<?xml version='1.0' encoding='UTF-8'?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Forensic Capital — Published Reports</title>
    <link>https://forensic-capital.com/feed.xml</link>
    <description>Post-incident DeFi forensic reports. Independent reconstruction from public chain data.</description>
    <atom:link href="https://forensic-capital.com/feed.xml" rel="self"/>
    <copyright>Forensic Capital</copyright>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <image>
      <url>https://forensic-capital.com/og-image.png</url>
      <title>Forensic Capital — Published Reports</title>
      <link>https://forensic-capital.com/feed.xml</link>
    </image>
    <language>en</language>
    <lastBuildDate>Thu, 25 Jun 2026 00:00:00 +0000</lastBuildDate>
    <item>
      <title>FC-005 · Gravity Bridge — Denom Poisoning [$5.4M]</title>
      <link>https://forensic-capital.com/reports/fc-005-gravity/</link>
      <description>FC-005. deployERC20() denom poisoning in the Gravity Bridge allowed an attacker to corrupt the cross-layer token registry through a missing collision check, draining $5.4M.</description>
      <author>marcus@forensic-capital.com (Forensic Capital)</author>
      <guid isPermaLink="false">https://forensic-capital.com/reports/fc-005-gravity/</guid>
      <category>FORENSIC</category>
      <pubDate>Thu, 25 Jun 2026 00:00:00 +0000</pubDate>
    </item>
    <item>
      <title>FC-001 · The KelpDAO Bridge Exploit [$292M]</title>
      <link>https://forensic-capital.com/reports/fc-001-kelpdao/</link>
      <description>FC-001. A 1-of-1 DVN threshold bypass combined with RPC poisoning enabled the KelpDAO bridge exploit, exposing $292M and triggering Aave V3 contagion.</description>
      <author>marcus@forensic-capital.com (Forensic Capital)</author>
      <guid isPermaLink="false">https://forensic-capital.com/reports/fc-001-kelpdao/</guid>
      <category>FORENSIC</category>
      <pubDate>Tue, 26 May 2026 00:00:00 +0000</pubDate>
    </item>
    <item>
      <title>FC-004 · Verus Bridge — Cross-Chain Verification Exploit [$11.58M]</title>
      <link>https://forensic-capital.com/reports/fc-004-verus/</link>
      <description>FC-004. A binding gap in checkCCEValues allowed cross-chain verification to be bypassed at a cost of $10, draining $11.58M. 75% was recovered via bounty.</description>
      <author>marcus@forensic-capital.com (Forensic Capital)</author>
      <guid isPermaLink="false">https://forensic-capital.com/reports/fc-004-verus/</guid>
      <category>FORENSIC</category>
      <pubDate>Mon, 18 May 2026 00:00:00 +0000</pubDate>
    </item>
    <item>
      <title>FC-003 · Resolv USR Exploit [$23.8M]</title>
      <link>https://forensic-capital.com/reports/resolv/</link>
      <description>FC-003. AWS KMS credential compromise gave the attacker direct access to the mint function, resulting in $23.8M in unauthorized USR token minting.</description>
      <author>marcus@forensic-capital.com (Forensic Capital)</author>
      <guid isPermaLink="false">https://forensic-capital.com/reports/resolv/</guid>
      <category>FORENSIC</category>
      <pubDate>Sun, 22 Mar 2026 00:00:00 +0000</pubDate>
    </item>
  </channel>
</rss>
