Security incidents
Hacks, exploits and protocol failures recorded by the desk, with the date, the reported amount where a source states one, and a link to the record.
Reported losses by year
Sums use only amounts a source stated. Incidents without a reported figure are excluded.
- 2026: 280 incidents, $20.53bn reported
- 2025: 122 incidents, $2.80bn reported
- 2024: 158 incidents, $1.67bn reported
- 2023: 161 incidents, $1.62bn reported
- 2022: 141 incidents, $3.63bn reported
- 2021: 119 incidents, $2.86bn reported
| Incident | Date | Reported amount | Status |
|---|---|---|---|
| FEG Token: Improper Access Control | 17 May 2022 | $1.90m | Reported |
| Quickswap V3: DNS Hijack | 14 May 2022 | $107.6k | Reported |
| Blizz Finance: Stale Oracle Price | 13 May 2022 | $8.30m | Reported |
| Venus Protocol: Stale Oracle Price | 12 May 2022 | $11.20m | Reported |
| Drift Trade: Risk Parameter Abuse | 11 May 2022 | $14.50m | Recovered |
| X2Y2: Phishing | 11 May 2022 | $200.0k | Reported |
| Fortress Loans: Malicious Proposal | 8 May 2022 | $2.98m | Reported |
| MM Finance Cronos: DNS Hijack | 4 May 2022 | $2.00m | Reported |
| Rari Capital: Reentrancy | 1 May 2022 | $80.00m | Reported |
| Saddle Finance: Swap Logic Flaw | 30 Apr 2022 | $11.00m | Reported |
| DEUS Finance: Spot Price Manipulation | 28 Apr 2022 | $13.40m | Reported |
| Terra (LUNA): Phishing | 21 Apr 2022 | $4.31m | Reported |
| Zeed Finance: Arithmetic Error | 21 Apr 2022 | $1.00m | Reported |
| Beanstalk: Flashloan Governance Attack | 17 Apr 2022 | $181.00m | Reported |
| Rikkei Finance: Improper Access Control | 15 Apr 2022 | $1.10m | Reported |
| Elephant Money: Spot Price Manipulation | 12 Apr 2022 | $22.20m | Reported |
| CF Token: Improper Access Control | 11 Apr 2022 | $1.90m | Reported |
| Starstream Finance: Admin Drain | 7 Apr 2022 | $4.00m | Reported |
| WonderHero: Hot Wallet Key Compromised | 7 Apr 2022 | $320.0k | Reported |
| Inverse Finance Frontier: Spot Price Manipulation | 2 Apr 2022 | $15.60m | Reported |
| Ola Finance: Reentrancy | 31 Mar 2022 | $4.67m | Reported |
| BasketDAO: Arbitrary External Call | 30 Mar 2022 | $1.20m | Reported |
| Cryptovoxels: Phishing | 28 Mar 2022 | $171.0k | Reported |
| Revest Finance: Reentrancy | 27 Mar 2022 | $2.01m | Reported |
| Auctus: Arbitrary External Call | 26 Mar 2022 | $726.0k | Reported |
Download this dataset
The files contain the recorded rows, including incidents without a reported amount.