Web3 Hacks in 2022

2022 incident records, sorted by known loss. The strongest mapped pattern is Access Control (81 rows); the largest tracked chain bucket is Ethereum ($2.1B).

Incident records

Sorted by known reported loss first, then recency. Open the source before treating any summary as final.

Links
101 BTC.com $3.0M bitcoin, ethereum Other / Key Leaked via Infrastructure
102 Skyward Finance $3.0M near Reentrancy
103 Fortress Loans $3.0M bsc Oracle Manipulation & Price Manipulation
104 Rich Dwarves Tribe $3.0M — Abandoned
105 Tinyman $3.0M algorand Other / Incorrect Share Accounting
106 Multichain $2.7M ethereum Other / Missing Input Validation
107 IDO rug pulls $2.7M — Rugpull
108 Fantasm Finance $2.6M fantom Missing Condition Check / Other / Missing Input Validation
109 BNB42 $2.6M — Rugpull
110 PYE $2.6M — Other
111 Boy X Highspeed $2.6M — Other
112 TempleDAO $2.4M ethereum Access Control Attacks
113 friesDAO $2.3M ethereum Access Control Attacks
114 Bifrost $2.2M — Compromised deposit-address signing key
115 ApolloX $2.2M bsc Other / Signature Verification Flaw
116 Dictum Exchange $2.1M — Rugpull
117 Gym Network $2.1M bsc Access Control Attacks
118 Revest Finance $2.0M ethereum Reentrancy
119 Mirror Protocol $2.0M terra Access Control Attacks
120 Mad Meerkat Finance $2.0M — Other
121 MM Finance Cronos $2.0M cronos DNS Spoofing / DNS Hijack
122 OpenSea $2.0M ethereum Access Control Attacks
123 Titano $1.9M bsc Other / Backdoor Contract
124 FEG Token $1.9M bsc, ethereum Access Control Attacks
125 CF Token $1.9M bsc Access Control Attacks
126 KlaySwap $1.9M klaytn Frontend Compromise
127 DePo $1.7M — Access Control Attacks
128 Reaper Farm $1.7M fantom Access Control Attacks
129 Paraluni Masterchef $1.7M bsc Flash Loan Attacks
130 PARALUNI $1.7M — Other
131 OneRing $1.5M ethereum Access Control Attacks
132 UvToken $1.5M bsc Access Control Attacks
133 LV Metaverse $1.5M — Rugpull
134 FEGtoken $1.5M — Flash Loan Attacks
135 Pragma Money $1.5M — Rugpull
136 GERA $1.5M ethereum Deployer Key Compromised
137 Universe Token $1.4M — Access Control Attacks
138 Float Protocol $1.4M ethereum Oracle Manipulation & Price Manipulation
139 OMNI $1.4M ethereum Reentrancy
140 Rubic $1.4M ethereum Access Control Attacks
141 Treasure $1.4M arbitrum Buy Function Exploit / Missing Input Validation
142 CryptoBike $1.4M — Rugpull
143 Earning Farm $1.4M ethereum Flash Loan Attacks
144 Day of Defeat $1.4M — Rugpull
145 Frosties $1.3M — Abandoned
146 Solend $1.3M — Oracle Manipulation & Price Manipulation
147 Save $1.3M solana Oracle Manipulation & Price Manipulation
148 Inverse Finance $1.3M — Flash Loan Attacks
149 New Free DAO $1.3M bsc Flash Loan Attacks
150 Big Daddy Ape Club $1.2M — Rugpull
151 Rubic $1.2M ethereum Access Control Attacks
152 Hunter Global $1.2M — Rugpull
153 CheddaToken $1.2M — Rugpull
154 BasketDAO $1.2M ethereum Access Control Attacks
155 BitKeep $1.2M — Other
156 HeroCat $1.2M — Rugpull
157 QAN Platform $1.2M ethereum Access Control Attacks
158 Jumpn Finance $1.1M — Rugpull
159 TopGoal $1.1M bsc Access Control Attacks
160 Rikkei Finance $1.1M bsc Access Control Attacks
161 Sovryn $1.1M rsk Flash Loan Attacks
162 Treasure Swap $1.1M — Other
163 YEED $1.0M — Other
164 DecentraWorld $1.0M — Rugpull
165 OpenSea $1.0M ethereum Other / Withdrawal Logic Flaw
166 Zeed Finance $1.0M bsc Arithmetic Error
167 Bacon Protocol $1.0M ethereum Flash Loan Attacks
168 King Tribe $997K — Rugpull
169 Profanity Wallet Hack $978K — Access Control Attacks
170 Vanity address exploit $950K — Other
171 SudoRare $883K ethereum Drained Contracts / Rugpull / Liquidity Rug
172 Crosswise $879K bsc Access Control Attacks
173 ElasticSwap $854K avalanche, ethereum Oracle Manipulation & Price Manipulation
174 ApeCoin $820K ethereum Flash Loan Attacks
175 Anchor $800K terra Oracle Manipulation & Price Manipulation
176 TIGER $784K — Rugpull
177 DataDAO Finance $782K — Rugpull
178 Cryptoburgers $770K bsc Access Control Attacks
179 Mercenary $760K — Rugpull
180 Forest Tiger Pro $733K — Rugpull
181 Auctus $726K ethereum Access Control Attacks
182 QANX Bridge $707K ethereum Access Control Attacks
183 QAN Platform $705K — Other
184 Umbrella Network $700K bsc, ethereum Access Control Attacks
185 BabyMUSK $665K — Rugpull
186 Ariva Digital $661K — Access Control Attacks
187 Melody $644K — Access Control Attacks
188 TECRA $643K — Other
189 Blur Finance $600K bsc, polygon Drained Contracts / Exit Scam
190 LI.FI $600K ethereum Access Control Attacks
191 DAO_Officials $581K — Flash Loan Attacks
192 DAO Swap $580K bsc Access Control Attacks
193 Curve DEX $575K ethereum Phishing Attacks
194 The Micro Elements $573K — Rugpull
195 GMX V1 Perps $565K arbitrum Oracle Manipulation & Price Manipulation
196 BNB HEROES $561K — Rugpull
197 Feminist Metaverse $540K bsc Access Control Attacks
198 REALSWAK $527K — Rugpull
199 HUT $509K — Rugpull
200 DMC Token $497K — Rugpull

Notes

Loss totals use parsed USD values only; unknown or unparseable losses are not guessed. Attack-class links are added only when the root cause is clear enough to map.