Security incidents
Hacks, exploits and protocol failures recorded by the desk, with the date, the reported amount where a source states one, and a link to the record.
Reported losses by year
Sums use only amounts a source stated. Incidents without a reported figure are excluded.
- 2026: 247 incidents, $8.78bn reported
- 2025: 122 incidents, $2.80bn reported
- 2024: 158 incidents, $1.67bn reported
- 2023: 162 incidents, $1.64bn reported
- 2022: 142 incidents, $3.67bn reported
- 2021: 119 incidents, $2.86bn reported
| Incident | Date | Reported amount | Status |
|---|---|---|---|
| WUSD.fi/Glove: Reward Logic Flaw | 25 May 2026 | $200.0k | Reported |
| New Market Trading: Improper Access Control | 25 May 2026 | $3.98m | Reported |
| StablR: Private Key Compromised | 23 May 2026 | $2.80m | Reported |
| Polymarket: Private Key Compromised | 22 May 2026 | $700.0k | Reported |
| RetoSwap: Missing Input Validation | 20 May 2026 | $2.70m | Reported |
| MAP Protocol: Infinite Mint | 20 May 2026 | $110.0k | Reported |
| Bankr: Session Key Compromised | 19 May 2026 | $170.0k | Reported |
| Echo Bridge: Private Key Compromised | 18 May 2026 | $821.0k | Reported |
| Verus-Ethereum Bridge: Forged Proof | 17 May 2026 | $11.50m | Reported |
| SEA Token: Spot Price Manipulation | 17 May 2026 | $153.0k | Reported |
| MetaSea: Withdrawal Logic Flaw | 17 May 2026 | $110.0k | Reported |
| Adshares: Forged Proof | 16 May 2026 | $628.0k | Reported |
| THORChain DEX: Bridge Logic Flaw | 15 May 2026 | $10.70m | Reported |
| Transit Finance: Improper Access Control | 13 May 2026 | $1.88m | Reported |
| ShapeShift FOX Colony: Arbitrary External Call | 13 May 2026 | $132.7k | Reported |
| SQ Protocol: Improper Access Control | 12 May 2026 | $346.1k | Reported |
| BoostHook: Spot Price Manipulation | 12 May 2026 | $187.0k | Reported |
| Aurellion: Uninitialized Proxy | 12 May 2026 | $456.4k | Reported |
| INK Finance: Caller Impersonation | 11 May 2026 | $140.0k | Reported |
| Huma: Improper Access Control | 11 May 2026 | $101.4k | Reported |
| TAC Protocol: Proof Verifier Bug | 11 May 2026 | $2.85m | Reported |
| Renegade: Uninitialized Proxy | 10 May 2026 | $209.0k | Recovered |
| TrustedVolumes: Caller Impersonation | 7 May 2026 | $6.70m | Reported |
| Ekubo: Token Approval Abuse | 5 May 2026 | $1.40m | Reported |
| SquidRouterModule: Improper Access Control | 4 May 2026 | $3.20m | Reported |
Download this dataset
The files contain the recorded rows, including incidents without a reported amount.