Web3 Hacks in 2022

2022 incident records, sorted by known loss. The strongest mapped pattern is Access Control (81 rows); the largest tracked chain bucket is Ethereum ($2.1B).

Open full database

Incident records

Sorted by known reported loss first, then recency. Open the source before treating any summary as final.

Links
201 MetaverseToken $487K — Flash Loan Attacks Details Source
202 WanderVerse NFT $485K — Rugpull Details Source
203 Arbitrage Robot Token $472K — Other Details Source
204 Build Finance $470K ethereum Malicious Proposal Details
205 BuildFinance $470K — Access Control Attacks Details Source
206 Snowflake $468K — Rugpull Details Source
207 Rigoblock $464K ethereum Access Control Attacks Details
208 FSWAP $432K — Other Details Source
209 Fair Token $429K — Rugpull Details Source
210 BGE $427K — Rugpull Details Source
211 Nut2Earn $410K — Rugpull Details Source
212 HEGE coin $400K — Rugpull Details
213 Cezar Hard Fork $399K — Rugpull Details Source
214 Dollar $383K — Rugpull Details Source
215 MetaFinanceDAO $380K — Rugpull Details Source
216 PREMINT | NFT $375K ethereum Access Control Attacks Details Source
217 Nereus Finance $371K avalanche Oracle Manipulation & Price Manipulation Details
218 Cauldron $370K — Flash Loan Attacks Details Source
219 XSTABLE Protocol $367K — Rugpull Details Source
220 Ribbon Finance $351K ethereum Phishing Attacks Details Source
221 GHOSTP2E $346K — Rugpull Details Source
222 Bubbleworld $344K — Other Details Source
223 WonderHero $320K bsc Hot Wallet Key Compromised Details
224 OlympusDAO $315K — Other Details Source
225 FileSystemVideo $304K — Rugpull Details Source
226 ShadowFi $303K bsc Access Control Attacks Details Source
227 Lymex $302K — Rugpull Details Source
228 Amun $300K ethereum, polygon Access Control Attacks Details Source
229 Bond Protocol $300K ethereum Delegatecall & Call Injection Attacks Details Source
230 Seth Green NFTs $300K ethereum Phishing Attacks Details
231 Flurry Finance $293K bsc Other / Incorrect Share Accounting Details Source
232 RES Token $290K bsc Oracle Manipulation & Price Manipulation Details
233 Metaland DAO $287K — Rugpull Details Source
234 MTDAO $280K bsc Flash Loan Attacks Details Source
235 Bored Ape Yacht Club $276K — Other Details
236 LOO $275K — Rugpull Details Source
237 Omni Bridge $272K — Replay Attacks Details Source
238 Kyber Network $265K — Other Details Source
239 KyberSwap Classic $265K polygon Cloudflare Key Compromised / CDN Compromise Details Source
240 BAYC & OtherSide $263K ethereum Phishing Attacks Details Source
241 SherLOCK $262K — Rugpull Details Source
242 TTTT $261K — Rugpull Details Source
243 Ethereum alarm clock $260K ethereum Other / Reward Logic Flaw Details Source
244 PoW ETH $256K — Phishing Attacks Details Source
245 SuperStep $256K — Rugpull Details Source
246 BNQ Token $256K — Rugpull Details Source
247 ULME $250K bsc Access Control Attacks Details
248 GOAT $250K — Rugpull Details Source
249 Gera Coin $247K — Other Details Source
250 EarnHub $245K — Other Details Source
251 Celer Bridge $240K multi chain Other / DNS Hijack Details Source
252 QuickSwap $220K polygon Flash Loan Attacks Details Source
253 NFTflow $216K — Rugpull Details Source
254 MMFinance $215K — Rugpull Details Source
255 Brand New Quest Metaverse $214K — Rugpull Details Source
256 Santa Coin $211K — Rugpull Details Source
257 Swello Finance $210K — Rugpull Details Source
258 DeFi WZ Token $208K — Rugpull Details Source
259 Rare Bears $206K — Access Control Attacks Details Source
260 ArenaPlayAPC $204K — Rugpull Details Source
261 MaximusDAO $204K — Phishing Attacks Details Source
262 Automated Assassins $202K — Rugpull Details Source
263 Quixotic $200K optimism Other / Signature Verification Flaw Details Source
264 X2Y2 $200K ethereum Phishing Attacks Details Source
265 Rabby Wallet $194K — Access Control Attacks Details Source
266 DollarDoge $194K — Rugpull Details Source
267 NWT Token $191K — Rugpull Details Source
268 Layer2DAO $190K optimism Access Control Attacks Details Source
269 DMCToken $190K — Rugpull Details Source
270 FTX $187K ethereum Other / API Key Compromised Details Source
271 Meta Apes $183K — Rugpull Details Source
272 SHIDAO $180K — Rugpull Details Source
273 Bill Muray Wallet Hack $178K — Access Control Attacks Details Source
274 PAK REVOLUTION $175K — Rugpull Details Source
275 Cryptovoxels $171K ethereum Phishing Attacks Details
276 Stobox Exchange $166K — Access Control Attacks Details Source
277 Stader.Near $165K — Other Details Source
278 FDO $160K — Other Details Source
279 Sport Move $160K — Rugpull Details Source
280 SkyLands $159K — Rugpull Details Source
281 DappNode $158K — Access Control Attacks Details Source
282 BTDOG $157K — Rugpull Details Source
283 ADAF $156K — Rugpull Details
284 Artificial intelligence robot $152K — Rugpull Details Source
285 LlamaCoin $151K — Rugpull Details
286 DeeKay $150K — Phishing Attacks Details Source
287 SkyVerse $150K — Other Details Source
288 FlokiMoon $148K — Rugpull Details
289 DDCX $148K — Rugpull Details Source
290 Deri Protocol $145K — Other Details Source
291 HPD $143K — Rugpull Details Source
292 DHE $142K — Rugpull Details Source
293 Giant Divine Shield $141K — Rugpull Details Source
294 MooCakeCTX $140K bsc Flash Loan Attacks Details Source
295 Ratz Club $140K — Access Control Attacks Details Source
296 Dark Light $134K — Rugpull Details Source
297 World Cup $132K — Rugpull Details Source
298 GST Token $131K — Rugpull Details
299 Quint $130K — Other Details Source
300 pandorachainDAO $128K bsc Oracle Manipulation & Price Manipulation Details

Notes

Loss totals use parsed USD values only; unknown or unparseable losses are not guessed. Attack-class links are added only when the root cause is clear enough to map.

Full hack database Filter every tracked incident by chain, date, loss size, and technique. Attack class library Move from incident examples to exploit mechanics and review checklists. Largest crypto hacks Compare this year against the highest-loss incidents in the database.