Security incidents
Hacks, exploits and protocol failures recorded by the desk, with the date, the reported amount where a source states one, and a link to the record.
Reported losses by year
Sums use only amounts a source stated. Incidents without a reported figure are excluded.
- 2026: 247 incidents, $8.78bn reported
- 2025: 122 incidents, $2.80bn reported
- 2024: 158 incidents, $1.67bn reported
- 2023: 162 incidents, $1.64bn reported
- 2022: 142 incidents, $3.67bn reported
- 2021: 119 incidents, $2.86bn reported
| Incident | Date | Reported amount | Status |
|---|---|---|---|
| Bisq: Missing Input Validation | 1 May 2026 | $550.0k | Reported |
| Wasabi Perps: Deployer Key Compromised | 30 Apr 2026 | $5.50m | Reported |
| Sweat Foundation: Withdrawal Logic Flaw | 29 Apr 2026 | $3.50m | Reported |
| Syndicate: Bridge Logic Flaw | 29 Apr 2026 | $380.0k | Recovered |
| Aftermath Perps: Withdrawal Logic Flaw | 29 Apr 2026 | $1.14m | Reported |
| JUDAO: Arithmetic Error | 28 Apr 2026 | $228.0k | Reported |
| YieldCore-3rd-deal: Improper Access Control | 28 Apr 2026 | $398.8k | Reported |
| Quant: Arbitrary External Call | 28 Apr 2026 | $138.0k | Reported |
| Singularity Finance: Oracle Misconfiguration | 27 Apr 2026 | $413.0k | Reported |
| ZetaChain: Token Approval Abuse | 27 Apr 2026 | $333.9k | Reported |
| Scallop Lend: Reward Logic Flaw | 26 Apr 2026 | $142.0k | Reported |
| Purrlend: Caller Impersonation | 25 Apr 2026 | $1.50m | Reported |
| Giddy: Incomplete Signature Coverage | 23 Apr 2026 | $1.30m | Reported |
| Volo Vault: Private Key Compromised | 21 Apr 2026 | $3.50m | Reported |
| Transit Finance: Unknown | 20 Apr 2026 | $257.8k | Reported |
| Kelp: Cross-Chain Message Spoofing | 18 Apr 2026 | $293.00m | Reported |
| Grinex: Hot Wallet Key Compromised | 16 Apr 2026 | $13.74m | Reported |
| Rhea Lend: Spot Price Manipulation | 16 Apr 2026 | $18.40m | Reported |
| CoW Swap: DNS Hijack | 14 Apr 2026 | $1.20m | Reported |
| Zerion Wallet: Phishing | 14 Apr 2026 | $100.0k | Reported |
| Dango: Missing Input Validation | 13 Apr 2026 | $1.90m | Reported |
| Hyperbridge: Forged Proof | 12 Apr 2026 | $2.50m | Reported |
| SubQuery Network: Improper Access Control | 12 Apr 2026 | $134.0k | Reported |
| Aethir: Improper Access Control | 9 Apr 2026 | $400.0k | Reported |
| SquidMulticall: Improper Access Control | 7 Apr 2026 | $517.0k | Reported |
Download this dataset
The files contain the recorded rows, including incidents without a reported amount.