-defi-smart-contracts-showdown/" rel="noopener noreferrer nofollow">a16z Crypto research</a> discovered that an off-the-shelf AI coding agent, given only a contract address and basic developer tools, could independently identify and exploit smart contract vulnerabilities 10% of the time. The success rate went up seven times to 70% when the agent was provided with structured knowledge about common attack patterns.
GoPlus Security reportedly flagged four separate smart contract exploits on Ethereum mainnet within a 48-hour window ending April 29, with combined losses exceeding $1.5 million, per the same report. The firm sees the current pace of AI-assisted attacks as a “countdown-by-the-second era.”
If you're reading this, you’re already ahead. <a href="https://www.cryptopolitan.com/newsletters/?utm_source=cp&amp;utm_medium=web&amp;utm_campaign=inlineAds" rel="noopener noreferrer nofollow">Stay there with our newsletter</a>.

Ink Finance and Renegade report exploits as hackers continue to raid DeFi

Table of Contents

Cryptopolitan_News

Other articles published on May 11, 2026

Join our free newsletter for daily crypto updates!