Security incidents
Hacks, exploits and protocol failures recorded by the desk, with the date, the reported amount where a source states one, and a link to the record.
Reported losses by year
Sums use only amounts a source stated. Incidents without a reported figure are excluded.
- 2026: 247 incidents, $8.78bn reported
- 2025: 122 incidents, $2.80bn reported
- 2024: 158 incidents, $1.67bn reported
- 2023: 162 incidents, $1.64bn reported
- 2022: 142 incidents, $3.67bn reported
- 2021: 119 incidents, $2.86bn reported
| Incident | Date | Reported amount | Status |
|---|---|---|---|
| RISEx: Improper Access Control | 3 Aug 2026 | $673.0k | Reported |
| LOOPSDAO: Spot Price Manipulation | 2 Aug 2026 | $693.5k | Reported |
| MOKE: Spot Price Manipulation | 2 Aug 2026 | $907.0k | Reported |
| COLDCARD: Weak Key Generation | 31 Jul 2026 | $116.00m | Reported |
| Swan Treasury: Private Key Compromised | 30 Jul 2026 | $625.0k | Reported |
| LULA: Improper Access Control | 28 Jul 2026 | $578.0k | Reported |
| Crypto DAO: Improper Access Control | 28 Jul 2026 | $8.20m | Reported |
| ChainConnect: Improper Access Control | 26 Jul 2026 | $650.0k | Reported |
| WEMIX.FI Lend: Improper Access Control | 26 Jul 2026 | $737.0k | Reported |
| Garden: Database Breach | 26 Jul 2026 | $450.0k | Reported |
| Projekt: Missing Input Validation | 25 Jul 2026 | $560.0k | Reported |
| Bankr: Social Account Takeover | 25 Jul 2026 | $479.9k | Reported |
| Triple-A: Hot Wallet Key Compromised | 24 Jul 2026 | $9.70m | Reported |
| Lien: Missing Input Validation | 23 Jul 2026 | $542.0k | Reported |
| Solido Cash: Oracle Misconfiguration | 23 Jul 2026 | $900.0k | Reported |
| Zilliqa: Weak Key Generation | 22 Jul 2026 | $1.64m | Reported |
| AFX Bridge: Validator Key Compromised | 22 Jul 2026 | $24.15m | Reported |
| Verus-Ethereum Bridge: Forged Proof | 22 Jul 2026 | $7.53m | Reported |
| Wanchain: Signature Verification Flaw | 21 Jul 2026 | $10.00m | Reported |
| 42DAO: Spot Price Manipulation | 21 Jul 2026 | $912.0k | Reported |
| Allbridge Core: Withdrawal Logic Flaw | 19 Jul 2026 | $1.65m | Reported |
| Across: Spoofed Event Log | 17 Jul 2026 | $4.50m | Reported |
| CrowdRingCircle: Incorrect Share Accounting | 16 Jul 2026 | $209.1k | Reported |
| DefiTuna Lending: Swap Logic Flaw | 16 Jul 2026 | $580.0k | Reported |
| Sonic ICP: Withdrawal Logic Flaw | 15 Jul 2026 | $276.0k | Reported |
Download this dataset
The files contain the recorded rows, including incidents without a reported amount.