Security incidents
Hacks, exploits and protocol failures recorded by the desk, with the date, the reported amount where a source states one, and a link to the record.
Reported losses by year
Sums use only amounts a source stated. Incidents without a reported figure are excluded.
- 2026: 247 incidents, $8.78bn reported
- 2025: 122 incidents, $2.80bn reported
- 2024: 158 incidents, $1.67bn reported
- 2023: 162 incidents, $1.64bn reported
- 2022: 142 incidents, $3.67bn reported
- 2021: 119 incidents, $2.86bn reported
| Incident | Date | Reported amount | Status |
|---|---|---|---|
| Blend Pools V2: Spot Price Manipulation | 22 Feb 2026 | $10.97m | Reported |
| IoTeX: Validator Key Compromised | 21 Feb 2026 | $4.40m | Reported |
| Velar Perps: Predictable Oracle Update | 19 Feb 2026 | $401.0k | Reported |
| Moonwell Lending: Oracle Misconfiguration | 15 Feb 2026 | $1.78m | Reported |
| CrossCurve: Cross-Chain Message Spoofing | 1 Feb 2026 | $3.00m | Reported |
| Step Finance: Private Key Compromised | 31 Jan 2026 | $40.00m | Reported |
| PGNLZ: Incorrect Share Accounting | 27 Jan 2026 | $100.0k | Reported |
| Matcha: Frontend Compromise | 25 Jan 2026 | $13.43m | Reported |
| Aperture LM: Token Approval Abuse | 25 Jan 2026 | $3.67m | Reported |
| Saga: Infinite Mint | 21 Jan 2026 | $7.00m | Reported |
| Makina: Spot Price Manipulation | 20 Jan 2026 | $4.20m | Reported |
| SynapLogic: Unknown | 20 Jan 2026 | $144.0k | Reported |
| Makina: Spot Price Manipulation | 19 Jan 2026 | $4.20m | Reported |
| Meteora DAMM V2: Impersonation Scam | 17 Jan 2026 | $1.50m | Reported |
| YO Protocol: Missing Slippage Check | 13 Jan 2026 | $3.60m | Reported |
| FutureSwap: Withdrawal Logic Flaw | 10 Jan 2026 | $395.0k | Reported |
| Truebit: Arithmetic Error | 8 Jan 2026 | $26.40m | Reported |
| Polycule: Key Leaked via Infrastructure | 7 Jan 2026 | $230.0k | Reported |
| IPOR Fusion: Arbitrary External Call | 6 Jan 2026 | $336.0k | Recovered |
| Fusion by IPOR: Arbitrary External Call | 6 Jan 2026 | $336.0k | Reported |
| TMX TRIBE: Arithmetic Error | 5 Jan 2026 | $1.40m | Reported |
| USDGambit and TLP: Deployer Key Compromised | 5 Jan 2026 | $1.50m | Reported |
| Unleash Protocol: Private Key Compromised | 30 Dec 2025 | $3.90m | Reported |
| MSCST: Improper Access Control | 28 Dec 2025 | $129.9k | Reported |
| Flow: Infinite Mint | 27 Dec 2025 | $3.90m | Reported |
Download this dataset
The files contain the recorded rows, including incidents without a reported amount.