Web3 Hacks in 2020

2020 incident records, sorted by known loss. The strongest mapped pattern is Access Control (12 rows); the largest tracked chain bucket is Bitcoin ($3.5B).

Incident records

Sorted by known reported loss first, then recency. Open the source before treating any summary as final.

Links
1 LuBian $3.5B bitcoin Access Control Attacks
2 WoToken $1.0B — Rugpull
3 KuCoin $285M ethereum Access Control Attacks
4 Harvest Finance $33.8M ethereum Flash Loan Attacks
5 Lendf.me $25.2M ethereum Reentrancy
6 Pickle Finance $19.7M ethereum Other / Vault Swap Exploit / Missing Input Validation
7 Eminence $15.1M ethereum Flash Loan Attacks
8 Electrum $15.0M — Access Control Attacks
9 Compounder Finance $12.5M ethereum Drained Contracts / Rugpull / Admin Drain
10 EXMO $11.7M multiple Access Control Attacks
11 SharkTron $10.0M — Rugpull
12 Cover Protocol $9.4M ethereum Incentives Function Mistake / Other / Arithmetic Error
13 MakerDAO $8.3M ethereum Oracle Manipulation & Price Manipulation
14 bZx $8.1M ethereum Self-transfer balance duplication
15 Nexus Mutual $8.0M ethereum Key Leaked via Infrastructure
16 Origin Protocol $8.0M ethereum Flash Loan Attacks
17 Warp Protocol $7.8M ethereum Flash Loan Attacks
18 ValueDefi $7.4M ethereum Flash Loan Attacks
19 OKEx $5.6M ethereum classic Forged Proof
20 ETERBASE $5.4M algorand, bitcoin, ethereum, tezos, tron, xrp Access Control Attacks
21 Aeternity $5.2M aeternity Validator Key Compromised
22 Livecoin $3.3M multiple API Key Compromised
23 Cheese Bank $3.3M ethereum Flash Loan Attacks
24 Cashaa $3.1M bitcoin Access Control Attacks
25 IOTA wallet $2.9M — Other
26 EtherCrash $2.5M ethereum Hot Wallet Key Compromised
27 Emerald Mine $2.5M eos Rugpull
28 Trinity Wallet $2.4M iota Cloudflare Key Compromised / CDN Compromise
29 Deriswap $2.2M ethereum Rugpull
30 Akropolis $2.0M ethereum Flash Loan Attacks
31 Percent Finance $1.9M — Other
32 Ledger $1.8M — Access Control Attacks
33 Ethereum Classic $1.7M ethereum classic Forged Proof
34 2gether $1.4M bitcoin, ethereum Rugpull / Key Leaked via Infrastructure
35 Axion Network $1.1M ethereum Other / Infinite Mint
36 Altilly $750K multiple Rugpull / API Key Compromised
37 Yam DAO $750K — Other
38 UniCat.farm $713K ethereum Rugpull
39 bZx $666K ethereum Flash Loan Attacks
40 Bancor $545K ethereum Access Control Attacks
41 Kper Network $542K ethereum Rugpull
42 Balancer $524K ethereum Flash Loan Attacks
43 Pump Farm $478K ethereum Rugpull
44 Vether $450K ethereum Access Control Attacks
45 Coral $420K eos Reentrancy
46 DEFIBase $379K ethereum Rugpull
47 opyn $371K ethereum Other / Withdrawal Logic Flaw
48 Hype Bet Finance $364K ethereum Rugpull
49 bZx $356K ethereum Flash Loan Attacks
50 LV Finance $334K ethereum Rugpull
51 Altsbit $303K bitcoin, ethereum Other / Key Leaked via Infrastructure
52 Tomatos $286K ethereum Rugpull
53 Soft Yearn Finance $281K — Other
54 Ledger $271K multiple Phishing Attacks
55 SYFI $250K ethereum Arithmetic Error
56 Bisq $250K bitcoin Other / Withdrawal Logic Flaw
57 Chainlink $245K — Other
58 POKeFARM $238K ethereum Rugpull
59 Uniswap $232K ethereum Reentrancy
60 Ledger $224K — Access Control Attacks
61 Tetris Finance $218K — Rugpull
62 Santa DAO $204K ethereum Rugpull
63 DistX $198K ethereum Rugpull
64 Magix $188K ethereum Rugpull
65 Cover protocol $183K ethereum Rugpull
66 KeeperDAO $170K ethereum Honeypot
67 Chessfarm.Tech $168K binance Rugpull
68 Soda Protocol $160K ethereum Withdrawal Logic Flaw
69 Walletreum $138K ethereum Rugpull
70 YFFS Finance $130K ethereum Rugpull
71 XYearn $130K ethereum Rugpull
72 Twitter $120K — Access Control Attacks
73 Dark Matter $112K ethereum Rugpull
74 Vice.Uno $111K binance Rugpull
75 Dividend Token $92K ethereum Rugpull
76 CBDAO $84K ethereum Rugpull
77 Star Swap $77K ethereum Rugpull
78 Exvault Finance $73K ethereum Rugpull
79 YFFC $72K ethereum Rugpull
80 Solid Protocol $72K ethereum Rugpull
81 UniTarget $71K ethereum Rugpull
82 Bitcoin Gold $70K bitcoin gold Validator Key Compromised
83 Kosta Finance $63K ethereum Rugpull
84 YFDash $61K ethereum Rugpull
85 K33pr $61K ethereum Rugpull
86 RIFT Token $59K — Rugpull
87 Rapid Set Dollar $48K ethereum Rugpull
88 Prophet Project $46K ethereum Rugpull
89 Liquid Core $42K ethereum Rugpull
90 Leo Finance $42K ethereum Other / Infinite Mint
91 iProtocol $42K ethereum Rugpull
92 Solv3 network $36K ethereum Rugpull
93 Hype Bet $35K ethereum Rugpull
94 OKO TOKEN $34K ethereum Honeypot
95 Yearnspace $34K ethereum Rugpull
96 MTI Finance $32K ethereum Rugpull
97 AutoTrade Finance $32K ethereum Honeypot
98 Nemo Finance $32K ethereum Honeypot
99 Reaper Finance $31K ethereum Rugpull
100 Apollo Swap $31K ethereum Honeypot

Notes

Loss totals use parsed USD values only; unknown or unparseable losses are not guessed. Attack-class links are added only when the root cause is clear enough to map.