Web3 Hacks in 2023

2023 incident records, sorted by known loss. The strongest mapped pattern is Access Control (68 rows); the largest tracked chain bucket is Ethereum ($997.3M).

Open full database

Incident records

Sorted by known reported loss first, then recency. Open the source before treating any summary as final.

Links
101 Samudai $1.2M ethereum Access Control Attacks Details Source
102 xKingdom.tech Token $1.2M — Rugpull Details Source
103 Aave Protocol $1.2M — Phishing Attacks Details Source
104 Steadefi $1.2M ethereum Access Control Attacks Details Source
105 IEGT $1.1M — Rugpull Details Source
106 USEA Token $1.1M — Rugpull Details Source
107 Levana Perps $1.1M osmosis Oracle Manipulation & Price Manipulation Details Source
108 Level Finance $1.1M bsc Other / Referral Claims Logic Exploit / Reward Logic Flaw Details Source2
109 Chibi Finance $1.1M — Rugpull Details Source
110 LayerZero $1.0M — Rugpull Details Source
111 Cypher $1.0M solana Oracle Manipulation & Price Manipulation Details Source
112 Ordinals Finance $1.0M — Rugpull Details Source2
113 Milady Maker $1.0M ethereum Admin Drain Details
114 Swap-LP $1.0M bsc Swap Logic Flaw Details
115 Sentiment $1.0M arbitrum Flash Loan Attacks Details Source
116 SwapX V2 $1.0M bsc Access Control Attacks Details
117 Harvest Keeper $933K ethereum Rugpull / Admin Drain Details Source2
118 Palm USD $900K bsc Flash Loan Attacks Details Source
119 VPANDAO DAO $869K — Rugpull Details Source
120 RocketSwap Base $865K base Access Control Attacks Details Source
121 Xai $846K ethereum Phishing Attacks Details
122 SyncSpace $830K — Other Details Source
123 Hope Lend $825K ethereum Other / Arithmetic Error Details Source
124 EigenLayer $821K — Rugpull Details Source
125 Pawnfi $820K ethereum Other / Incorrect Share Accounting Details Source
126 MetaPoint $820K bsc Access Control Attacks Details Source2
127 Balancer V2 $800K ethereum Flash Loan Attacks Details Source
128 EthBread Token $787K — Rugpull Details Source
129 Sturdy V1 $775K ethereum Flash Loan Attacks Details Source
130 GMBL.COMPUTER $770K arbitrum Referral Claims Logic Exploit / Other / Signature Verification Flaw Details Source
131 BearnDAO $768K — Other Details Source
132 Ledger Live Web3 $768K — Phishing Attacks Details Source
133 SAI Pro $752K — Rugpull Details Source
134 RESDAO $750K — Rugpull Details Source
135 Azuki $750K — Phishing Attacks Details Source23
136 LINEA $741K — Rugpull Details Source
137 Mother $734K — Rugpull Details Source
138 DungeonSwap $728K bsc Access Control Attacks Details
139 CS $714K — Flash Loan Attacks Details Source
140 FilDA $700K elastos, rei network Bridge Logic Flaw Details
141 LaunchZone $700K bsc Access Control Attacks Details Source
142 ProTradeX $698K — Rugpull Details Source
143 fcdep $675K — Rugpull Details Source
144 Megabot $666K — Rugpull Details Source
145 Midas Capital $660K polygon Flash Loan Attacks Details Source
146 EDE Finance $658K — Other Details Source
147 Hector Lending $653K fantom Access Control Attacks Details Source
148 Unibot $640K ethereum Access Control Attacks Details Source
149 WSB Coin $635K — Rugpull Details Source2
150 LeetSwap $620K base Access Control Attacks Details Source
151 Apache NFT SalesRoom $618K — Rugpull Details Source
152 ZKLOTTO $609K — Rugpull Details Source
153 Hashflow $605K arbitrum, avalanche, bsc +2 Access Control Attacks Details Source23
154 Hedera Token Service $600K hedera Access Control Attacks Details Source234
155 Boost Coin $593K — Rugpull Details Source
156 Ocean Venture $588K — Rugpull Details Source
157 IPO $585K — Rugpull Details Source2
158 Allbridge Core $573K bsc Flash Loan Attacks Details Source
159 BitLord $566K — Rugpull Details Source
160 Serial Scammer $547K — Rugpull Details Source
161 Earning.Farm $540K ethereum Reentrancy Details Source
162 CLOUD NFT $519K — Rugpull Details Source
163 Star Token $518K — Other Details Source
164 Flashmall $508K — Rugpull Details Source
165 Maestro $500K ethereum Access Control Attacks Details Source
166 BNO $500K bsc Access Control Attacks Details Source
167 CKD TOKEN $485K — Rugpull Details Source
168 TWEETY-MEGA-FUMO $484K — Rugpull Details
169 Ledger Connect Kit $484K ethereum Supply Chain Attack Details
170 Swapos $468K ethereum Other / Swap Logic Flaw Details
171 SwilrLend $460K — Rugpull Details Source
172 Friend Tech $456K — Rugpull Details Source2
173 Arcadia V1 $455K ethereum, optimism Access Control Attacks Details Source
174 Changpeng Zhao $454K — Rugpull Details Source
175 SyncDex $442K — Rugpull Details Source2
176 Poolz Finance $390K bsc Other / Arithmetic Error Details Source234
177 unshETH $375K ethereum Access Control Attacks Details Source
178 Linda Yaccarino $375K — Rugpull Details Source
179 Do Right $371K — Rugpull Details Source
180 Themis Protocol $370K arbitrum Flash Loan Attacks Details Source
181 Custom Lending Pool $366K — Other Details Source
182 Smurfs Coin $366K — Rugpull Details Source
183 Zircon Gamma $350K bsc, moonriver Flash Loan Attacks Details Source
184 fcdep $350K bsc Infinite Mint Details
185 ATF Token $340K — Rugpull Details Source
186 Midas Capital $340K bsc Arithmetic Overflow & Underflow Attacks Details Source
187 DUO $334K — Rugpull Details Source
188 Art Coin $331K ethereum Deposit Logic Flaw Details
189 Worldcoin $330K — Rugpull Details Source
190 Uwerx $327K ethereum Flash Loan Attacks Details Source
191 Locus Finance $321K arbitrum, ethereum Access Control Attacks Details Source
192 Channels Finance $320K bsc Infinite Mint Details
193 HIGH RETURN (HRN) $315K — Rugpull Details Source
194 ROBIN HOOD $313K — Rugpull Details Source
195 Tommy VICE CITY $308K — Rugpull Details Source
196 DD coin $307K — Other Details Source
197 Conic Finance $300K ethereum Flash Loan Attacks Details Source
198 Mycelium $300K — Other Details Source2
199 Hu Tao Spirit Soother $300K — Rugpull Details Source
200 TheStandard.io $290K arbitrum Other / Swap Logic Flaw Details Source23

Notes

Loss totals use parsed USD values only; unknown or unparseable losses are not guessed. Attack-class links are added only when the root cause is clear enough to map.

Full hack database Filter every tracked incident by chain, date, loss size, and technique. Attack class library Move from incident examples to exploit mechanics and review checklists. Largest crypto hacks Compare this year against the highest-loss incidents in the database.