Security incidents
Hacks, exploits and protocol failures recorded by the desk, with the date, the reported amount where a source states one, and a link to the record.
Reported losses by year
Sums use only amounts a source stated. Incidents without a reported figure are excluded.
- 2026: 280 incidents, $20.53bn reported
- 2025: 122 incidents, $2.80bn reported
- 2024: 158 incidents, $1.67bn reported
- 2023: 161 incidents, $1.62bn reported
- 2022: 141 incidents, $3.63bn reported
- 2021: 119 incidents, $2.86bn reported
| Incident | Date | Reported amount | Status |
|---|---|---|---|
| Earning.Farm: Withdrawal Logic Flaw | 15 Oct 2022 | $1.20m | Reported |
| QANplatform: Weak Key Generation | 11 Oct 2022 | $2.00m | Reported |
| Mango Markets V3: Spot Price Manipulation | 11 Oct 2022 | $115.00m | Reported |
| TempleDAO: Improper Access Control | 11 Oct 2022 | $2.30m | Reported |
| Binance Bridge: Proof Verifier Bug | 6 Oct 2022 | $570.00m | Reported |
| RES Token: Spot Price Manipulation | 6 Oct 2022 | $290.0k | Reported |
| Sovryn: Reentrancy | 4 Oct 2022 | $1.10m | Reported |
| Transit Swap: Missing Input Validation | 2 Oct 2022 | $28.90m | Reported |
| Wintermute: Phishing | 20 Sep 2022 | $160.00m | Reported |
| GMX V1 EVM: Stale Price Arbitrage | 18 Sep 2022 | $565.0k | Reported |
| GMX V1 Perps: Stale Price Arbitrage | 18 Sep 2022 | $565.0k | Reported |
| New Free DAO: Reward Logic Flaw | 8 Sep 2022 | $1.25m | Reported |
| GERA: Deployer Key Compromised | 7 Sep 2022 | $1.48m | Reported |
| Nereus Finance: Spot Price Manipulation | 6 Sep 2022 | $371.0k | Reported |
| DAO Swap: Improper Access Control | 5 Sep 2022 | $580.0k | Reported |
| ShadowFi: Improper Access Control | 2 Sep 2022 | $301.0k | Reported |
| KyberSwap Classic: CDN Compromise | 1 Sep 2022 | $265.0k | Reported |
| KaoyaSwap: Swap Logic Flaw | 24 Aug 2022 | $118.0k | Reported |
| SudoRare: Liquidity Rug | 23 Aug 2022 | $800.0k | Reported |
| Celer cBridge: DNS Hijack | 18 Aug 2022 | $240.0k | Reported |
| Blur Finance: Exit Scam | 10 Aug 2022 | $600.0k | Reported |
| Curve DEX: DNS Hijack | 9 Aug 2022 | $575.0k | Recovered |
| Dragoma: Admin Drain | 8 Aug 2022 | $3.50m | Reported |
| Slope Wallet: Key Stored Publicly | 2 Aug 2022 | $4.10m | Reported |
| Reaper Farm: Improper Access Control | 1 Aug 2022 | $1.70m | Reported |
Download this dataset
The files contain the recorded rows, including incidents without a reported amount.