Web3 Hacks in 2022

2022 incident records, sorted by known loss. The strongest mapped pattern is Access Control (78 rows); the largest tracked chain bucket is Ethereum ($2.1B).

Incident records

Sorted by known reported loss first, then recency. Open the source before treating any summary as final.

Links
101 Dictum Exchange $2.1M — Rugpull
102 Gym Network $2.1M bsc Access Control Attacks
103 Revest Finance $2.0M ethereum Reentrancy
104 QAN Platform $2.0M ethereum Access Control Attacks
105 Mirror Protocol $2.0M terra Access Control Attacks
106 Mad Meerkat Finance $2.0M cronos Other / DNS Spoofing / DNS Hijack
107 OpenSea $2.0M ethereum Access Control Attacks
108 Titano $1.9M bsc Other / Backdoor Contract
109 FEG Token $1.9M bsc, ethereum Access Control Attacks
110 CF Token $1.9M bsc Access Control Attacks
111 KlaySwap $1.9M klaytn Frontend Compromise
112 DePo $1.7M — Access Control Attacks
113 Reaper Farm $1.7M fantom Access Control Attacks
114 PARALUNI $1.7M bsc Flash Loan Attacks
115 Universe Token $1.5M bsc Access Control Attacks
116 LV Metaverse $1.5M — Rugpull
117 FEGtoken $1.5M — Flash Loan Attacks
118 Pragma Money $1.5M — Rugpull
119 Gera Coin $1.5M ethereum Other / Deployer Key Compromised
120 Rubic $1.4M ethereum Access Control Attacks
121 OMNI $1.4M ethereum Reentrancy
122 OneRing $1.4M ethereum Access Control Attacks
123 Treasure $1.4M arbitrum Buy Function Exploit / Missing Input Validation
124 Multichain $1.4M ethereum Other / Missing Input Validation
125 CryptoBike $1.4M — Rugpull
126 Day of Defeat $1.4M — Rugpull
127 Frosties $1.3M — Abandoned
128 New Free DAO $1.2M bsc Flash Loan Attacks
129 Big Daddy Ape Club $1.2M — Rugpull
130 Rubic $1.2M ethereum Access Control Attacks
131 Earning Farm $1.2M ethereum Flash Loan Attacks
132 Hunter Global $1.2M — Rugpull
133 CheddaToken $1.2M — Rugpull
134 BasketDAO $1.2M ethereum Access Control Attacks
135 BitKeep $1.2M — Other
136 HeroCat $1.2M — Rugpull
137 Float Protocol $1.2M ethereum Oracle Manipulation & Price Manipulation
138 Jumpn Finance $1.1M — Rugpull
139 Sovryn $1.1M rsk Flash Loan Attacks
140 Treasure Swap $1.1M — Other
141 Rikkei Finance $1.1M bsc Access Control Attacks
142 TopGoal $1.1M bsc Access Control Attacks
143 DecentraWorld $1.0M — Rugpull
144 Solend $1.0M solana Oracle Manipulation & Price Manipulation
145 YEED $1.0M bsc Other / Arithmetic Error
146 Bacon Protocol $1.0M ethereum Flash Loan Attacks
147 OpenSea $1.0M ethereum Other / Withdrawal Logic Flaw
148 King Tribe $997K — Rugpull
149 Profanity Wallet Hack $978K — Access Control Attacks
150 Crosswise $879K bsc Access Control Attacks
151 ElasticSwap $850K avalanche, ethereum Oracle Manipulation & Price Manipulation
152 ApeCoin $820K ethereum Flash Loan Attacks
153 SudoRare $800K ethereum Drained Contracts / Rugpull / Liquidity Rug
154 Anchor $800K terra Oracle Manipulation & Price Manipulation
155 TIGER $784K — Rugpull
156 DataDAO Finance $782K — Rugpull
157 Cryptoburgers $770K bsc Access Control Attacks
158 Mercenary $760K — Rugpull
159 Forest Tiger Pro $733K — Rugpull
160 Auctus $726K ethereum Access Control Attacks
161 QANX Bridge $707K ethereum Access Control Attacks
162 MTDAO $702K bsc Flash Loan Attacks
163 Umbrella Network $700K bsc, ethereum Access Control Attacks
164 BabyMUSK $665K — Rugpull
165 Ariva Digital $661K — Access Control Attacks
166 Melody $644K — Access Control Attacks
167 TECRA $643K — Other
168 Blur Finance $600K bsc, polygon Drained Contracts / Exit Scam
169 LI.FI $600K ethereum Access Control Attacks
170 DAO_Officials $581K — Flash Loan Attacks
171 DAO Swap $580K bsc Access Control Attacks
172 Curve DEX $575K ethereum Phishing Attacks
173 The Micro Elements $573K — Rugpull
174 GMX V1 EVM $565K arbitrum Stale Price Arbitrage
175 GMX V1 Perps $565K arbitrum Oracle Manipulation & Price Manipulation
176 BNB HEROES $561K — Rugpull
177 Feminist Metaverse $540K bsc Access Control Attacks
178 REALSWAK $527K — Rugpull
179 HUT $509K — Rugpull
180 DMC Token $497K — Rugpull
181 MetaverseToken $487K — Flash Loan Attacks
182 WanderVerse NFT $485K — Rugpull
183 Arbitrage Robot Token $472K — Other
184 BuildFinance $470K ethereum Access Control Attacks
185 Snowflake $468K — Rugpull
186 Rigoblock $464K ethereum Access Control Attacks
187 FSWAP $432K — Other
188 Fair Token $429K — Rugpull
189 BGE $427K — Rugpull
190 Nut2Earn $410K — Rugpull
191 HEGE coin $400K — Rugpull
192 Cezar Hard Fork $399K — Rugpull
193 Dollar $383K — Rugpull
194 MetaFinanceDAO $380K — Rugpull
195 PREMINT | NFT $375K ethereum Access Control Attacks
196 Nereus Finance $371K avalanche Flash Loan Attacks
197 XSTABLE Protocol $367K ethereum Rugpull / Unknown
198 GHOSTP2E $346K — Rugpull
199 Bubbleworld $344K — Other
200 WonderHero $320K bsc Hot Wallet Key Compromised

Notes

Loss totals use parsed USD values only; unknown or unparseable losses are not guessed. Attack-class links are added only when the root cause is clear enough to map.