Security incidents
Hacks, exploits and protocol failures recorded by the desk, with the date, the reported amount where a source states one, and a link to the record.
Reported losses by year
Sums use only amounts a source stated. Incidents without a reported figure are excluded.
- 2026: 247 incidents, $8.78bn reported
- 2025: 122 incidents, $2.80bn reported
- 2024: 158 incidents, $1.67bn reported
- 2023: 162 incidents, $1.64bn reported
- 2022: 142 incidents, $3.67bn reported
- 2021: 119 incidents, $2.86bn reported
| Incident | Date | Reported amount | Status |
|---|---|---|---|
| Heco Bridge: Hot Wallet Key Compromised | 22 Nov 2023 | $86.60m | Reported |
| Kronos Research: API Key Compromised | 18 Nov 2023 | $26.00m | Reported |
| dYdX V3: Risk Parameter Abuse | 18 Nov 2023 | $9.00m | Reported |
| Samudai: Hot Wallet Key Compromised | 11 Nov 2023 | $1.25m | Reported |
| Raft: Infinite Mint | 10 Nov 2023 | $3.30m | Reported |
| Poloniex: Malware | 10 Nov 2023 | $126.00m | Reported |
| CoinSpot: Hot Wallet Key Compromised | 9 Nov 2023 | $2.40m | Reported |
| Curve Finance MEV Bot: Improper Access Control | 7 Nov 2023 | $2.00m | Reported |
| TrustPad: Improper Access Control | 6 Nov 2023 | $155.0k | Reported |
| TheStandard.io: Swap Logic Flaw | 6 Nov 2023 | $290.0k | Reported |
| Onyx Protocol: Donation Attack | 1 Nov 2023 | $2.10m | Reported |
| Unibot: Token Approval Abuse | 31 Oct 2023 | $640.0k | Reported |
| Astrid Finance: Missing Input Validation | 29 Oct 2023 | $228.0k | Reported |
| Maestro: Arbitrary External Call | 23 Oct 2023 | $500.0k | Recovered |
| Synthetify: Malicious Proposal | 19 Oct 2023 | $230.0k | Reported |
| HOPE Lend: Arithmetic Error | 18 Oct 2023 | $825.0k | Reported |
| Platypus Finance: Spot Price Manipulation | 13 Oct 2023 | $2.20m | Reported |
| Beluga: Spot Price Manipulation | 13 Oct 2023 | $175.0k | Reported |
| WiseLending: Rounding Error | 13 Oct 2023 | $260.0k | Reported |
| BlackHole Token: Spot Price Manipulation | 12 Oct 2023 | $1.28m | Reported |
| Arena SocialFi: Reentrancy | 7 Oct 2023 | $2.97m | Reported |
| Galxe: DNS Hijack | 6 Oct 2023 | $270.0k | Reported |
| HTX: Hot Wallet Key Compromised | 25 Sep 2023 | $8.00m | Reported |
| Mixin Network: Database Breach | 23 Sep 2023 | $200.00m | Reported |
| Balancer V2: Frontend Compromise | 19 Sep 2023 | $238.0k | Reported |
Download this dataset
The files contain the recorded rows, including incidents without a reported amount.