Web3 Hacks in 2020
2020 incident records, sorted by known loss. The strongest mapped pattern is Access Control (12 rows); the largest tracked chain bucket is Bitcoin ($3.5B).
Incident records
Sorted by known reported loss first, then recency. Open the source before treating any summary as final.
| Links | ||||||
|---|---|---|---|---|---|---|
| 1 | LuBian | $3.5B | bitcoin | Access Control Attacks | Details Source | |
| 2 | WoToken | $1.0B | — | Rugpull | Details Source 1Source 2Source 3 | |
| 3 | KuCoin | $285M | ethereum | Access Control Attacks | Details Source | |
| 4 | Harvest Finance | $33.8M | ethereum | Flash Loan Attacks | Details Source | |
| 5 | Lendf.me | $25.2M | ethereum | Reentrancy | Details Source | |
| 6 | Pickle Finance | $19.7M | ethereum | Other / Vault Swap Exploit / Missing Input Validation | Details Source 1Source 2Source 3 | |
| 7 | Eminence | $15.1M | ethereum | Flash Loan Attacks | Details Source | |
| 8 | Electrum | $15.0M | — | Access Control Attacks | Details Source | |
| 9 | Compounder Finance | $12.5M | ethereum | Drained Contracts / Rugpull / Admin Drain | Details Source | |
| 10 | EXMO | $11.7M | multiple | Access Control Attacks | Details Source | |
| 11 | SharkTron | $10.0M | — | Rugpull | Details Source | |
| 12 | Cover Protocol | $9.4M | ethereum | Incentives Function Mistake / Other / Arithmetic Error | Details Source | |
| 13 | MakerDAO | $8.3M | ethereum | Oracle Manipulation & Price Manipulation | Details | |
| 14 | bZx | $8.1M | ethereum | Self-transfer balance duplication | Details Source 1Source 2Source 3 | |
| 15 | Nexus Mutual | $8.0M | ethereum | Key Leaked via Infrastructure | Details | |
| 16 | Origin Protocol | $8.0M | ethereum | Flash Loan Attacks | Details Source | |
| 17 | Warp Protocol | $7.8M | ethereum | Flash Loan Attacks | Details Source | |
| 18 | ValueDefi | $7.4M | ethereum | Flash Loan Attacks | Details Source | |
| 19 | OKEx | $5.6M | ethereum classic | Forged Proof | Details | |
| 20 | ETERBASE | $5.4M | algorand, bitcoin, ethereum, tezos, tron, xrp | Access Control Attacks | Details Source 1Source 2Source 3 | |
| 21 | Aeternity | $5.2M | aeternity | Validator Key Compromised | Details | |
| 22 | Livecoin | $3.3M | multiple | API Key Compromised | Details | |
| 23 | Cheese Bank | $3.3M | ethereum | Flash Loan Attacks | Details Source 1Source 2 | |
| 24 | Cashaa | $3.1M | bitcoin | Access Control Attacks | Details Source 1Source 2Source 3 | |
| 25 | IOTA wallet | $2.9M | — | Other | Details Source 1Source 2 | |
| 26 | EtherCrash | $2.5M | ethereum | Hot Wallet Key Compromised | Details | |
| 27 | Emerald Mine | $2.5M | eos | Rugpull | Details Source | |
| 28 | Trinity Wallet | $2.4M | iota | Cloudflare Key Compromised / CDN Compromise | Details Source | |
| 29 | Deriswap | $2.2M | ethereum | Rugpull | Details Source | |
| 30 | Akropolis | $2.0M | ethereum | Flash Loan Attacks | Details Source | |
| 31 | Percent Finance | $1.9M | — | Other | Details Source 1Source 2 | |
| 32 | Ledger | $1.8M | — | Access Control Attacks | Details Source 1Source 2 | |
| 33 | Ethereum Classic | $1.7M | ethereum classic | Forged Proof | Details | |
| 34 | 2gether | $1.4M | bitcoin, ethereum | Rugpull / Key Leaked via Infrastructure | Details Source 1Source 2 | |
| 35 | Axion Network | $1.1M | ethereum | Other / Infinite Mint | Details Source 1Source 2Source 3 | |
| 36 | Altilly | $750K | multiple | Rugpull / API Key Compromised | Details Source | |
| 37 | Yam DAO | $750K | — | Other | Details Source 1Source 2Source 3 | |
| 38 | UniCat.farm | $713K | ethereum | Rugpull | Details Source | |
| 39 | bZx | $666K | ethereum | Flash Loan Attacks | Details Source 1Source 2 | |
| 40 | Bancor | $545K | ethereum | Access Control Attacks | Details Source | |
| 41 | Kper Network | $542K | ethereum | Rugpull | Details Source | |
| 42 | Balancer | $524K | ethereum | Flash Loan Attacks | Details Source 1Source 2Source 3 | |
| 43 | Pump Farm | $478K | ethereum | Rugpull | Details Source 1Source 2 | |
| 44 | Vether | $450K | ethereum | Access Control Attacks | Details | |
| 45 | Coral | $420K | eos | Reentrancy | Details | |
| 46 | DEFIBase | $379K | ethereum | Rugpull | Details Source | |
| 47 | opyn | $371K | ethereum | Other / Withdrawal Logic Flaw | Details Source 1Source 2 | |
| 48 | Hype Bet Finance | $364K | ethereum | Rugpull | Details Source | |
| 49 | bZx | $356K | ethereum | Flash Loan Attacks | Details Source 1Source 2 | |
| 50 | LV Finance | $334K | ethereum | Rugpull | Details Source | |
| 51 | Altsbit | $303K | bitcoin, ethereum | Other / Key Leaked via Infrastructure | Details Source | |
| 52 | Tomatos | $286K | ethereum | Rugpull | Details Source | |
| 53 | Soft Yearn Finance | $281K | — | Other | Details Source 1Source 2 | |
| 54 | Ledger | $271K | multiple | Phishing Attacks | Details | |
| 55 | SYFI | $250K | ethereum | Arithmetic Error | Details | |
| 56 | Bisq | $250K | bitcoin | Other / Withdrawal Logic Flaw | Details Source 1Source 2 | |
| 57 | Chainlink | $245K | — | Other | Details Source | |
| 58 | POKeFARM | $238K | ethereum | Rugpull | Details Source | |
| 59 | Uniswap | $232K | ethereum | Reentrancy | Details Source 1Source 2 | |
| 60 | Ledger | $224K | — | Access Control Attacks | Details Source 1Source 2 | |
| 61 | Tetris Finance | $218K | — | Rugpull | Details Source | |
| 62 | Santa DAO | $204K | ethereum | Rugpull | Details Source 1Source 2 | |
| 63 | DistX | $198K | ethereum | Rugpull | Details Source | |
| 64 | Magix | $188K | ethereum | Rugpull | Details Source | |
| 65 | Cover protocol | $183K | ethereum | Rugpull | Details | |
| 66 | KeeperDAO | $170K | ethereum | Honeypot | Details | |
| 67 | Chessfarm.Tech | $168K | binance | Rugpull | Details Source | |
| 68 | Soda Protocol | $160K | ethereum | Withdrawal Logic Flaw | Details | |
| 69 | Walletreum | $138K | ethereum | Rugpull | Details Source | |
| 70 | YFFS Finance | $130K | ethereum | Rugpull | Details Source | |
| 71 | XYearn | $130K | ethereum | Rugpull | Details Source | |
| 72 | $120K | — | Access Control Attacks | Details Source 1Source 2Source 3Source 4 | ||
| 73 | Dark Matter | $112K | ethereum | Rugpull | Details | |
| 74 | Vice.Uno | $111K | binance | Rugpull | Details Source | |
| 75 | Dividend Token | $92K | ethereum | Rugpull | Details Source | |
| 76 | CBDAO | $84K | ethereum | Rugpull | Details Source | |
| 77 | Star Swap | $77K | ethereum | Rugpull | Details | |
| 78 | Exvault Finance | $73K | ethereum | Rugpull | Details Source | |
| 79 | YFFC | $72K | ethereum | Rugpull | Details Source | |
| 80 | Solid Protocol | $72K | ethereum | Rugpull | Details Source | |
| 81 | UniTarget | $71K | ethereum | Rugpull | Details Source | |
| 82 | Bitcoin Gold | $70K | bitcoin gold | Validator Key Compromised | Details | |
| 83 | Kosta Finance | $63K | ethereum | Rugpull | Details | |
| 84 | YFDash | $61K | ethereum | Rugpull | Details Source | |
| 85 | K33pr | $61K | ethereum | Rugpull | Details Source | |
| 86 | RIFT Token | $59K | — | Rugpull | Details Source | |
| 87 | Rapid Set Dollar | $48K | ethereum | Rugpull | Details Source | |
| 88 | Prophet Project | $46K | ethereum | Rugpull | Details Source 1Source 2 | |
| 89 | Liquid Core | $42K | ethereum | Rugpull | Details Source | |
| 90 | Leo Finance | $42K | ethereum | Other / Infinite Mint | Details Source 1Source 2 | |
| 91 | iProtocol | $42K | ethereum | Rugpull | Details Source | |
| 92 | Solv3 network | $36K | ethereum | Rugpull | Details Source 1Source 2 | |
| 93 | Hype Bet | $35K | ethereum | Rugpull | Details Source | |
| 94 | OKO TOKEN | $34K | ethereum | Honeypot | Details Source | |
| 95 | Yearnspace | $34K | ethereum | Rugpull | Details Source | |
| 96 | MTI Finance | $32K | ethereum | Rugpull | Details Source | |
| 97 | AutoTrade Finance | $32K | ethereum | Honeypot | Details Source | |
| 98 | Nemo Finance | $32K | ethereum | Honeypot | Details Source | |
| 99 | Reaper Finance | $31K | ethereum | Rugpull | Details Source | |
| 100 | Apollo Swap | $31K | ethereum | Honeypot | Details Source |
Notes
Loss totals use parsed USD values only; unknown or unparseable losses are not guessed. Attack-class links are added only when the root cause is clear enough to map.