Security incidents
Hacks, exploits and protocol failures recorded by the desk, with the date, the reported amount where a source states one, and a link to the record.
Reported losses by year
Sums use only amounts a source stated. Incidents without a reported figure are excluded.
- 2026: 280 incidents, $20.53bn reported
- 2025: 122 incidents, $2.80bn reported
- 2024: 158 incidents, $1.67bn reported
- 2023: 161 incidents, $1.62bn reported
- 2022: 141 incidents, $3.63bn reported
- 2021: 119 incidents, $2.86bn reported
| Incident | Date | Reported amount | Status |
|---|---|---|---|
| ElasticSwap: Spot Price Manipulation | 13 Dec 2022 | $850.0k | Reported |
| 3Commas: Database Breach | 11 Dec 2022 | $20.00m | Reported |
| Lodestar V0: Spot Price Manipulation | 10 Dec 2022 | $6.90m | Reported |
| BTC.com: Key Leaked via Infrastructure | 3 Dec 2022 | $3.00m | Reported |
| Ankr: Improper Access Control | 2 Dec 2022 | $5.00m | Recovered |
| FTX: Phishing | 12 Nov 2022 | $450.00m | Reported |
| DFX V2: Reentrancy | 10 Nov 2022 | $4.00m | Reported |
| MooCAKECTX: Incorrect Share Accounting | 7 Nov 2022 | $140.0k | Reported |
| Pando Rings: Spot Price Manipulation | 6 Nov 2022 | $22.00m | Reported |
| pNetwork: Key Leaked via Infrastructure | 3 Nov 2022 | $4.30m | Reported |
| Save: Spot Price Manipulation | 2 Nov 2022 | $1.26m | Reported |
| Rubic: Private Key Compromised | 2 Nov 2022 | $1.20m | Reported |
| Skyward Finance: Missing Input Validation | 2 Nov 2022 | $3.00m | Reported |
| Deribit: Hot Wallet Key Compromised | 1 Nov 2022 | $28.00m | Reported |
| Save: Risk Parameter Abuse | 1 Nov 2022 | $1.03m | Reported |
| FriesDAO: Weak Key Generation | 28 Oct 2022 | $2.30m | Reported |
| Team Finance: Missing Input Validation | 27 Oct 2022 | $15.80m | Reported |
| UvToken: Improper Access Control | 27 Oct 2022 | $1.50m | Reported |
| ULME: Improper Access Control | 25 Oct 2022 | $250.0k | Reported |
| QuickSwap Market: Spot Price Manipulation | 24 Oct 2022 | $220.0k | Reported |
| Layer2DAO: Phishing | 23 Oct 2022 | $190.0k | Reported |
| Bond Protocol: Missing Input Validation | 21 Oct 2022 | $300.0k | Reported |
| Ethereum Alarm Clock: Reward Logic Flaw | 20 Oct 2022 | $260.0k | Reported |
| Moola Market: Spot Price Manipulation | 18 Oct 2022 | $8.40m | Reported |
| MTDAO: Deposit Logic Flaw | 17 Oct 2022 | $702.0k | Reported |
Download this dataset
The files contain the recorded rows, including incidents without a reported amount.