Web3 Hacks in 2017

2017 incident records, sorted by known loss. The strongest mapped pattern is Access Control (6 rows); the largest tracked chain bucket is Ethereum ($189.1M).

Open full database

Incident records

Sorted by known reported loss first, then recency. Open the source before treating any summary as final.

Links
1 BTC-e $181M — Rugpull Details Source
2 Parity Multisig $150M ethereum Access Control Attacks Details Source
3 Control Finance $147M — Rugpull Details Source2
4 NiceHash $64.0M bitcoin Other / Key Leaked via Infrastructure Details Source
5 Tether $31.0M bitcoin Access Control Attacks Details Source
6 Parity $30.0M ethereum Access Control Attacks Details Source
7 Eth Contingency $25.0M — Rugpull Details Source
8 Youbit $10.0M bitcoin Other / Hot Wallet Key Compromised Details Source
9 CoinDash $7.7M ethereum Frontend Attack / Frontend Compromise / Other Details Source
10 Yapizon $4.8M bitcoin Other / Hot Wallet Key Compromised Details Source2
11 OKEx $3.0M — Other Details Source
12 Coinis $1.9M — Access Control Attacks Details Source
13 EtherDelta $1.4M ethereum Access Control Attacks Details Source2
14 Bithumb $1.0M — Access Control Attacks Details Source2
15 Enigma $500K — Other Details Source2
16 ABTC — ethereum Honeypot Details Source2

Notes

Loss totals use parsed USD values only; unknown or unparseable losses are not guessed. Attack-class links are added only when the root cause is clear enough to map.

Full hack database Filter every tracked incident by chain, date, loss size, and technique. Attack class library Move from incident examples to exploit mechanics and review checklists. Largest crypto hacks Compare this year against the highest-loss incidents in the database.