Web3 Hacks in 2023

2023 incident records, sorted by known loss. The strongest mapped pattern is Access Control (72 rows); the largest tracked chain bucket is Ethereum ($1.0B).

Open full database

Incident records

Sorted by known reported loss first, then recency. Open the source before treating any summary as final.

Links
101 FSL $1.7M — Rugpull Details Source
102 DefiLabs $1.6M — Rugpull Details Source
103 INX Digital Company $1.6M ethereum Key Leaked via Infrastructure Details
104 Flooring Protocol $1.6M ethereum Access Control Attacks Details
105 Tender Finance $1.6M arbitrum Oracle Manipulation & Price Manipulation Details Source
106 LianGoPay $1.6M bsc Admin Drain Details
107 LianGo Protocol $1.6M — Access Control Attacks Details Source
108 TenderFi $1.6M — Oracle Manipulation & Price Manipulation Details Source
109 General Bytes $1.5M ethereum Key Leaked via Infrastructure Details
110 Florence Finance $1.5M ethereum Phishing Attacks Details Source
111 Safereum $1.3M — Rugpull Details Source
112 Swerve $1.3M ethereum Malicious Proposal Details
113 Samudai $1.3M ethereum Access Control Attacks Details Source
114 Black Hole $1.3M — Other Details Source
115 BlackHole Token $1.3M bsc Oracle Manipulation & Price Manipulation Details
116 Telcoin $1.3M polygon Access Control Attacks Details Source
117 xKingdom.tech Token $1.2M — Rugpull Details Source
118 Aave Protocol $1.2M — Phishing Attacks Details Source
119 Steadefi $1.2M ethereum Access Control Attacks Details Source
120 Speadefi $1.1M — Access Control Attacks Details Source
121 IEGT $1.1M — Rugpull Details Source
122 USEA Token $1.1M — Rugpull Details Source
123 Levana Perps $1.1M osmosis Oracle Manipulation & Price Manipulation Details Source
124 Swap-LP $1.1M bsc Swap Logic Flaw Details
125 Level Perps $1.1M bsc Referral Claims Logic Exploit / Reward Logic Flaw Details Source
126 Level Finance $1.1M — Other Details Source
127 Chibi Finance $1.1M — Rugpull Details Source
128 LayerZero $1.0M — Rugpull Details Source
129 Cypher $1.0M solana Oracle Manipulation & Price Manipulation Details Source
130 Ordinals Finance $1.0M — Rugpull Details Source
131 Milady Maker $1.0M ethereum Admin Drain Details
132 WDZD Swap $1.0M bsc Swap Logic Flaw Details
133 Sentiment $1.0M arbitrum Flash Loan Attacks Details Source
134 SwapX V2 $1.0M bsc Access Control Attacks Details
135 Harvest Keeper $933K ethereum Rugpull / Admin Drain Details Source
136 Palm USD $900K — Flash Loan Attacks Details Source
137 Palmswap $900K bsc Inflationary Accounting Manipulation / Incorrect Share Accounting Details Source
138 VPANDAO DAO $869K — Rugpull Details Source
139 RocketSwap Base $869K base Access Control Attacks Details Source
140 BiSwap $865K bsc Access Control Attacks Details Source
141 Xai $846K ethereum Phishing Attacks Details
142 Hope Lend $835K ethereum Other / Arithmetic Error Details Source
143 EigenLayer $821K — Rugpull Details Source
144 Pawnfi $820K ethereum Other / Incorrect Share Accounting Details Source
145 MetaPoint $820K bsc Access Control Attacks Details Source
146 GMBL.COMPUTER $815K arbitrum Referral Claims Logic Exploit / Other / Signature Verification Flaw Details Source
147 Balancer V2 $800K ethereum Flash Loan Attacks Details Source
148 EthBread Token $787K — Rugpull Details Source
149 Sturdy V1 $775K ethereum Flash Loan Attacks Details Source
150 BearnDAO $768K — Other Details Source
151 Ledger Live Web3 $768K — Phishing Attacks Details Source
152 SAI Pro $752K — Rugpull Details Source
153 RESDAO $750K — Rugpull Details Source
154 Azuki $750K — Phishing Attacks Details Source
155 LINEA $741K — Rugpull Details Source
156 Mother $734K — Rugpull Details Source
157 DungeonSwap $728K bsc Access Control Attacks Details
158 CS $714K — Flash Loan Attacks Details Source
159 FilDA $700K elastos, rei network Bridge Logic Flaw Details
160 LaunchZone $700K bsc Access Control Attacks Details Source
161 ProTradeX $698K — Rugpull Details Source
162 fcdep $675K — Rugpull Details Source
163 Unibot $673K ethereum Access Control Attacks Details Source
164 Megabot $666K — Rugpull Details Source
165 Midas Capital $660K polygon Flash Loan Attacks Details Source
166 EDE Finance $658K — Other Details Source
167 Hector Lending $653K fantom Access Control Attacks Details Source
168 Allbridge Core $650K bsc Flash Loan Attacks Details Source
169 Hashflow $640K arbitrum, avalanche, bsc, ethereum, polygon Access Control Attacks Details Source
170 WSB Coin $635K — Rugpull Details Source
171 LeetSwap $629K base Access Control Attacks Details Source
172 GoodDollars $628K — Flash Loan Attacks Details Source
173 Apache NFT SalesRoom $618K — Rugpull Details Source
174 ZKLOTTO $609K — Rugpull Details Source
175 Midas Capital $600K bsc Arithmetic Overflow & Underflow Attacks Details Source
176 Hedera $600K hedera Access Control Attacks Details Source
177 Hedera Token Service $600K — Other Details Source
178 Boost Coin $593K — Rugpull Details Source
179 Ocean Venture $588K — Rugpull Details Source
180 IPO $585K — Rugpull Details Source
181 Thoreum Finance $580K bsc Access Control Attacks Details Source
182 BitLord $566K — Rugpull Details Source
183 Serial Scammer $547K — Rugpull Details Source
184 Earning.Farm $541K ethereum Reentrancy Details Source
185 CLOUD NFT $519K — Rugpull Details Source
186 Star Token $518K — Other Details Source
187 Flashmall $508K — Rugpull Details Source
188 BNO $504K bsc Access Control Attacks Details Source
189 Maestro $500K ethereum Access Control Attacks Details Source
190 CKD TOKEN $485K — Rugpull Details Source
191 TWEETY-MEGA-FUMO $484K — Rugpull Details
192 Ledger Connect Kit $484K ethereum Supply Chain Attack Details
193 Swapos $468K ethereum Other / Swap Logic Flaw Details Source
194 SwilrLend $460K — Rugpull Details Source
195 Arcadia V1 $460K ethereum, optimism Access Control Attacks Details Source
196 Friend Tech $456K — Rugpull Details Source
197 Changpeng Zhao $454K — Rugpull Details Source
198 Libertify $452K ethereum, polygon Reentrancy Details Source
199 Poolz Finance $443K — Other Details Source
200 SyncDex $442K — Rugpull Details Source

Notes

Loss totals use parsed USD values only; unknown or unparseable losses are not guessed. Attack-class links are added only when the root cause is clear enough to map.

Full hack database Filter every tracked incident by chain, date, loss size, and technique. Attack class library Move from incident examples to exploit mechanics and review checklists. Largest crypto hacks Compare this year against the highest-loss incidents in the database.