Security incidents
Hacks, exploits and protocol failures recorded by the desk, with the date, the reported amount where a source states one, and a link to the record.
Reported losses by year
Sums use only amounts a source stated. Incidents without a reported figure are excluded.
- 2026: 280 incidents, $20.53bn reported
- 2025: 122 incidents, $2.80bn reported
- 2024: 158 incidents, $1.67bn reported
- 2023: 161 incidents, $1.62bn reported
- 2022: 141 incidents, $3.63bn reported
- 2021: 119 incidents, $2.86bn reported
| Incident | Date | Reported amount | Status |
|---|---|---|---|
| YIEDL: Missing Input Validation | 24 Apr 2024 | $150.0k | Reported |
| XBridge: Improper Access Control | 24 Apr 2024 | $1.44m | Reported |
| Magpie Protocol: Missing Input Validation | 23 Apr 2024 | $129.0k | Reported |
| Z123: Spot Price Manipulation | 22 Apr 2024 | $136.0k | Reported |
| Hedgey: Missing Input Validation | 19 Apr 2024 | $44.70m | Reported |
| Chainge Finance: Arbitrary External Call | 15 Apr 2024 | $716.0k | Reported |
| Grand Base: Phishing | 15 Apr 2024 | $1.70m | Reported |
| Zest: Spot Price Manipulation | 12 Apr 2024 | $1.00m | Reported |
| Sumer.money: Reentrancy | 12 Apr 2024 | $350.0k | Reported |
| OpenLeverage: Unknown | 1 Apr 2024 | $236.0k | Reported |
| FixedFloat: Key Leaked via Infrastructure | 31 Mar 2024 | $3.00m | Reported |
| Solareum: Social Account Takeover | 29 Mar 2024 | $1.40m | Reported |
| Lava: Liquidation Logic Flaw | 29 Mar 2024 | $340.0k | Reported |
| PrismaLST: Missing Input Validation | 28 Mar 2024 | $11.60m | Reported |
| Munchables: Proxy Upgrade Hijack | 26 Mar 2024 | $62.50m | Reported |
| ZongZiFa: Spot Price Manipulation | 25 Mar 2024 | $229.0k | Reported |
| Curio: Delegatecall Hijack | 25 Mar 2024 | $16.00m | Reported |
| Super Sushi Samurai: Infinite Mint | 22 Mar 2024 | $4.80m | Reported |
| AirDAO: Malware | 21 Mar 2024 | $1.05m | Reported |
| Dolomite: Improper Access Control | 20 Mar 2024 | $1.80m | Reported |
| LayerSwap: DNS Hijack | 20 Mar 2024 | $100.0k | Reported |
| ParaSwap: Improper Access Control | 20 Mar 2024 | $300.0k | Reported |
| Remilia: Private Key Compromised | 17 Mar 2024 | $6.00m | Reported |
| Mozaic: Private Key Compromised | 15 Mar 2024 | $2.00m | Reported |
| NFPrompt: Private Key Compromised | 15 Mar 2024 | $3.00m | Reported |
Download this dataset
The files contain the recorded rows, including incidents without a reported amount.