Web3 Hacks in 2017

2017 incident records, sorted by known loss. The strongest mapped pattern is Access Control (7 rows); the largest tracked chain bucket is Ethereum ($189.1M).

Open full database

Incident records

Sorted by known reported loss first, then recency. Open the source before treating any summary as final.

Links
1 BTC-e $181M — Rugpull Details Source
2 Parity $155M — Other Details Source
3 Parity Multisig $150M ethereum Access Control Attacks Details Source
4 Control Finance $147M — Rugpull Details Source
5 NiceHash $64.0M bitcoin Other / Key Leaked via Infrastructure Details Source
6 Tether $31.0M bitcoin Access Control Attacks Details Source
7 Parity $30.0M — Access Control Attacks Details Source
8 Parity $30.0M ethereum Access Control Attacks Details
9 Eth Contingency $25.0M — Rugpull Details Source
10 CoinDash $12.2M — Other Details Source
11 Youbit $10.0M bitcoin Other / Hot Wallet Key Compromised Details Source
12 CoinDash $7.7M ethereum Frontend Attack / Frontend Compromise Details Source
13 Yapizon $5.0M — Other Details Source
14 Yapizon $4.8M bitcoin Hot Wallet Key Compromised Details
15 OKEx $3.0M — Other Details Source
16 Coinis $1.9M — Access Control Attacks Details Source
17 EtherDelta $1.4M ethereum Access Control Attacks Details Source
18 Bithumb $1.0M — Access Control Attacks Details Source
19 Enigma $500K — Other Details Source
20 ABTC — ethereum Honeypot Details Source

Notes

Loss totals use parsed USD values only; unknown or unparseable losses are not guessed. Attack-class links are added only when the root cause is clear enough to map.

Full hack database Filter every tracked incident by chain, date, loss size, and technique. Attack class library Move from incident examples to exploit mechanics and review checklists. Largest crypto hacks Compare this year against the highest-loss incidents in the database.