Web3 Hacks in 2022

2022 incident records, sorted by known loss. The strongest mapped pattern is Access Control (78 rows); the largest tracked chain bucket is Ethereum ($2.1B).

Open full database

Incident records

Sorted by known reported loss first, then recency. Open the source before treating any summary as final.

Links
1 Terra Classic $40.0B — Other Details Source 1Source 2Source 3Source 4
2 Genesis $2.8B — Other Details Source 1Source 2Source 3
3 HyperVerse $1.3B — Rugpull Details Source
4 Celsius Network $1.2B — Other Details Source 1Source 2Source 3
5 FTX Group $1.0B — Other Details Source 1Source 2Source 3Source 4Source 5Source 6
6 Bitcoin Sheikh $766M — Other Details Source 1Source 2Source 3
7 Ronin $625M ethereum Access Control Attacks Details Source 1Source 2
8 BSC Token Hub $586M bsc Cross-Chain Bridge Attacks Details Source 1Source 2Source 3
9 FTX $477M ethereum, solana Reported SIM-swapping connection Details Source
10 Wormhole $326M solana Access Control Attacks Details Source 1Source 2Source 3
11 Neutrino USD $200M — Other Details Source 1Source 2Source 3
12 Nomad $190M ethereum Access Control Attacks Details Source
13 Beanstalk $181M ethereum Flash Loan Attacks Details Source
14 Wintermute $160M ethereum Access Control Attacks Details Source
15 Mango Markets V3 $116M solana Oracle Manipulation & Price Manipulation Details Source
16 Maiar DEX $113M elrond Other / Infinite Mint Details Source 1Source 2Source 3
17 EmpiresX $100M — Other Details Source 1Source 2
18 Horizon by Harmony $100M bsc, ethereum Access Control Attacks Details Source 1Source 2Source 3Source 4
19 Qubit Finance $80.0M bsc Cross-Chain Bridge Attacks Details Source
20 Rari Fuse $79.7M arbitrum, ethereum Flash Loan Attacks Details Source 1Source 2Source 3Source 4
21 EvoDeFi Bridge $66.0M — Other Details Source 1Source 2
22 Mining Capital Coin $62.0M — Rugpull Details Source
23 Freeway $60.0M — Rugpull Details Source 1Source 2Source 3Source 4
24 Cashio $52.8M solana Access Control Attacks Details Source
25 Bo Shen Wallet Hack $41.1M — Access Control Attacks Details Source 1Source 2
26 IRA Financial $36.0M ethereum Other / API Key Compromised Details Source 1Source 2Source 3
27 Scream $35.0M — Oracle Manipulation & Price Manipulation Details Source 1Source 2
28 Crypto.com $34.4M bitcoin, ethereum Access Control Attacks Details Source
29 Transit Swap $28.9M bsc, ethereum Transfer Logic Exploit / Missing Input Validation / Other Details Source
30 Deribit $28.0M — Access Control Attacks Details Source
31 Wintermute $27.6M optimism Access Control Attacks Details Source
32 Ankr $24.0M bsc Access Control Attacks Details Source
33 Elephant Money $22.2M bsc Flash Loan Attacks Details Source
34 Blizz Finance $21.8M avalanche Oracle Manipulation & Price Manipulation Details Source
35 TBIS $21.0M — Rugpull Details Source 1Source 2Source 3Source 4Source 5Source 6
36 Freedom Protocol | Raccoon Network $20.8M — Rugpull Details Source 1Source 2Source 3
37 Auros $20.0M — Other Details Source 1Source 2Source 3
38 Superfluid $20.0M polygon Access Control Attacks Details Source
39 Lympo $18.7M ethereum Access Control Attacks Details Source 1Source 2
40 Pando $18.6M mixin Access Control Attacks Details Source
41 DEUS Finance $17.9M fantom Flash Loan Attacks Details Source
42 Flare Token $17.0M — Rugpull Details Source 1Source 2Source 3
43 Team Finance $15.8M ethereum Migrate Function Mistake Exploit / Other / Missing Input Validation Details Source
44 Inverse Finance Frontier $15.6M ethereum Oracle Manipulation & Price Manipulation Details Source
45 Starstream / Agora $15.0M ethereum Other / Admin Drain Details Source 1Source 2
46 Bored Ape Yacht Club $13.0M — Other Details Source 1Source 2Source 3
47 Defrost $12.0M avalanche Access Control Attacks Details Source
48 Venus Protocol $11.2M bsc Oracle Manipulation & Price Manipulation Details Source
49 Saddle Finance $11.0M ethereum Flash Loan Attacks Details Source
50 Dego Finance $10.0M bsc, cronos, ethereum Access Control Attacks Details Source
51 Arbix Finance $10.0M bsc Drained Contracts / Rugpull / Admin Drain Details Source
52 BreedTech $9.4M — Rugpull Details
53 Moola Market $9.1M celo Oracle Manipulation & Price Manipulation Details Source
54 Crema Finance $8.8M solana Access Control Attacks Details Source
55 BitKeep $8.0M — Phishing Attacks Details Source 1Source 2Source 3Source 4
56 Uniswap $8.0M ethereum Phishing Attacks Details Source 1Source 2Source 3Source 4Source 5
57 LCX $7.9M ethereum Access Control Attacks Details Source
58 DFX Finance $7.6M ethereum Reentrancy Details Source 1Source 2Source 3Source 4Source 5
59 BitBNS $7.5M — Access Control Attacks Details Source 1Source 2
60 AniMoon $6.3M — Rugpull Details Source 1Source 2Source 3Source 4
61 Hundred Finance $6.2M gnosis chain Flash Loan Attacks Details Source
62 Safuu Protocol $6.1M — Rugpull Details Source
63 Audius $6.0M ethereum Access Control Attacks Details Source
64 My Big Coin $6.0M — Rugpull Details Source 1Source 2
65 Kronos Dao $6.0M — Other Details Source
66 Agave $5.5M gnosis chain Flash Loan Attacks Details Source
67 Osmosis $5.0M osmosis Other / Withdrawal Logic Flaw Details Source 1Source 2
68 ZBExchange $4.8M multi chain Other / Hot Wallet Key Compromised Details Source 1Source 2Source 3
69 Ola Finance $4.7M fuse Reentrancy Details Source
70 pNetwork $4.6M bsc Misconfiguration / Key Leaked via Infrastructure Details Source
71 TEDDY DOGE $4.5M — Rugpull Details Source 1Source 2
72 Raydium AMM $4.4M solana Access Control Attacks Details Source
73 Meter.io $4.4M ethereum Other / Deposit Function Exploit / Missing Input Validation Details Source 1Source 2Source 3Source 4
74 Terra (LUNA) $4.3M terra Phishing Attacks Details
75 DeFiAi $4.2M — Rugpull Details Source 1Source 2Source 3
76 Slope Wallet $4.1M solana Access Control Attacks Details Source
77 Solfire $4.1M — Rugpull Details Source 1Source 2
78 Webaverse $4.0M — Other Details Source 1Source 2
79 Gala $4.0M — Other Details Source
80 XCarnival $3.8M ethereum Stale collateral order authorization Details Source 1Source 2
81 Luke Dashjr $3.6M — Access Control Attacks Details Source 1Source 2
82 Dragoma $3.5M polygon Drain Vaults / Rugpull / Admin Drain Details Source
83 Nirvana V1 $3.5M solana Flash Loan Attacks Details Source
84 PokeMoney $3.5M — Rugpull Details Source
85 Hundred Finance $3.3M — Other Details Source
86 DEUS Finance $3.0M fantom Flash Loan Attacks Details Source 1Source 2Source 3
87 BTC.com $3.0M bitcoin, ethereum Other / Key Leaked via Infrastructure Details Source 1Source 2
88 Skyward Finance $3.0M near Reentrancy Details Source
89 Fortress Loans $3.0M bsc Oracle Manipulation & Price Manipulation Details Source
90 Rich Dwarves Tribe $3.0M — Abandoned Details Source
91 Tinyman $3.0M algorand Other / Incorrect Share Accounting Details Source
92 Multichain $2.7M ethereum Other / Missing Input Validation Details Source 1Source 2Source 3
93 IDO rug pulls $2.7M — Rugpull Details Source 1Source 2
94 Fantasm Finance $2.6M fantom Missing Condition Check / Other / Missing Input Validation Details Source
95 BNB42 $2.6M — Rugpull Details Source 1Source 2
96 PYE $2.6M — Other Details Source 1Source 2
97 Boy X Highspeed $2.6M — Other Details Source
98 TempleDAO $2.4M ethereum Access Control Attacks Details Source
99 friesDAO $2.3M ethereum Access Control Attacks Details Source 1Source 2Source 3
100 Bifrost $2.2M — Compromised deposit-address signing key Details Source

Notes

Loss totals use parsed USD values only; unknown or unparseable losses are not guessed. Attack-class links are added only when the root cause is clear enough to map.

Full hack database Filter every tracked incident by chain, date, loss size, and technique. Attack class library Move from incident examples to exploit mechanics and review checklists. Largest crypto hacks Compare this year against the highest-loss incidents in the database.