Annual Hack Dataset
Web3 Hacks in 2016
2016 incident records, sorted by known loss. The strongest mapped pattern is Access Control (4 rows); the largest tracked chain bucket is Ethereum ($60.0M).
Incident records
Sorted by known reported loss first, then recency. Open the source before treating any summary as final.
| Links | ||||||
|---|---|---|---|---|---|---|
| 1 | Trade Coin Club | $295M | — | Other | Details Source | |
| 2 | Bitfinex | $65.0M | — | Access Control Attacks | Details Source | |
| 3 | The DAO | $60.0M | ethereum | Reentrancy | Details Source | |
| 4 | OneCoin | $4.0M | — | Rugpull | Details Source | |
| 5 | Gatecoin | $2.1M | — | Access Control Attacks | Details Source | |
| 6 | Bitcurex | $1.5M | — | Other | Details Source | |
| 7 | Shapeshift | $269K | — | Access Control Attacks | Details Source | |
| 8 | Rubixi | $7K | — | Access Control Attacks | Details Source |
Notes
Loss totals use parsed USD values only; unknown or unparseable losses are not guessed. Attack-class links are added only when the root cause is clear enough to map.