Security incidents
Hacks, exploits and protocol failures recorded by the desk, with the date, the reported amount where a source states one, and a link to the record.
Reported losses by year
Sums use only amounts a source stated. Incidents without a reported figure are excluded.
- 2026: 247 incidents, $8.78bn reported
- 2025: 122 incidents, $2.80bn reported
- 2024: 158 incidents, $1.67bn reported
- 2023: 162 incidents, $1.64bn reported
- 2022: 142 incidents, $3.67bn reported
- 2021: 119 incidents, $2.86bn reported
| Incident | Date | Reported amount | Status |
|---|---|---|---|
| Balancer V1: Rounding Error | 30 Aug 2026 | $234.0k | Reported |
| Fogo Foundation: Private Key Compromised | 28 Aug 2026 | $3.00m | Reported |
| Avici: Withdrawal Logic Flaw | 28 Aug 2026 | $500.9k | Reported |
| Virtue: Oracle Misconfiguration | 28 Aug 2026 | $894.5k | Reported |
| Ajna V2: Liquidation Logic Flaw | 28 Aug 2026 | $775.4k | Reported |
| CCC: Swap Logic Flaw | 27 Aug 2026 | $117.0k | Reported |
| Moonwell Lending: Spot Price Manipulation | 27 Aug 2026 | $8.70m | Reported |
| Enjin: Ownership Takeover | 25 Aug 2026 | $162.0k | Reported |
| CometDEX: Incorrect Share Accounting | 25 Aug 2026 | $717.0k | Reported |
| Nesa: Arithmetic Error | 24 Aug 2026 | $50.00m | Reported |
| TermFinance Vaults: Malicious Proposal | 23 Aug 2026 | $8.50m | Reported |
| KiiChain: Arithmetic Error | 22 Aug 2026 | $9.70m | Reported |
| The Sandbox: Improper Access Control | 22 Aug 2026 | $675.0k | Reported |
| TAC: Withdrawal Logic Flaw | 22 Aug 2026 | $7.50m | Reported |
| Allbridge: Bridge Logic Flaw | 19 Aug 2026 | $191.0k | Reported |
| BounceBit: Improper Access Control | 19 Aug 2026 | $3.00m | Reported |
| Maya Protocol: Withdrawal Logic Flaw | 18 Aug 2026 | $1.70m | Reported |
| Fox Market: Spot Price Manipulation | 15 Aug 2026 | $120.0k | Reported |
| Harmony Bridge: Bridge Logic Flaw | 11 Aug 2026 | $3.20m | Reported |
| USM: Arithmetic Error | 9 Aug 2026 | $136.0k | Reported |
| Coreum Bridge: Bridge Logic Flaw | 9 Aug 2026 | $200.0k | Reported |
| Coinsbuy: Improper Access Control | 9 Aug 2026 | $7.90m | Reported |
| Oraichain: Unbacked Cross-Chain Mint | 8 Aug 2026 | $1.00m | Reported |
| RRWallet: Weak Key Generation | 6 Aug 2026 | $2.00m | Reported |
| KITE Foundation: Private Key Compromised | 5 Aug 2026 | $13.34m | Reported |
Download this dataset
The files contain the recorded rows, including incidents without a reported amount.