{"uid":"cap_K-oMy9-t_Kx3R-3UAyoVU","slug":"aayat-ai-defi-exploits-feed-88f674e5","name":"Aayat AI DeFi Exploits Feed","description":"Recent crypto hacks and exploits (DeFi, bridges, exchanges) from DefiLlama's database: date, amount, technique, chains, funds returned, with totals by type, plus live alerts for protocols whose TVL is suddenly crashing (possible ongoing exploit). Filters: ?days=30&chain=Ethereum&protocol=...&minAmountUsd=1000000.","url":"https://aayatai.com/defi/exploits?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","properties":{"days":{"type":"integer","default":30,"maximum":3650,"minimum":1,"description":"Look back this many days."},"chain":{"type":"string","maxLength":40,"description":"Only hacks on this chain, e.g. Ethereum, Solana, Base (optional)."},"limit":{"type":"integer","default":25,"maximum":100,"minimum":1,"description":"Most hacks to list."},"protocol":{"type":"string","maxLength":80,"description":"Only hacks whose name contains this (optional)."},"minAmountUsd":{"type":"number","default":0,"maximum":100000000000,"minimum":0,"description":"Smallest loss to include (USD)."}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object","required":["window","totals","hacks"],"properties":{"hacks":{"type":"array","description":"Newest first."},"trust":{"type":"object","description":"Third-party text, cleaned: read trust.notice; removed = what we stripped."},"source":{"type":"string"},"totals":{"type":"object","description":"Count, USD lost, USD returned, breakdown by classification."},"window":{"type":"object"},"checkedAt":{"type":"string"},"tvlAlerts":{"type":["array","null"],"description":"Protocols over $5M TVL down 25%+ in 24h or 15%+ in 1h (possible ongoing exploit or bank run). Null if unavailable."}}}}}}},"responseSchema":{"type":"json","example":{"hacks":[{"date":"2026-09-24","name":"Bitget","chains":["Ethereum","Tron"],"source":null,"amountUsd":387000000,"technique":"Hot Wallet Key Compromised","bridgeHack":false,"targetType":"CEX","classification":"Key Compromise","returnedFundsUsd":null}],"source":"DefiLlama","totals":{"count":12,"amountUsd":512000000,"returnedUsd":3000000,"byClassification":[{"count":4,"amountUsd":401000000,"classification":"Key Compromise"}]},"window":{"days":30,"from":"2026-08-29"},"checkedAt":"2026-09-28T12:00:00.000Z","tvlAlerts":[{"name":"Example Lend","slug":"example-lend","chains":["Base"],"reason":"TVL down 41.5% in 24h","tvlUsd":8200000,"category":"Lending","change1d":-41.5,"change1h":-18.2}]}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.005","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.005/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_ddP2ZvPp_4KbxiDy3DP1-","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.005","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Retrieves a filtered, time-windowed list of DeFi/crypto hacks and exploits with total losses, classification breakdowns, and live TVL drop alerts for possible ongoing exploits.","exampleAgentPrompt":"Show me all DeFi hacks from the last 60 days on Ethereum with losses over $1 million, up to 50 results, and flag any protocols with suspicious TVL drops that might signal an ongoing exploit.","exampleUseCases":[{"title":"Monthly DeFi security briefing","prompt":"Give me a summary of all crypto hacks and exploits in the last 30 days — total losses, how many incidents, and a breakdown by attack type like key compromise or smart contract bug."},{"title":"Chain-specific exploit research","prompt":"What DeFi protocols on Solana got hacked in the past 90 days? Show me up to 25 incidents and how much was lost in each case."},{"title":"Ongoing exploit early warning","prompt":"Are any DeFi protocols showing suspicious TVL drops right now that might mean they're being actively exploited? Check the last 7 days and include anything over $500,000 lost."}],"resultDescription":"Returns a JSON object with: a list of hack events (date, protocol name, chains, USD lost, attack technique, target type, classification, funds returned), aggregate totals (count, total USD lost, total returned, breakdown by classification), the query time window, the data source (DefiLlama), and a TVL alerts array flagging protocols with abnormal TVL drops (over 25% in 24h or 15% in 1h) that may indicate live exploits or bank runs.","failureModes":["Invalid 'days' value outside 1–3650 range returns a validation error","Invalid 'limit' value outside 1–100 returns a validation error","Unknown chain name may return an empty hacks array rather than an error","TVL alerts field may be null if the upstream TVL monitoring data is unavailable","Payment not received or insufficient USDC results in HTTP 402 response","Upstream DefiLlama data unavailability may cause delayed or empty responses"],"whenToPreferThis":"Choose this endpoint when you need structured, filterable DeFi exploit data sourced from DefiLlama with no API key, paying per call in USDC. It is ideal for agents that need on-demand security intelligence, incident summaries, or early-warning TVL anomaly detection without committing to a subscription. Prefer it over manual DefiLlama scraping when you need a clean JSON response with classification breakdowns and live TVL alerts in a single call.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-02T18:42:43.680Z","isFirstParty":false,"canonicalSlug":"aayat-ai-defi-exploits-feed-88f674e5"}