Web3 Hacks in 2023

2023 incident records, sorted by known loss. The strongest mapped pattern is Access Control (68 rows); the largest tracked chain bucket is Ethereum ($1.0B).

Open full database

Incident records

Sorted by known reported loss first, then recency. Open the source before treating any summary as final.

Links
1 Mixin Network $200M mixin Database Attack / Other / Database Breach Details Source
2 Euler Finance $196M ethereum Flash Loan Attacks Details Source 1Source 2Source 3Source 4
3 Poloniex $126M bitcoin, ethereum, tron Access Control Attacks Details Source
4 Multichain $126M bsc, fantom, moonriver Access Control Attacks Details Source
5 Atomic Wallet $115M avalanche, bitcoin, bsc, ethereum, polkadot, tron Access Control Attacks Details Source
6 HECO $86.3M ethereum Access Control Attacks Details Source 1Source 2
7 Orbit Chain $81.5M ethereum Access Control Attacks Details Source
8 Curve DEX $61.7M ethereum Reentrancy Details Source
9 CoinEx $55.0M arbitrum, bitcoin, bitcoincash, bsc, dagger, ethereum, kadena, polygon, solana, stellar, tron, xrp Access Control Attacks Details Source
10 Vyper $50.5M — Reentrancy Details Source 1Source 2Source 3
11 KyberSwap Elastic $48.0M arbitrum, base, ethereum, optimism, polygon Arithmetic Overflow & Underflow Attacks Details Source
12 CoinDeal $45.0M — Other Details Source 1Source 2
13 Stake.com $41.4M bsc, ethereum, polygon Access Control Attacks Details Source
14 CoinsPaid $37.3M — Phishing Attacks Details Source
15 Ackerman Ponzi $33.0M — Other Details Source 1Source 2Source 3
16 Fintoch $31.7M — Rugpull Details Source 1Source 2
17 Herencia Artifex $29.6M — Other Details Source
18 Binance User $27.1M — Access Control Attacks Details Source
19 Huobi $26.4M ethereum Access Control Attacks Details Source
20 Kronos Research $26.0M ethereum API Key unauthorized access / API Key Compromised Details Source
21 MEV Boost Exploit $25.0M ethereum MEV relay validation failure Details Source 1Source 2Source 3
22 Bald $23.1M base Drained Liquidity Pool / Rugpull / Liquidity Rug Details Source
23 Coindroplet $23.1M — Phishing Attacks Details Source 1Source 2
24 Bitrue $23.0M — Access Control Attacks Details Source
25 HTX $21.9M — Access Control Attacks Details Source
26 Monkey Drainer $16.5M — Phishing Attacks Details Source 1Source 2Source 3Source 4
27 PEPE $15.1M ethereum Admin Drain Details
28 GDAC $13.0M — Access Control Attacks Details Source
29 Yearn Finance $11.5M ethereum Flash Loan Attacks Details Source
30 MyAlgo $9.2M algorand Cloudflare Key Compromised / CDN Compromise Details Source
31 Platypus Finance $9.2M avalanche Collateral Withdrawal Solvency Error Details Source
32 dYdX V3 $9.0M ethereum Oracle Manipulation & Price Manipulation Details Source
33 Safemoon $8.9M bsc Access Control Attacks Details Source
34 HTX $8.0M ethereum Access Control Attacks Details Source
35 Exactly $7.6M optimism Access Control Attacks Details Source
36 Jimbos Protocol $7.5M arbitrum Flash Loan Attacks Details Source
37 Hundred Finance $7.4M optimism Flash Loan Attacks Details Source
38 Fantom Foundation $7.4M — Access Control Attacks Details Source
39 Magnate Finance $6.5M base Drained Contracts / Rugpull / Treasury Misappropriation Details Source
40 DEUS Finance $6.5M arbitrum, bsc, ethereum Reversed allowance lookup Details Source
41 LendHub $6.0M heco Collateral Offboarding Mistake / Incorrect Share Accounting / Other Details Source
42 Friendsies $5.3M — Rugpull Details Source 1Source 2Source 3
43 Poly Network $5.0M bsc, ethereum, polygon Access Control Attacks Details Source
44 Shata Capital $5.0M — Access Control Attacks Details Source 1Source 2Source 3
45 Link Drainer $4.2M — Phishing Attacks Details Source
46 Terraport Finance $4.0M terra classic Access Control Attacks Details Source 1Source 2
47 Kokomo Finance $4.0M optimism Drained Contracts / Admin Drain / Rugpull Details Source
48 GMX Phishing $4.0M — Phishing Attacks Details Source 1Source 2
49 Pink Drainer $3.7M — Phishing Attacks Details Source 1Source 2
50 GMETA $3.7M — Rugpull Details Source
51 dForce $3.6M arbitrum, optimism Oracle Manipulation & Price Manipulation Details Source 1Source 2
52 Hayden Adams Phishing $3.6M — Phishing Attacks Details Source 1Source 2
53 SushiSwap $3.5M arbitrum, bsc, ethereum, optimism Missing Input Validation / Other Details Source
54 EraLend $3.4M zksync era Reentrancy Details Source
55 Raft $3.3M ethereum Infinite Mint and Dump / Other / Infinite Mint Details Source
56 Conic Finance $3.3M ethereum Flash Loan Attacks Details Source
57 Nft Trader $3.0M ethereum Reentrancy Details Source
58 Swaprum $3.0M arbitrum Drained Contracts / Rugpull / Backdoor Contract Details Source
59 Orion Protocol $3.0M bsc Reentrancy Details Source 1Source 2Source 3Source 4Source 5
60 Stars Arena $3.0M avalanche Reentrancy Details Source
61 OKX DEX $2.7M ethereum Access Control Attacks Details Source
62 Remitano $2.7M bitcoincash, ethereum, tron Access Control Attacks Details Source
63 FCS $2.6M — Rugpull Details Source
64 Atlantis Loans $2.5M bsc Access Control Attacks Details Source
65 Wallet Drain $2.4M — Phishing Attacks Details Source
66 CoinSpot $2.4M ethereum Access Control Attacks Details Source
67 Platypus Finance $2.2M avalanche Flash Loan Attacks Details Source
68 Pond0x $2.2M ethereum Access Control Attacks Details
69 Zunami Protocol $2.2M ethereum Flash Loan Attacks Details Source
70 Tornado Cash $2.2M ethereum Other / Malicious Proposal Details Source 1Source 2
71 Onyx Protocol $2.1M ethereum Flash Loan Attacks Details Source
72 Kannagi $2.1M ethereum, zksync era Drained Contracts / Admin Drain Details Source
73 YieldRobot $2.1M — Rugpull Details Source 1Source 2
74 Dexible $2.0M arbitrum, ethereum Access Control Attacks Details Source 1Source 2Source 3Source 4
75 Patricia $2.0M — Database Breach Details
76 pcash $2.0M eos Unknown Details
77 Ovix $2.0M polygon Flash Loan Attacks Details Source 1Source 2Source 3
78 FilDA $2.0M — Other Details Source 1Source 2
79 Hope Finance $2.0M arbitrum Access Control Attacks Details Source
80 MEV Bot $2.0M ethereum Access Control Attacks Details Source
81 KLAYswap $1.9M — Other Details Source 1Source 2
82 Omm $1.9M icon Redeem Function Exploit / Redeem Logic Flaw / Other Details Source
83 IVY $1.8M — Rugpull Details Source
84 MERLIN DEX $1.8M zksync era Access Control Attacks Details Source
85 BonqDAO $1.8M polygon Oracle Manipulation & Price Manipulation Details Source
86 Rodeo Finance $1.7M — Oracle Manipulation & Price Manipulation Details Source 1Source 2
87 FSL $1.7M — Rugpull Details Source
88 DefiLabs $1.6M — Rugpull Details Source
89 INX Digital Company $1.6M ethereum Key Leaked via Infrastructure Details
90 Flooring Protocol $1.6M ethereum Access Control Attacks Details
91 Tender Finance $1.6M arbitrum Oracle Manipulation & Price Manipulation Details Source
92 LianGo Protocol $1.6M bsc Access Control Attacks Details Source 1Source 2
93 General Bytes $1.5M ethereum Key Leaked via Infrastructure Details
94 Florence Finance $1.5M ethereum Phishing Attacks Details Source
95 Safereum $1.3M — Rugpull Details Source
96 Swerve Finance $1.3M ethereum Other / Malicious Proposal Details Source 1Source 2
97 Samudai $1.3M ethereum Access Control Attacks Details Source
98 Black Hole $1.3M bsc Oracle Manipulation & Price Manipulation Details Source
99 Telcoin $1.3M polygon Access Control Attacks Details Source
100 xKingdom.tech Token $1.2M — Rugpull Details Source

Notes

Loss totals use parsed USD values only; unknown or unparseable losses are not guessed. Attack-class links are added only when the root cause is clear enough to map.

Full hack database Filter every tracked incident by chain, date, loss size, and technique. Attack class library Move from incident examples to exploit mechanics and review checklists. Largest crypto hacks Compare this year against the highest-loss incidents in the database.