Security incidents
Hacks, exploits and protocol failures recorded by the desk, with the date, the reported amount where a source states one, and a link to the record.
Reported losses by year
Sums use only amounts a source stated. Incidents without a reported figure are excluded.
- 2026: 280 incidents, $20.53bn reported
- 2025: 122 incidents, $2.80bn reported
- 2024: 158 incidents, $1.67bn reported
- 2023: 161 incidents, $1.62bn reported
- 2022: 141 incidents, $3.63bn reported
- 2021: 119 incidents, $2.86bn reported
| Incident | Date | Reported amount | Status |
|---|---|---|---|
| Grinex: Hot Wallet Key Compromised | 16 Apr 2026 | $13.74m | Reported |
| Rhea Lend: Spot Price Manipulation | 16 Apr 2026 | $18.40m | Reported |
| CoW Swap: DNS Hijack | 14 Apr 2026 | $1.20m | Reported |
| Zerion Wallet: Phishing | 14 Apr 2026 | $100.0k | Reported |
| Dango: Missing Input Validation | 13 Apr 2026 | $1.90m | Reported |
| Hyperbridge: Forged Proof | 12 Apr 2026 | $2.50m | Reported |
| SubQuery Network: Improper Access Control | 12 Apr 2026 | $134.0k | Reported |
| Aethir: Improper Access Control | 9 Apr 2026 | $400.0k | Reported |
| SquidMulticall: Improper Access Control | 7 Apr 2026 | $517.0k | Reported |
| Denaria vAMM: Spot Price Manipulation | 5 Apr 2026 | $165.6k | Reported |
| BSC TMM/USDT: Improper Access Control | 4 Apr 2026 | $1.67m | Reported |
| Silo V2: Oracle Misconfiguration | 3 Apr 2026 | $359.0k | Reported |
| Drift Trade: Proxy Upgrade Hijack | 1 Apr 2026 | $295.00m | Reported |
| LML/USDT staking protocol: Spot Price Manipulation | 31 Mar 2026 | $950.0k | Reported |
| GoonFi: Swap Logic Flaw | 28 Mar 2026 | $254.0k | Reported |
| TUR Staking: Spot Price Manipulation | 26 Mar 2026 | $133.0k | Reported |
| BCE: Incorrect Share Accounting | 23 Mar 2026 | $679.0k | Reported |
| Cyrus Finance: Spot Price Manipulation | 22 Mar 2026 | $5.00m | Reported |
| Resolv USR: Key Leaked via Infrastructure | 21 Mar 2026 | $24.50m | Reported |
| dTRINITY dLEND: First Depositor Attack | 17 Mar 2026 | $257.0k | Reported |
| Venus Core Pool: Donation Attack | 15 Mar 2026 | $3.70m | Reported |
| Aave V3: Oracle Misconfiguration | 12 Mar 2026 | $862.0k | Recovered |
| AM: Incorrect Share Accounting | 12 Mar 2026 | $131.6k | Reported |
| Stake DAO Yield: Caller Impersonation | 12 Mar 2026 | $176.0k | Reported |
| DBXen: Missing Input Validation | 11 Mar 2026 | $150.0k | Reported |
Download this dataset
The files contain the recorded rows, including incidents without a reported amount.