Web3 Hacks in 2019

2019 incident records, sorted by known loss. The strongest mapped pattern is Access Control (15 rows); the largest tracked chain bucket is Ethereum ($167.6M).

Open full database

Incident records

Sorted by known reported loss first, then recency. Open the source before treating any summary as final.

Links
1 PlusToken $2.9B — Rugpull Details Source
2 Token.Store $160M — Rugpull Details Source
3 QuadrigaCX $147M — Access Control Attacks Details Source
4 Upbit $51.2M ethereum Access Control Attacks Details Source
5 Binance $41.7M bitcoin Access Control Attacks Details Source
6 Bitpoint $32.0M bitcoin, ethereum, litecoin, xrp Access Control Attacks Details Source
7 Bitmarket $27.1M — Rugpull Details Source
8 Coinbin $26.0M ethereum Access Control Attacks Details Source
9 Bithumb $19.2M ethereum, ripple Access Control Attacks Details Source
10 Cryptopia $16.0M ethereum Suspected private-key compromise Details
11 Kraken $10.5M bitcoin Access Control Attacks Details Source
12 GateHub $10.0M ripple Access Control Attacks Details Source
13 CoinTiger (PTT) $9.2M ethereum Key Leaked via Infrastructure Details
14 DragonEx $7.0M bitcoin, eos, etc, ethereum, nem, ripple Rugpull / Key Leaked via Infrastructure Details Source
15 VeChain $6.5M vechain Access Control Attacks Details
16 Chain Fusion $6.4M ethereum Access Control Attacks Details
17 Bitrue $5.0M cardano, ripple Access Control Attacks Details Source
18 TronBank $4.3M tron Backdoor Contract Details
19 BitoPro $2.2M — Other Details Source
20 CoinTiger $1.8M — Access Control Attacks Details Source
21 Soxex $1.0M — Rugpull Details Source
22 Bitcoin Norway $1.0M — Other Details Source
23 Bitsane $570K — Rugpull Details Source
24 VinDAX $500K ethereum, multiple Other / Key Leaked via Infrastructure Details Source
25 Nuls $480K nuls Signature Verification Flaw Details
26 Ethereum Classic $220K ethereum classic Forged Proof Details
27 Netbox $132K bitcoin, ethereum Rugpull / Key Leaked via Infrastructure Details Source
28 Biki $123K — Access Control Attacks Details Source
29 Coinbase $100K — Access Control Attacks Details Source
30 LocalBitcoins $27K bitcoin Other / Key Leaked via Infrastructure Details Source
31 Vertcoin $29 vertcoin Validator Key Compromised Details
32 Synthetix — ethereum Oracle Manipulation & Price Manipulation Details
33 Coinroom — — Rugpull Details Source
34 Poker EOS — eos Access Control Attacks Details
35 Qubicle — ethereum Honeypot Details Source
36 TronWow — tron Unknown Details
37 TronBank — tron Infinite Mint Details
38 TronCrush — tron Infinite Mint Details
39 CoinBene — ethereum Suspected wallet compromise; cause unconfirmed Details Source

Notes

Loss totals use parsed USD values only; unknown or unparseable losses are not guessed. Attack-class links are added only when the root cause is clear enough to map.

Full hack database Filter every tracked incident by chain, date, loss size, and technique. Attack class library Move from incident examples to exploit mechanics and review checklists. Largest crypto hacks Compare this year against the highest-loss incidents in the database.