Web3 Hacks in 2020
2020 incident records, sorted by known loss. The strongest mapped pattern is Access Control (14 rows); the largest tracked chain bucket is Bitcoin ($3.5B).
Incident records
Sorted by known reported loss first, then recency. Open the source before treating any summary as final.
| Links | ||||||
|---|---|---|---|---|---|---|
| 1 | LuBian | $3.5B | bitcoin | Access Control Attacks | Details Source | |
| 2 | WoToken | $1.0B | — | Rugpull | Details Source | |
| 3 | KuCoin | $281M | ethereum | Access Control Attacks | Details Source | |
| 4 | KuCoin | $280M | — | Access Control Attacks | Details Source | |
| 5 | Compound Labs | $89.0M | ethereum | Oracle Manipulation & Price Manipulation | Details Source | |
| 6 | Harvest Finance | $33.8M | ethereum | Flash Loan Attacks | Details Source | |
| 7 | Lendf.me | $25.2M | ethereum | Reentrancy | Details Source | |
| 8 | dForce Lending | $25.0M | ethereum | Reentrancy | Details Source | |
| 9 | Pickle Finance | $19.7M | ethereum | Other / Vault Swap Exploit / Missing Input Validation | Details Source | |
| 10 | Electrum | $17.7M | — | Access Control Attacks | Details Source | |
| 11 | Eminence | $15.1M | ethereum | Flash Loan Attacks | Details Source | |
| 12 | Electrum | $15.0M | — | Access Control Attacks | Details Source | |
| 13 | Compounder Finance | $12.5M | ethereum | Drained Contracts / Rugpull / Admin Drain | Details Source | |
| 14 | EXMO | $11.7M | multiple | Access Control Attacks | Details Source | |
| 15 | SharkTron | $10.0M | — | Rugpull | Details Source | |
| 16 | Cover Protocol | $9.4M | ethereum | Incentives Function Mistake / Other / Arithmetic Error | Details Source | |
| 17 | MakerDAO | $8.3M | ethereum | Oracle Manipulation & Price Manipulation | Details | |
| 18 | bZx | $8.1M | ethereum | Other | Details Source | |
| 19 | Nexus Mutual | $8.0M | ethereum | Key Leaked via Infrastructure | Details | |
| 20 | Origin Protocol | $8.0M | ethereum | Flash Loan Attacks | Details Source | |
| 21 | Warp Protocol | $7.8M | ethereum | Flash Loan Attacks | Details Source | |
| 22 | ValueDefi | $7.4M | ethereum | Flash Loan Attacks | Details Source | |
| 23 | OKEx | $5.6M | ethereum classic | Forged Proof | Details | |
| 24 | ETERBASE | $5.4M | algorand, bitcoin, ethereum, tezos, tron, xrp | Access Control Attacks | Details Source | |
| 25 | Aeternity | $5.2M | aeternity | Validator Key Compromised | Details | |
| 26 | Livecoin | $3.3M | multiple | API Key Compromised | Details | |
| 27 | CheeseBank | $3.3M | ethereum | Flash Loan Attacks | Details Source | |
| 28 | Cheese Bank | $3.3M | ethereum | Flash Loan Attacks | Details Source | |
| 29 | Cashaa | $3.1M | bitcoin | Access Control Attacks | Details Source | |
| 30 | IOTA wallet | $2.9M | — | Other | Details Source | |
| 31 | EtherCrash | $2.5M | ethereum | Hot Wallet Key Compromised | Details | |
| 32 | Emerald Mine | $2.5M | eos | Rugpull | Details Source | |
| 33 | Trinity Wallet | $2.4M | iota | Cloudflare Key Compromised / CDN Compromise | Details Source | |
| 34 | Deriswap | $2.2M | ethereum | Rugpull | Details Source | |
| 35 | Akropolis | $2.0M | ethereum | Flash Loan Attacks | Details Source | |
| 36 | Percent Finance | $1.9M | — | Other | Details Source | |
| 37 | Ledger | $1.8M | — | Access Control Attacks | Details Source | |
| 38 | Ethereum Classic | $1.7M | ethereum classic | Forged Proof | Details | |
| 39 | 2gether | $1.4M | bitcoin, ethereum | Rugpull / Key Leaked via Infrastructure | Details Source | |
| 40 | Uniswap | $1.4M | — | Reentrancy | Details Source | |
| 41 | Axion Network | $1.1M | — | Other | Details Source | |
| 42 | Altilly | $750K | multiple | Rugpull / API Key Compromised | Details Source | |
| 43 | Yam DAO | $750K | — | Other | Details Source | |
| 44 | UniCat.farm | $713K | ethereum | Rugpull | Details Source | |
| 45 | bZx | $666K | ethereum | Flash Loan Attacks | Details Source | |
| 46 | Ooki | $650K | ethereum | Flash Loan Attacks | Details Source | |
| 47 | Bancor | $545K | ethereum | Access Control Attacks | Details Source | |
| 48 | Kper Network | $542K | ethereum | Rugpull | Details Source | |
| 49 | Balancer | $524K | ethereum | Flash Loan Attacks | Details Source | |
| 50 | Axion | $500K | ethereum | Infinite Mint | Details | |
| 51 | Pump Farm | $478K | ethereum | Rugpull | Details Source | |
| 52 | Vether | $450K | ethereum | Access Control Attacks | Details | |
| 53 | Coral | $420K | eos | Reentrancy | Details | |
| 54 | DEFIBase | $379K | ethereum | Rugpull | Details Source | |
| 55 | opyn | $371K | ethereum | Other / Withdrawal Logic Flaw | Details Source | |
| 56 | Hype Bet Finance | $364K | ethereum | Rugpull | Details Source | |
| 57 | bZx | $356K | ethereum | Flash Loan Attacks | Details Source | |
| 58 | Ooki | $350K | ethereum | Flash Loan Attacks | Details Source | |
| 59 | LV Finance | $334K | ethereum | Rugpull | Details Source | |
| 60 | Altsbit | $303K | bitcoin, ethereum | Other / Key Leaked via Infrastructure | Details Source | |
| 61 | Tomatos | $286K | ethereum | Rugpull | Details Source | |
| 62 | Soft Yearn Finance | $281K | — | Other | Details Source | |
| 63 | Ledger | $271K | multiple | Phishing Attacks | Details | |
| 64 | SYFI | $250K | ethereum | Arithmetic Error | Details | |
| 65 | Bisq | $250K | bitcoin | Other / Withdrawal Logic Flaw | Details Source | |
| 66 | Chainlink | $245K | — | Other | Details Source | |
| 67 | POKeFARM | $238K | ethereum | Rugpull | Details Source | |
| 68 | Ledger | $224K | — | Access Control Attacks | Details Source | |
| 69 | Uniswap V1 | $220K | ethereum | Reentrancy | Details | |
| 70 | Tetris Finance | $218K | — | Rugpull | Details Source | |
| 71 | Santa DAO | $204K | ethereum | Rugpull | Details Source | |
| 72 | DistX | $198K | ethereum | Rugpull | Details Source | |
| 73 | Magix | $188K | ethereum | Rugpull | Details Source | |
| 74 | Cover protocol | $183K | ethereum | Rugpull | Details | |
| 75 | KeeperDAO | $170K | ethereum | Honeypot | Details | |
| 76 | Iron Finance | $170K | — | Other | Details Source | |
| 77 | Chessfarm.Tech | $168K | binance | Rugpull | Details Source | |
| 78 | Soda Protocol | $160K | ethereum | Withdrawal Logic Flaw | Details | |
| 79 | Walletreum | $138K | ethereum | Rugpull | Details Source | |
| 80 | YFFS Finance | $130K | ethereum | Rugpull | Details Source | |
| 81 | XYearn | $130K | ethereum | Rugpull | Details Source | |
| 82 | $120K | — | Access Control Attacks | Details Source | ||
| 83 | Dark Matter | $112K | ethereum | Rugpull | Details | |
| 84 | Vice.Uno | $111K | binance | Rugpull | Details Source | |
| 85 | Dividend Token | $92K | ethereum | Rugpull | Details Source | |
| 86 | CBDAO | $84K | ethereum | Rugpull | Details Source | |
| 87 | Star Swap | $77K | ethereum | Rugpull | Details | |
| 88 | Exvault Finance | $73K | ethereum | Rugpull | Details Source | |
| 89 | YFFC | $72K | ethereum | Rugpull | Details Source | |
| 90 | Solid Protocol | $72K | ethereum | Rugpull | Details Source | |
| 91 | UniTarget | $71K | ethereum | Rugpull | Details Source | |
| 92 | Bitcoin Gold | $70K | bitcoin gold | Validator Key Compromised | Details | |
| 93 | Kosta Finance | $63K | ethereum | Rugpull | Details | |
| 94 | YFDash | $61K | ethereum | Rugpull | Details Source | |
| 95 | K33pr | $61K | ethereum | Rugpull | Details Source | |
| 96 | RIFT Token | $59K | — | Rugpull | Details Source | |
| 97 | Hegic | $48K | — | Other | Details Source | |
| 98 | Rapid Set Dollar | $48K | ethereum | Rugpull | Details Source | |
| 99 | Prophet Project | $46K | ethereum | Rugpull | Details Source | |
| 100 | Liquid Core | $42K | ethereum | Rugpull | Details Source | |
| 101 | WLEO | $42K | ethereum | Infinite Mint | Details | |
| 102 | Leo Finance | $42K | — | Other | Details Source | |
| 103 | iProtocol | $42K | ethereum | Rugpull | Details Source | |
| 104 | Solv3 network | $36K | ethereum | Rugpull | Details Source | |
| 105 | Hype Bet | $35K | ethereum | Rugpull | Details Source | |
| 106 | OKO TOKEN | $34K | ethereum | Honeypot | Details Source | |
| 107 | Yearnspace | $34K | ethereum | Rugpull | Details Source | |
| 108 | MTI Finance | $32K | ethereum | Rugpull | Details Source | |
| 109 | AutoTrade Finance | $32K | ethereum | Honeypot | Details Source | |
| 110 | Nemo Finance | $32K | ethereum | Honeypot | Details Source | |
| 111 | Reaper Finance | $31K | ethereum | Rugpull | Details Source | |
| 112 | Apollo Swap | $31K | ethereum | Honeypot | Details Source | |
| 113 | Unidark | $30K | ethereum | Rugpull | Details Source | |
| 114 | Hegic | $29K | ethereum | Deposit Logic Flaw | Details | |
| 115 | Bondly Finance | $26K | ethereum | Honeypot | Details | |
| 116 | Zenith Finance | $26K | ethereum | Rugpull | Details Source | |
| 117 | WinPlay | $26K | ethereum | Rugpull | Details Source | |
| 118 | TIM3 | $25K | ethereum | Rugpull | Details | |
| 119 | RUL3R Token | $25K | ethereum | Rugpull | Details Source | |
| 120 | NanoCore | $23K | ethereum | Abandoned | Details | |
| 121 | Boost | $23K | ethereum | Rugpull | Details | |
| 122 | CoinSWOP | $21K | ethereum | Rugpull | Details Source | |
| 123 | Rubick Finance | $21K | ethereum | Rugpull | Details Source | |
| 124 | MiniVault.Finance | $17K | ethereum | Rugpull | Details Source | |
| 125 | Bank Protocol | $17K | ethereum | Rugpull | Details Source | |
| 126 | Yearn Hold Finance | $17K | ethereum | Honeypot | Details Source | |
| 127 | Foxi.finance | $16K | ethereum | Rugpull | Details Source | |
| 128 | SushiSwap | $15K | ethereum | Access Control Attacks | Details | |
| 129 | Twerk Finance | $13K | ethereum | Rugpull | Details Source | |
| 130 | Hypechill fund | $13K | ethereum | Rugpull | Details Source | |
| 131 | SAV3R | $10K | ethereum | Rugpull | Details Source | |
| 132 | SuperMarioBros | $10K | ethereum | Rugpull | Details Source | |
| 133 | Vadia Finance | $9K | ethereum | Rugpull | Details Source | |
| 134 | Reflation | $9K | ethereum | Rugpull | Details | |
| 135 | Brother finance | $8K | ethereum | Honeypot | Details Source | |
| 136 | Relay3rV1 | $8K | ethereum | Rugpull | Details Source | |
| 137 | CYBER SOLIDITY | $8K | ethereum | Rugpull | Details Source | |
| 138 | Metropolis.finance | $8K | ethereum | Rugpull | Details Source | |
| 139 | K.O.N.G Token | $7K | ethereum | Rugpull | Details Source | |
| 140 | Ren Swap | $7K | ethereum | Honeypot | Details Source | |
| 141 | CHERRY | $7K | ethereum | Honeypot | Details Source | |
| 142 | ELLA | $6K | ethereum | Rugpull | Details Source | |
| 143 | Douyea | $6K | ethereum | Honeypot | Details Source | |
| 144 | UnlimitedBase Finance | $6K | ethereum | Rugpull | Details Source | |
| 145 | Foxy.farm | $6K | ethereum | Rugpull | Details Source | |
| 146 | Harvester Network | $6K | ethereum | Honeypot | Details Source | |
| 147 | CREW | $6K | ethereum | Rugpull | Details Source | |
| 148 | dxHub | $5K | ethereum | Rugpull | Details Source | |
| 149 | Rotex | $5K | ethereum | Rugpull | Details Source | |
| 150 | ShabuVault | $4K | ethereum | Rugpull | Details Source | |
| 151 | Overbase Finance | $4K | ethereum | Rugpull | Details Source | |
| 152 | FutureBase.Finance | $4K | ethereum | Rugpull | Details Source | |
| 153 | Groot.finance | $4K | ethereum | Rugpull | Details Source | |
| 154 | GrowBase Finance | $4K | ethereum | Rugpull | Details Source | |
| 155 | Monster Chain | $4K | ethereum | Honeypot | Details | |
| 156 | Deriswap | $3K | ethereum | Rugpull | Details Source | |
| 157 | TRBAS3 | $3K | ethereum | Rugpull | Details Source | |
| 158 | Lootx Finance | $3K | ethereum | Honeypot | Details Source | |
| 159 | Vegetables Finance | $3K | ethereum | Rugpull | Details | |
| 160 | K3psav.Finance | $3K | ethereum | Rugpull | Details Source | |
| 161 | x20 finance | $3K | ethereum | Rugpull | Details Source | |
| 162 | Keep3r.info | $2K | ethereum | Honeypot | Details Source | |
| 163 | House of paper | $2K | ethereum | Honeypot | Details Source | |
| 164 | Devilishburning Farm | $2K | ethereum | Rugpull | Details Source | |
| 165 | Gh1z.finance | $2K | ethereum | Rugpull | Details Source | |
| 166 | Sauron | $2K | ethereum | Honeypot | Details Source | |
| 167 | Keep3rX.finance | $2K | ethereum | Rugpull | Details Source | |
| 168 | LuckLambo104 | $2K | tron | Unknown | Details | |
| 169 | Mother of All Ponzis | $1K | ethereum | Rugpull | Details Source | |
| 170 | L4CK | $1K | ethereum | Rugpull | Details | |
| 171 | Bloody Finance | $1K | ethereum | Rugpull | Details Source | |
| 172 | Ba5ic finance | $1K | ethereum | Rugpull | Details Source | |
| 173 | Horus Finance | $991 | ethereum | Honeypot | Details Source | |
| 174 | Maxliq.ml | $898 | ethereum | Rugpull | Details Source | |
| 175 | Farmland Network | $892 | ethereum | Rugpull | Details Source | |
| 176 | Sonic Swap | $824 | ethereum | Rugpull | Details Source | |
| 177 | Trump Swap | $795 | ethereum | Honeypot | Details Source | |
| 178 | Enjo | $762 | ethereum | Rugpull | Details Source | |
| 179 | CAP5 | $760 | ethereum | Rugpull | Details | |
| 180 | Gaia protocol | $598 | ethereum | Rugpull | Details Source | |
| 181 | Potatos Finance | $569 | binance | Rugpull | Details Source | |
| 182 | Waronrug degen token | $555 | ethereum | Rugpull | Details | |
| 183 | SAILSAN | $426 | ethereum | Rugpull | Details | |
| 184 | GoldenFarm | $396 | binance | Rugpull | Details Source | |
| 185 | BOMBHEAD token | $342 | ethereum | Honeypot | Details | |
| 186 | Dswap | $330 | ethereum | Rugpull | Details | |
| 187 | Jin Finance | $277 | ethereum | Honeypot | Details Source | |
| 188 | Decentralized Privacy | — | ethereum | Rugpull | Details Source | |
| 189 | Tree Finance | — | ethereum | Abandoned | Details Source | |
| 190 | SAD2Token | — | ethereum | Abandoned | Details Source | |
| 191 | Compasswap Token | — | binance | Rugpull | Details | |
| 192 | Darkwebcoin | — | ethereum | Other | Details Source | |
| 193 | SoftdrinkSwap | — | binance | Abandoned | Details Source | |
| 194 | GALIL | — | ethereum | Rugpull | Details | |
| 195 | Grin | — | grin | Validator Key Compromised | Details | |
| 196 | PancakeSwap | — | — | Other | Details Source | |
| 197 | Beer Garden | — | binance | Abandoned | Details Source | |
| 198 | Hatch DAO | — | ethereum | Rugpull | Details Source |
Notes
Loss totals use parsed USD values only; unknown or unparseable losses are not guessed. Attack-class links are added only when the root cause is clear enough to map.