Security incidents
Hacks, exploits and protocol failures recorded by the desk, with the date, the reported amount where a source states one, and a link to the record.
Reported losses by year
Sums use only amounts a source stated. Incidents without a reported figure are excluded.
- 2026: 247 incidents, $8.78bn reported
- 2025: 122 incidents, $2.80bn reported
- 2024: 158 incidents, $1.67bn reported
- 2023: 162 incidents, $1.64bn reported
- 2022: 142 incidents, $3.67bn reported
- 2021: 119 incidents, $2.86bn reported
| Incident | Date | Reported amount | Status |
|---|---|---|---|
| Agave: Reentrancy | 15 Mar 2022 | $5.50m | Reported |
| Hundred Finance: Reentrancy | 15 Mar 2022 | $6.20m | Reported |
| Paraluni Masterchef: Reentrancy | 13 Mar 2022 | $1.70m | Reported |
| Fantasm Finance: Missing Input Validation | 9 Mar 2022 | $2.62m | Reported |
| Bacon Protocol: Reentrancy | 5 Mar 2022 | $1.00m | Reported |
| Treasure: Missing Input Validation | 3 Mar 2022 | $1.40m | Reported |
| Flurry Finance: Incorrect Share Accounting | 23 Feb 2022 | $293.0k | Reported |
| OpenSea: Phishing | 20 Feb 2022 | $2.00m | Reported |
| Rigoblock: Improper Access Control | 18 Feb 2022 | $464.0k | Reported |
| TopGoal: Hot Wallet Key Compromised | 17 Feb 2022 | $1.10m | Reported |
| Build Finance: Malicious Proposal | 15 Feb 2022 | $470.0k | Reported |
| Titano Finance: Backdoor Contract | 14 Feb 2022 | $1.95m | Reported |
| IRA Financial / Gemini: API Key Compromised | 12 Feb 2022 | $36.00m | Reported |
| Dego Finance: Deployer Key Compromised | 10 Feb 2022 | $10.00m | Reported |
| Superfluid: Missing Input Validation | 8 Feb 2022 | $8.70m | Reported |
| Meter: Missing Input Validation | 6 Feb 2022 | $7.70m | Reported |
| KlaySwap: Frontend Compromise | 3 Feb 2022 | $1.90m | Reported |
| Portal: Signature Verification Flaw | 2 Feb 2022 | $326.00m | Recovered |
| BNS: Key Leaked via Infrastructure | 1 Feb 2022 | $7.50m | Reported |
| Qubit: Missing Input Validation | 28 Jan 2022 | $80.00m | Reported |
| OpenSea: Withdrawal Logic Flaw | 25 Jan 2022 | $1.00m | Reported |
| Crypto-com: Session Key Compromised | 18 Jan 2022 | $33.70m | Reported |
| Crosswise: Improper Access Control | 18 Jan 2022 | $879.0k | Reported |
| Crypto.com: Session Key Compromised | 18 Jan 2022 | $33.70m | Reported |
| Multichain: Missing Input Validation | 18 Jan 2022 | $1.40m | Reported |
Download this dataset
The files contain the recorded rows, including incidents without a reported amount.