Annual Hack Dataset

Web3 Hacks in 2019

2019 incident records, sorted by known loss. The strongest mapped pattern is Access Control (13 rows); the largest tracked chain bucket is Ethereum ($0).

Open full database

Incident records

Sorted by known reported loss first, then recency. Open the source before treating any summary as final.

Links
1 PlusToken $2.9B — Rugpull Details Source
2 Token.Store $160M — Rugpull Details Source
3 QuadrigaCX $147M — Access Control Attacks Details Source
4 Upbit $51.2M — Access Control Attacks Details Source
5 CoinBene $45.0M — Access Control Attacks Details Source
6 Binance $41.7M — Access Control Attacks Details Source
7 Bitpoint $32.0M — Access Control Attacks Details Source
8 Bitmarket $27.1M — Rugpull Details Source
9 Coinbin $26.0M — Access Control Attacks Details Source
10 Bithumb $19.2M — Access Control Attacks Details Source
11 Kraken $10.5M — Access Control Attacks Details Source
12 GateHub $10.0M — Access Control Attacks Details Source
13 DragonEx $6.0M — Rugpull Details Source
14 Bitrue $5.0M — Access Control Attacks Details Source
15 BitoPro $2.2M — Other Details Source
16 CoinTiger $1.8M — Access Control Attacks Details Source
17 Soxex $1.0M — Rugpull Details Source
18 Bitcoin Norway $1.0M — Other Details Source
19 Bitsane $570K — Rugpull Details Source
20 VinDAX $500K — Other Details Source
21 Netbox $132K — Rugpull Details Source
22 Biki $123K — Access Control Attacks Details Source
23 Coinbase $100K — Access Control Attacks Details Source
24 LocalBitcoins $27K — Other Details Source
25 Coinroom — — Rugpull Details Source
26 Qubicle — ethereum Honeypot Details Source

Notes

Loss totals use parsed USD values only; unknown or unparseable losses are not guessed. Attack-class links are added only when the root cause is clear enough to map.

Full hack database Filter every tracked incident by chain, date, loss size, and technique. Attack class library Move from incident examples to exploit mechanics and review checklists. Largest crypto hacks Compare this year against the highest-loss incidents in the database.