Real Access Control Hacks

Real incidents mapped to access control. Start with the records, open the source, then use the attack guide when an incident matches the code you are reviewing.

Incident records

Sorted by known reported loss first, then recency. Open the source before treating any summary as final.

Links
1 LuBian $3.5B bitcoin Access Control Attacks
2 Bybit $1.4B ethereum Access Control Attacks
3 Ronin $625M ethereum Access Control Attacks
4 Poly Network $611M bsc, ethereum, polygon Access Control Attacks
5 Coincheck $534M nem Access Control Attacks
6 Mt. Gox $473M bitcoin Access Control Attacks
7 Bitget $352M ethereum, tron, xrp, zcash Access Control Attacks
8 Wormhole $326M solana Access Control Attacks
9 DMM Bitcoin $305M bitcoin Access Control Attacks
10 Kelp DAO $293M arbitrum, ethereum Access Control Attacks
11 PlayDapp $290M ethereum Access Control Attacks
12 KuCoin $285M ethereum Access Control Attacks
13 Drift Protocol $280M solana Access Control Attacks
14 Gate $235M — Access Control Attacks
15 WazirX: India $235M ethereum Access Control Attacks
16 Bitmart $196M bsc, ethereum Access Control Attacks
17 Nomad $190M ethereum Access Control Attacks
18 BitGrail $170M nano Access Control Attacks
19 Wintermute $160M ethereum Access Control Attacks
20 Parity Multisig $150M ethereum Access Control Attacks
21 QuadrigaCX $147M — Access Control Attacks
22 Vulcan Forged $140M ethereum, polygon Access Control Attacks
23 Boy X Highspeed $139M bsc Access Control Attacks
24 Balancer V2 $128M arbitrum, base, ethereum, optimism, polygon, sonic Access Control Attacks
25 Poloniex $126M bitcoin, ethereum, tron Access Control Attacks
26 Multichain $126M bsc, fantom, moonriver Access Control Attacks
27 Atomic Wallet $115M avalanche, bitcoin, bsc, ethereum, polkadot, tron Access Control Attacks
28 Chris Larsen $112M — Access Control Attacks
29 Horizon by Harmony $100M bsc, ethereum Access Control Attacks
30 Liquid $97.0M ethereum Access Control Attacks
31 Mirror $90.0M terra Access Control Attacks
32 HECO $86.3M ethereum Access Control Attacks
33 Phemex $85.0M arbitrum, avalanche, base, bitcoin, bsc, ethereum, optimism, polygon, solana, sui, tron, xrp, zksync era Access Control Attacks
34 Nobitex $82.0M arbitrum, avalanche, bitcoin, bsc, ethereum, polygon, tron Access Control Attacks
35 Orbit Chain $81.5M ethereum Access Control Attacks
36 AscenDEX $77.7M bsc, ethereum, polygon Access Control Attacks
37 StakeHound / Fireblocks $72.0M ethereum Access Control Attacks
38 Bitfinex $72.0M bitcoin Access Control Attacks
39 UPCX $70.0M ethereum Access Control Attacks
40 Munchables $62.5M blast Access Control Attacks
41 EasyFi $59.0M ethereum, polygon Access Control Attacks
42 Radiant Capital $58.0M arbitrum, bsc Access Control Attacks
43 CoinEx $55.0M arbitrum, bitcoin, bitcoincash, bsc, dagger, ethereum, kadena, polygon, solana, stellar, tron, xrp Access Control Attacks
44 BtcTurk $54.0M — Access Control Attacks
45 Cashio $52.8M solana Access Control Attacks
46 BingX $52.0M ethereum Access Control Attacks
47 Upbit $51.2M ethereum Access Control Attacks
48 Infini $50.0M ethereum Access Control Attacks
49 Blockchain.com $50.0M — Access Control Attacks
50 UXLINK $48.0M arbitrum, ethereum Access Control Attacks
51 BtcTurk $48.0M arbitrum, avalanche, base, ethereum, mantle, optimism, polygon Access Control Attacks
52 bZx $47.6M bsc, polygon Access Control Attacks
53 Hedgey $44.7M arbitrum, ethereum Access Control Attacks
54 CoinDCX $44.2M — Access Control Attacks
55 Binance $41.7M bitcoin Access Control Attacks
56 Stake.com $41.4M bsc, ethereum, polygon Access Control Attacks
57 Bo Shen Wallet Hack $41.1M — Access Control Attacks
58 Step Finance $40.0M solana Access Control Attacks
59 Coinrail $40.0M ethereum Access Control Attacks
60 Upbit $36.0M solana Access Control Attacks
61 Crypto.com $34.4M bitcoin, ethereum Access Control Attacks
62 Bitpoint $32.0M bitcoin, ethereum, litecoin, xrp Access Control Attacks
63 Humanity Protocol $31.0M bsc, ethereum Access Control Attacks
64 Bithumb $31.0M ethereum Access Control Attacks
65 Tether $31.0M bitcoin Access Control Attacks
66 Parity $30.0M ethereum Access Control Attacks
67 BigONE $28.0M bitcoin, bsc, ethereum, solana, tron Access Control Attacks
68 Deribit $28.0M — Access Control Attacks
69 Wintermute $27.6M optimism Access Control Attacks
70 Binance User $27.1M — Access Control Attacks
71 Huobi $26.4M ethereum Access Control Attacks
72 FixedFloat $26.1M bitcoin, ethereum Access Control Attacks
73 Coinbin $26.0M ethereum Access Control Attacks
74 Indodax $25.2M ethereum, optimism, polygon Access Control Attacks
75 Resolv $25.0M ethereum Access Control Attacks
76 AFX $24.1M arbitrum Access Control Attacks
77 Ostium $24.0M arbitrum Access Control Attacks
78 SBI Crypto $24.0M bitcoin, bitcoincash, doge, ethereum, litecoin Access Control Attacks
79 Ankr $24.0M bsc Access Control Attacks
80 Bitrue $23.0M — Access Control Attacks
81 Gala Games $22.3M ethereum Access Control Attacks
82 HTX $21.9M — Access Control Attacks
83 Bilaxy $21.7M ethereum Access Control Attacks
84 BonkDAO $21.0M solana Access Control Attacks
85 Hyperliquid User Private Key Compromise $21.0M — Access Control Attacks
86 Superfluid $20.0M polygon Access Control Attacks
87 Bithumb $19.2M ethereum, ripple Access Control Attacks
88 Lympo $18.7M ethereum Access Control Attacks
89 Pando $18.6M mixin Access Control Attacks
90 GAMEE $16.4M polygon Access Control Attacks
91 AlexLab $16.1M stacks Access Control Attacks
92 Curio $16.0M ethereum Access Control Attacks
93 Rari Capital $15.7M ethereum Access Control Attacks
94 SUPERFORTUNE AI $15.2M ethereum Access Control Attacks
95 Electrum $15.0M — Access Control Attacks
96 Holograph $14.4M ethereum Access Control Attacks
97 Furucombo $14.0M ethereum Access Control Attacks
98 M2 $13.7M bitcoin, ethereum, solana Access Control Attacks
99 GDAC $13.0M — Access Control Attacks
100 79thVault $12.5M — Access Control Attacks

Notes

Loss totals use parsed USD values only; unknown or unparseable losses are not guessed. Attack-class links are added only when the root cause is clear enough to map.