Security incidents
Hacks, exploits and protocol failures recorded by the desk, with the date, the reported amount where a source states one, and a link to the record.
Reported losses by year
Sums use only amounts a source stated. Incidents without a reported figure are excluded.
- 2026: 280 incidents, $20.53bn reported
- 2025: 122 incidents, $2.80bn reported
- 2024: 158 incidents, $1.67bn reported
- 2023: 161 incidents, $1.62bn reported
- 2022: 141 incidents, $3.63bn reported
- 2021: 119 incidents, $2.86bn reported
| Incident | Date | Reported amount | Status |
|---|---|---|---|
| Maya Protocol: Withdrawal Logic Flaw | 18 Aug 2026 | $1.70m | Reported |
| Fox Market: Spot Price Manipulation | 15 Aug 2026 | $120.0k | Reported |
| Harmony Bridge: Bridge Logic Flaw | 11 Aug 2026 | $3.20m | Reported |
| USM: Arithmetic Error | 9 Aug 2026 | $136.0k | Reported |
| Coreum Bridge: Bridge Logic Flaw | 9 Aug 2026 | $200.0k | Reported |
| Coinsbuy: Improper Access Control | 9 Aug 2026 | $7.90m | Reported |
| Oraichain: Unbacked Cross-Chain Mint | 8 Aug 2026 | $1.00m | Reported |
| RRWallet: Weak Key Generation | 6 Aug 2026 | $2.00m | Reported |
| KITE Foundation: Private Key Compromised | 5 Aug 2026 | $13.34m | Reported |
| RISEx: Improper Access Control | 3 Aug 2026 | $673.0k | Reported |
| LOOPSDAO: Spot Price Manipulation | 2 Aug 2026 | $693.5k | Reported |
| MOKE: Spot Price Manipulation | 2 Aug 2026 | $907.0k | Reported |
| COLDCARD: Weak Key Generation | 31 Jul 2026 | $116.00m | Reported |
| Swan Treasury: Private Key Compromised | 30 Jul 2026 | $625.0k | Reported |
| LULA: Improper Access Control | 28 Jul 2026 | $578.0k | Reported |
| Crypto DAO: Improper Access Control | 28 Jul 2026 | $8.20m | Reported |
| ChainConnect: Improper Access Control | 26 Jul 2026 | $650.0k | Reported |
| WEMIX.FI Lend: Improper Access Control | 26 Jul 2026 | $737.0k | Reported |
| Garden: Database Breach | 26 Jul 2026 | $450.0k | Reported |
| Projekt: Missing Input Validation | 25 Jul 2026 | $560.0k | Reported |
| Bankr: Social Account Takeover | 25 Jul 2026 | $479.9k | Reported |
| Triple-A: Hot Wallet Key Compromised | 24 Jul 2026 | $9.70m | Reported |
| Lien: Missing Input Validation | 23 Jul 2026 | $542.0k | Reported |
| Solido Cash: Oracle Misconfiguration | 23 Jul 2026 | $900.0k | Reported |
| Zilliqa: Weak Key Generation | 22 Jul 2026 | $1.64m | Reported |
Download this dataset
The files contain the recorded rows, including incidents without a reported amount.