Security incident · 2026-01-05
USDGambit and TLP
According to the public DefiLlama incident dataset, USDGambit and TLP (Arbitrum) suffered a security incident on 2026-01-05, with about $1.5M reported lost.
| Date | 2026-01-05 |
|---|---|
| Reported loss | $1.5M |
| Chain | Arbitrum |
| Target type | DeFi Protocol |
| Technique class | Key Compromise |
| Technique | Deployer Key Compromised |
| Bridge incident | No |
| Within 2026 | #94 by loss that year, 0.1% of all reported losses that year |
How this kind of attack works
Private keys or signing rights that controlled the funds were stolen, and the attacker moved the money with valid signatures. On chain it looks like a normal transfer.
Would a pre-payment check have helped
Key compromise is a wallet and key-security matter; screening the counterparty or endpoint does not touch it.