Security incidents
Hacks, exploits and protocol failures recorded by the desk, with the date, the reported amount where a source states one, and a link to the record.
Reported losses by year
Sums use only amounts a source stated. Incidents without a reported figure are excluded.
- 2026: 280 incidents, $20.53bn reported
- 2025: 122 incidents, $2.80bn reported
- 2024: 158 incidents, $1.67bn reported
- 2023: 161 incidents, $1.62bn reported
- 2022: 141 incidents, $3.63bn reported
- 2021: 119 incidents, $2.86bn reported
| Incident | Date | Reported amount | Status |
|---|---|---|---|
| Cozy V2: Unknown | 7 Sep 2026 | $163.3k | Reported |
| Liquid Network: Unbacked Cross-Chain Mint | 6 Sep 2026 | $320.00m | Reported |
| Rocket Perp: Risk Parameter Abuse | 5 Sep 2026 | $287.7k | Recovered |
| Secured Finance Lending: Spot Price Manipulation | 5 Sep 2026 | $104.0k | Reported |
| Notional V2: Arithmetic Error | 4 Sep 2026 | $1.73m | Reported |
| Radix: Improper Access Control | 31 Aug 2026 | $1.25m | Reported |
| Ankr: Unbacked Mint | 31 Aug 2026 | $410.0k | Reported |
| Aquifer: Arbitrary External Call | 31 Aug 2026 | $2.47m | Reported |
| Tectonic: Donation Attack | 30 Aug 2026 | $124.47m | Reported |
| Balancer V1: Rounding Error | 30 Aug 2026 | $234.0k | Reported |
| Fogo Foundation: Private Key Compromised | 28 Aug 2026 | $3.00m | Reported |
| Avici: Withdrawal Logic Flaw | 28 Aug 2026 | $500.9k | Reported |
| Virtue: Oracle Misconfiguration | 28 Aug 2026 | $894.5k | Reported |
| Ajna V2: Liquidation Logic Flaw | 28 Aug 2026 | $775.4k | Reported |
| CCC: Swap Logic Flaw | 27 Aug 2026 | $117.0k | Reported |
| Moonwell Lending: Spot Price Manipulation | 27 Aug 2026 | $8.70m | Reported |
| Enjin: Ownership Takeover | 25 Aug 2026 | $162.0k | Reported |
| CometDEX: Incorrect Share Accounting | 25 Aug 2026 | $717.0k | Reported |
| Nesa: Arithmetic Error | 24 Aug 2026 | $50.00m | Reported |
| TermFinance Vaults: Malicious Proposal | 23 Aug 2026 | $8.50m | Reported |
| KiiChain: Arithmetic Error | 22 Aug 2026 | $9.70m | Reported |
| The Sandbox: Improper Access Control | 22 Aug 2026 | $675.0k | Reported |
| TAC: Withdrawal Logic Flaw | 22 Aug 2026 | $7.50m | Reported |
| Allbridge: Bridge Logic Flaw | 19 Aug 2026 | $191.0k | Reported |
| BounceBit: Improper Access Control | 19 Aug 2026 | $3.00m | Reported |
Download this dataset
The files contain the recorded rows, including incidents without a reported amount.