Web3 Hacks in 2021

2021 incident records, sorted by known loss. The strongest mapped pattern is Access Control (46 rows); the largest tracked chain bucket is Ethereum ($1.9B).

Open full database

Incident records

Sorted by known reported loss first, then recency. Open the source before treating any summary as final.

Links
101 NEKO $2.2M bsc Access Control Attacks Details
102 stazie $2.1M — Access Control Attacks Details Source
103 Polygon $2.0M polygon Access Control Attacks Details
104 AFKSystems Finance $2.0M — Rugpull Details Source
105 AutoSharkFinance $2.0M — Other Details Source
106 Circle $2.0M — Access Control Attacks Details Source
107 PancakeHunny $2.0M — Other Details Source
108 BT.Finance $1.9M ethereum Flash Loan Attacks Details Source
109 PancakeSwap $1.8M bsc Access Control Attacks Details Source
110 Bent Finance $1.8M ethereum Access Control Attacks Details Source
111 8ightDAO $1.8M harmony Access Control Attacks Details Source
112 EVODeFi $1.7M bsc Flash Loan Attacks Details Source
113 Acala Network $1.6M acala Incentives Function Mistake / Infinite Mint Details Source
114 MetaMask Governance $1.5M — Honeypot Details Source
115 Levyathan $1.5M binance, bsc Access Control Attacks Details Source
116 PolyButterfly $1.5M polygon Rugpull Details Source
117 JulSwap $1.5M — Flash Loan Attacks Details Source
118 BT Finance $1.5M ethereum Oracle Manipulation & Price Manipulation Details
119 Growth DeFi $1.4M ethereum Flash Loan Attacks Details Source
120 UFCT $1.3M — Rugpull Details Source
121 Monkey Kingdom $1.3M solana Phishing Attacks Details Source
122 LaserSwap Cash $1.3M binance Rugpull Details Source
123 ApeRocket $1.3M bsc Flash Loan Attacks Details Source
124 Zenon Network $1.2M — Other Details Source
125 Blizzard $1.1M — Other Details Source
126 Brinc Finance $1.1M — Other Details Source
127 Phantom Galaxies $1.1M ethereum Phishing Attacks Details
128 Ethereum Yield $1.1M ethereum Abandoned Details Source
129 CollectCoin $1.1M — Other Details Source
130 NowSwap $1.1M ethereum Inconsistent Value in Code / Arithmetic Error / Other Details Source
131 Sentinel DVPN $1.0M — Access Control Attacks Details Source
132 Visor Finance $976K ethereum Flash Loan Attacks Details Source
133 WaultSwap $930K bsc Risk Parameter Abuse Details
134 8ight Finance $924K — Access Control Attacks Details Source
135 Armor.Fi $850K — Other Details Source
136 AutoShark $823K bsc Flash Loan Attacks Details Source
137 BitBot $805K ethereum Rugpull Details Source
138 Wault Finance $800K binance Flash Loan Attacks Details Source
139 ChainSwap $800K bsc, ethereum Other / Bridge Logic Flaw Details Source
140 Eco DeFi $794K — Access Control Attacks Details Source
141 ElectronDAO $729K — Rugpull Details Source
142 Meta Pets $709K — Rugpull Details
143 Meebits $700K — Other Details Source
144 BitDao $686K ethereum Honeypot Details Source
145 Zerogoki $670K ethereum Oracle Manipulation & Price Manipulation Details Source
146 Impossible Finance $661K binance, bsc Flash Loan Attacks Details Source
147 Lever $653K bsc Other / Borrow Logic Flaw Details Source
148 VitaDAO.com $627K ethereum Honeypot Details
149 Wild Credit $612K — Access Control Attacks Details Source
150 Nerve Finance $586K bsc Other / Swap Logic Flaw Details Source
151 AutoShark $580K bsc Reward Logic Flaw Details
152 Merlin Labs $550K binance, bsc Arithmetic Overflow & Underflow Attacks Details Source
153 NerveBridge $537K bsc Swap Logic Flaw Details
154 Visor Finance $530K — Other Details Source
155 Array Finance $516K — Flash Loan Attacks Details Source
156 PolyDEX $511K polygon Reentrancy Details Source
157 Umbrella Network $505K — Other Details Source
158 Visor Finance $505K ethereum Access Control Attacks Details Source
159 SharedStake $500K ethereum Access Control Attacks Details Source
160 Seascape Network $500K — Access Control Attacks Details Source
161 Seascape $500K ethereum Access Control Attacks Details
162 Union Capital $500K ethereum Rugpull Details Source
163 Stable Yield Credit $494K ethereum Honeypot Details Source
164 HSO $482K — Rugpull Details Source
165 Xdef finance $450K ethereum Rugpull Details Source
166 Pills for Sale $447K ethereum Honeypot Details
167 Dot Finance $430K bsc Oracle Manipulation & Price Manipulation Details Source
168 Unlock Protocol $416K — Access Control Attacks Details Source
169 RAI Finance $414K — Other Details Source
170 WePiggy $400K — Other Details Source
171 Leverage X $400K ethereum Rugpull Details Source
172 Ploutoz Finance $372K bsc Flash Loan Attacks Details Source
173 ForceDAO $367K ethereum Other / Donation Attack Details Source
174 Miss Universe NFT $360K — Rugpull Details Source
175 PolBase Cash $354K ethereum Rugpull Details Source
176 THORChain DEX $350K ethereum Bridge Logic Flaw Details
177 Merlin $334K binance, bsc Incentive Rewards Exploit / Other / Arithmetic Error Details Source
178 SashimiSwap $317K ethereum Flash Loan Attacks Details Source
179 Cake Lock $311K binance Rugpull Details Source
180 Rbase Finance $307K ethereum Rugpull Details Source
181 Glide Finance $300K elastos Other / Missing Input Validation Details Source
182 FASTSWAP $291K — Other Details Source
183 Sanshu Inu $280K — Other Details Source
184 SynLev $278K ethereum Rugpull Details Source
185 Saddle Finance $276K — Other Details Source
186 xWin Finance $270K bsc Other / Missing Input Validation Details Source
187 DeFiPie $269K bsc, ethereum Reentrancy Details Source
188 Multi Financial $258K — Rugpull Details Source
189 PolyYeld Finance $250K polygon Other / Infinite Mint Details Source
190 Safe Dollar $248K polygon Incentive Rewards Exploit / Other / Reward Logic Flaw Details Source
191 Elongate Deluxe $230K — Rugpull Details
192 Shadetech $225K ethereum Rugpull Details Source
193 Cubic Finance $217K ethereum Rugpull Details Source
194 Bep Finance $212K binance Rugpull Details Source
195 dYdX $211K — Other Details Source
196 Elastic Staking $209K ethereum Rugpull Details Source
197 Sifchain Finance $208K ethereum Honeypot Details
198 Pinecone Finance $200K bsc Other / Incorrect Share Accounting Details Source
199 DAFI Protocol $200K — Other Details Source
200 Astronaut NFT $187K binance Rugpull Details Source

Notes

Loss totals use parsed USD values only; unknown or unparseable losses are not guessed. Attack-class links are added only when the root cause is clear enough to map.

Full hack database Filter every tracked incident by chain, date, loss size, and technique. Attack class library Move from incident examples to exploit mechanics and review checklists. Largest crypto hacks Compare this year against the highest-loss incidents in the database.