Security incidents
Hacks, exploits and protocol failures recorded by the desk, with the date, the reported amount where a source states one, and a link to the record.
Reported losses by year
Sums use only amounts a source stated. Incidents without a reported figure are excluded.
- 2026: 280 incidents, $20.53bn reported
- 2025: 122 incidents, $2.80bn reported
- 2024: 158 incidents, $1.67bn reported
- 2023: 161 incidents, $1.62bn reported
- 2022: 141 incidents, $3.63bn reported
- 2021: 119 incidents, $2.86bn reported
| Incident | Date | Reported amount | Status |
|---|---|---|---|
| DAO Maker Vesting: Improper Access Control | 4 Sep 2021 | $4.00m | Reported |
| Siren: Reentrancy | 3 Sep 2021 | $3.50m | Reported |
| CREAM Lending: Reentrancy | 30 Aug 2021 | $18.80m | Reported |
| Bilaxy: Hot Wallet Key Compromised | 29 Aug 2021 | $21.70m | Reported |
| xToken: Spot Price Manipulation | 29 Aug 2021 | $4.50m | Reported |
| Dot.Finance: Spot Price Manipulation | 25 Aug 2021 | $429.7k | Reported |
| Liquid Global: Hot Wallet Key Compromised | 19 Aug 2021 | $91.35m | Reported |
| Pinecone Finance: Incorrect Share Accounting | 19 Aug 2021 | $200.0k | Reported |
| SurgeBNB: Reentrancy | 17 Aug 2021 | $5.00m | Reported |
| Ref Finance: Missing Input Validation | 15 Aug 2021 | $3.20m | Reported |
| Acala Network: Infinite Mint | 13 Aug 2021 | $1.60m | Reported |
| NEKO: Improper Access Control | 13 Aug 2021 | $2.20m | Reported |
| DAO Maker Vesting: Improper Access Control | 12 Aug 2021 | $7.00m | Reported |
| Punk Protocol: Delegatecall Hijack | 10 Aug 2021 | $8.95m | Reported |
| Poly Network: Improper Access Control | 10 Aug 2021 | $611.00m | Reported |
| Zerogoki: Oracle Misconfiguration | 8 Aug 2021 | $670.0k | Reported |
| WaultSwap: Risk Parameter Abuse | 4 Aug 2021 | $930.0k | Reported |
| Popsicle Finance: Reward Logic Flaw | 3 Aug 2021 | $20.70m | Reported |
| Levyathan: Key Stored Publicly | 30 Jul 2021 | $1.50m | Reported |
| PolyYeld Finance: Infinite Mint | 28 Jul 2021 | $250.0k | Reported |
| THORChain DEX: Withdrawal Logic Flaw | 22 Jul 2021 | $8.00m | Reported |
| Bunny: Unbacked Mint | 16 Jul 2021 | $2.40m | Reported |
| Bondly: Phishing | 15 Jul 2021 | $5.90m | Reported |
| THORChain DEX: Bridge Logic Flaw | 15 Jul 2021 | $5.00m | Reported |
| ApeRocket: Reward Logic Flaw | 14 Jul 2021 | $1.26m | Reported |
Download this dataset
The files contain the recorded rows, including incidents without a reported amount.