Security incidents
Hacks, exploits and protocol failures recorded by the desk, with the date, the reported amount where a source states one, and a link to the record.
Reported losses by year
Sums use only amounts a source stated. Incidents without a reported figure are excluded.
- 2026: 247 incidents, $8.78bn reported
- 2025: 122 incidents, $2.80bn reported
- 2024: 158 incidents, $1.67bn reported
- 2023: 162 incidents, $1.64bn reported
- 2022: 142 incidents, $3.67bn reported
- 2021: 119 incidents, $2.86bn reported
| Incident | Date | Reported amount | Status |
|---|---|---|---|
| Transit Swap: Missing Input Validation | 2 Oct 2022 | $28.90m | Reported |
| Wintermute: Phishing | 20 Sep 2022 | $160.00m | Reported |
| GMX V1 EVM: Stale Price Arbitrage | 18 Sep 2022 | $565.0k | Reported |
| GMX V1 Perps: Stale Price Arbitrage | 18 Sep 2022 | $565.0k | Reported |
| New Free DAO: Reward Logic Flaw | 8 Sep 2022 | $1.25m | Reported |
| GERA: Deployer Key Compromised | 7 Sep 2022 | $1.48m | Reported |
| Nereus Finance: Spot Price Manipulation | 6 Sep 2022 | $371.0k | Reported |
| DAO Swap: Improper Access Control | 5 Sep 2022 | $580.0k | Reported |
| ShadowFi: Improper Access Control | 2 Sep 2022 | $301.0k | Reported |
| KyberSwap Classic: CDN Compromise | 1 Sep 2022 | $265.0k | Reported |
| KaoyaSwap: Swap Logic Flaw | 24 Aug 2022 | $118.0k | Reported |
| SudoRare: Liquidity Rug | 23 Aug 2022 | $800.0k | Reported |
| Celer cBridge: DNS Hijack | 18 Aug 2022 | $240.0k | Reported |
| Blur Finance: Exit Scam | 10 Aug 2022 | $600.0k | Reported |
| Curve DEX: DNS Hijack | 9 Aug 2022 | $575.0k | Recovered |
| Dragoma: Admin Drain | 8 Aug 2022 | $3.50m | Reported |
| Slope Wallet: Key Stored Publicly | 2 Aug 2022 | $4.10m | Reported |
| Reaper Farm: Improper Access Control | 1 Aug 2022 | $1.70m | Reported |
| Nomad: Forged Proof | 1 Aug 2022 | $190.00m | Reported |
| ZB Exchange: Hot Wallet Key Compromised | 1 Aug 2022 | $4.80m | Reported |
| Nirvana V1: Spot Price Manipulation | 28 Jul 2022 | $3.50m | Reported |
| Audius: Malicious Proposal | 25 Jul 2022 | $6.00m | Reported |
| Premint: Frontend Compromise | 17 Jul 2022 | $375.0k | Reported |
| Impermax: Private Key Compromised | 16 Jul 2022 | $9.00m | Reported |
| Uniswap (Phishing Attack): Phishing | 11 Jul 2022 | $8.00m | Reported |
Download this dataset
The files contain the recorded rows, including incidents without a reported amount.