A deliberate scam where a project team or developer premeditatedly absconds with user funds, typically occurring after a project has attracted a certain amount of capital, using tactics like draining liquidity, malicious minting, or code backdoors to instantly wipe out investors' assets.

An attacker exploiting a logic error or security vulnerability that exists in a smart contract's code to execute an operation the designers never intended, causing harm to the protocol or its users — unlike a deliberate team scam, this type of vulnerability typically originates from a genuine technical flaw in the code itself.