Security incidents
Hacks, exploits and protocol failures recorded by the desk, with the date, the reported amount where a source states one, and a link to the record.
Reported losses by year
Sums use only amounts a source stated. Incidents without a reported figure are excluded.
- 2026: 247 incidents, $8.78bn reported
- 2025: 122 incidents, $2.80bn reported
- 2024: 158 incidents, $1.67bn reported
- 2023: 162 incidents, $1.64bn reported
- 2022: 142 incidents, $3.67bn reported
- 2021: 119 incidents, $2.86bn reported
| Incident | Date | Reported amount | Status |
|---|---|---|---|
| NORMIE: Unknown | 26 May 2024 | $881.7k | Reported |
| YON: Improper Access Control | 22 May 2024 | $118.0k | Reported |
| TonUP: Reward Logic Flaw | 22 May 2024 | $107.6k | Reported |
| Gala: Infinite Mint | 20 May 2024 | $22.30m | Reported |
| ALEX: Phishing | 16 May 2024 | $4.30m | Reported |
| pump.fun: Private Key Compromised | 16 May 2024 | $1.90m | Reported |
| Sonne Finance: Donation Attack | 15 May 2024 | $20.00m | Reported |
| Predy Finance: Improper Access Control | 14 May 2024 | $464.0k | Reported |
| Galaxy Fox: Improper Access Control | 10 May 2024 | $330.0k | Reported |
| Tsuru: Unknown | 10 May 2024 | $410.0k | Reported |
| Bloom: Unknown | 9 May 2024 | $540.0k | Reported |
| Perpy: Uninitialized Proxy | 6 May 2024 | $132.0k | Reported |
| GeniusAI: Social Account Takeover | 5 May 2024 | $1.27m | Reported |
| Pike V1: Proxy Upgrade Hijack | 30 Apr 2024 | $1.60m | Reported |
| Yield Protocol: Incorrect Share Accounting | 30 Apr 2024 | $181.0k | Reported |
| Rain: Private Key Compromised | 29 Apr 2024 | $14.80m | Reported |
| FENGSHOU: Improper Access Control | 25 Apr 2024 | $191.0k | Reported |
| YIEDL: Missing Input Validation | 24 Apr 2024 | $150.0k | Reported |
| XBridge: Improper Access Control | 24 Apr 2024 | $1.44m | Reported |
| Magpie Protocol: Missing Input Validation | 23 Apr 2024 | $129.0k | Reported |
| Z123: Spot Price Manipulation | 22 Apr 2024 | $136.0k | Reported |
| Hedgey: Missing Input Validation | 19 Apr 2024 | $44.70m | Reported |
| Chainge Finance: Arbitrary External Call | 15 Apr 2024 | $716.0k | Reported |
| Grand Base: Phishing | 15 Apr 2024 | $1.70m | Reported |
| Zest: Spot Price Manipulation | 12 Apr 2024 | $1.00m | Reported |
Download this dataset
The files contain the recorded rows, including incidents without a reported amount.