Security incidents
Hacks, exploits and protocol failures recorded by the desk, with the date, the reported amount where a source states one, and a link to the record.
Reported losses by year
Sums use only amounts a source stated. Incidents without a reported figure are excluded.
- 2026: 280 incidents, $20.53bn reported
- 2025: 122 incidents, $2.80bn reported
- 2024: 158 incidents, $1.67bn reported
- 2023: 161 incidents, $1.62bn reported
- 2022: 141 incidents, $3.63bn reported
- 2021: 119 incidents, $2.86bn reported
| Incident | Date | Reported amount | Status |
|---|---|---|---|
| Ronin Bridge: Validator Key Compromised | 23 Mar 2022 | $624.00m | Reported |
| Cashio: Missing Input Validation | 23 Mar 2022 | $52.80m | Reported |
| LI.FI: Token Approval Abuse | 21 Mar 2022 | $600.0k | Reported |
| One Ring Finance: Improper Access Control | 21 Mar 2022 | $1.40m | Reported |
| Umbrella Network: Improper Access Control | 20 Mar 2022 | $700.0k | Reported |
| ApeCoin: Flashloan Governance Attack | 17 Mar 2022 | $820.0k | Reported |
| DEUS Finance: Spot Price Manipulation | 15 Mar 2022 | $3.00m | Reported |
| Agave: Reentrancy | 15 Mar 2022 | $5.50m | Reported |
| Hundred Finance: Reentrancy | 15 Mar 2022 | $6.20m | Reported |
| Paraluni Masterchef: Reentrancy | 13 Mar 2022 | $1.70m | Reported |
| Fantasm Finance: Missing Input Validation | 9 Mar 2022 | $2.62m | Reported |
| Bacon Protocol: Reentrancy | 5 Mar 2022 | $1.00m | Reported |
| Treasure: Missing Input Validation | 3 Mar 2022 | $1.40m | Reported |
| Flurry Finance: Incorrect Share Accounting | 23 Feb 2022 | $293.0k | Reported |
| OpenSea: Phishing | 20 Feb 2022 | $2.00m | Reported |
| Rigoblock: Improper Access Control | 18 Feb 2022 | $464.0k | Reported |
| TopGoal: Hot Wallet Key Compromised | 17 Feb 2022 | $1.10m | Reported |
| Build Finance: Malicious Proposal | 15 Feb 2022 | $470.0k | Reported |
| Titano Finance: Backdoor Contract | 14 Feb 2022 | $1.95m | Reported |
| IRA Financial / Gemini: API Key Compromised | 12 Feb 2022 | $36.00m | Reported |
| Dego Finance: Deployer Key Compromised | 10 Feb 2022 | $10.00m | Reported |
| Superfluid: Missing Input Validation | 8 Feb 2022 | $8.70m | Reported |
| Meter: Missing Input Validation | 6 Feb 2022 | $7.70m | Reported |
| KlaySwap: Frontend Compromise | 3 Feb 2022 | $1.90m | Reported |
| Portal: Signature Verification Flaw | 2 Feb 2022 | $326.00m | Recovered |
Download this dataset
The files contain the recorded rows, including incidents without a reported amount.