Web3 Hacks in 2023

2023 incident records, sorted by known loss. The strongest mapped pattern is Access Control (68 rows); the largest tracked chain bucket is Ethereum ($997.3M).

Incident records

Sorted by known reported loss first, then recency. Open the source before treating any summary as final.

Links
201 BJS $290K — Rugpull
202 Plankton Plankton $288K — Rugpull
203 SCT Token $286K — Rugpull
204 Safe $284K — Other
205 Tales of Elleria $280K arbitrum Access Control Attacks
206 FEGToken $280K — Other
207 Project culs $278K — Rugpull
208 Block Forest $275K — Flash Loan Attacks
209 Venus Protocol $274K bsc Oracle Manipulation & Price Manipulation
210 Galxe $270K ethereum DNS Hijack
211 Gandalf The Grey $266K — Rugpull
212 Vip Panda Community $266K — Rugpull
213 WiseLending $260K ethereum Rounding Error
214 Kujira $260K — Other
215 PEPEHUB $255K — Rugpull
216 BlockGPT $255K — Rugpull
217 Hachiko $254K — Rugpull
218 Velodrome Finance $250K optimism Other / DNS Hijack
219 Harbor Protocol $250K comdex Oracle Manipulation & Price Manipulation
220 Sperax USD $250K arbitrum Other / Unbacked Mint
221 Gladiator $246K — Rugpull
222 Popeye the Sailor $241K — Rugpull
223 Thunder Terminal $240K ethereum, solana Key Leaked via Infrastructure
224 Shido Global $238K bsc Other / Unknown
225 Balancer V2 $238K ethereum Frontend Attack / Other / Frontend Compromise
226 Scooby Pepe $238K — Rugpull
227 DubaiCEO $237K — Rugpull
228 Reflex Staking Bot $237K — Rugpull
229 STILTON MUSK $232K — Rugpull
230 Peapods Finance $231K ethereum Reentrancy
231 Synthetify $230K solana Malicious Proposal
232 Astrid Finance $228K ethereum Withdraw Function Argument Manipulation / Missing Input Validation
233 Agent Smith $227K — Rugpull
234 Satori $226K — Rugpull
235 Abattoir of Zir $226K — Rugpull
236 BRA $225K bsc Flash Loan Attacks
237 PAULY $224K — Rugpull
238 Diamond DND $223K — Other
239 CIRCLE (fake) $216K — Rugpull
240 Hypr Network $215K — Other
241 Linear Finance $212K — Other
242 Celestia $209K — Rugpull
243 ArchWay Fake $207K — Rugpull
244 Elon Pepe $206K — Honeypot
245 stoicDAO $205K — Rugpull
246 Bare Bear $202K — Rugpull
247 zkSync Copycat $202K — Rugpull
248 Keep3r Network $200K ethereum Access Control Attacks
249 Hex Trust Token $200K — Rugpull
250 Doglands $200K — Rugpull
251 SNOOKER $198K bsc Access Control Attacks
252 Sui Network $197K — Rugpull
253 MOL $192K — Rugpull
254 Real Web Project $190K — Rugpull
255 Time $190K ethereum Other / Missing Input Validation
256 Wettok Market $190K — Rugpull
257 Memecoin $188K — Rugpull
258 GDS Chain $187K bsc Flash Loan Attacks
259 Toothless - How to train meme $186K — Rugpull
260 BigFinance $185K — Rugpull
261 Civilization $180K ethereum Access Control Attacks
262 CoW Swap $180K ethereum Access Control Attacks
263 Web $179K — Rugpull
264 Helio Protocol $178K — Rugpull
265 Beluga $175K arbitrum Oracle Manipulation & Price Manipulation
266 SharedStake $175K ethereum Access Control Attacks
267 DarkProtocol $174K — Rugpull
268 Aspiring Cooperation Community $173K — Rugpull
269 IPMB $172K — Rugpull
270 Trust Wallet $170K — Other
271 Nikhil Gopalani Wallet $170K — Phishing Attacks
272 MIKE and SID Tokens $170K — Rugpull
273 APIG $169K — Rugpull
274 Big Time $169K — Rugpull
275 Majin Buu $168K — Rugpull
276 SOMESING $167K — Rugpull
277 Elephant Money $165K bsc Flash Loan Attacks
278 MarbleX $162K — Rugpull
279 L7 DEX $161K — Rugpull
280 Celestia $161K — Rugpull
281 Jigsaw saw you $160K — Rugpull
282 ROACH RACE $160K — Rugpull
283 Huge Gas Fee Draining $156K — Other
284 OBB Token $156K — Rugpull
285 TrustPad $155K bsc Access Control Attacks
286 Creso $154K — Rugpull
287 LK-99 Protocol $152K — Rugpull
288 GGBOND $151K — Rugpull
289 Carson $150K bsc Flash Loan Attacks
290 AI C-3PO $150K — Rugpull
291 Tropykus RSK $150K rootstock Arithmetic Overflow & Underflow Attacks
292 BONK Inu $150K — Rugpull
293 LooBr $147K — Rugpull
294 land $145K — Other
295 Jar Jar Binks $145K — Rugpull
296 mCoin $144K — Rugpull
297 TwitFi $137K — Other
298 BabyDogeCoin $135K — Flash Loan Attacks
299 Kizuna AI $135K — Rugpull
300 CommEX $134K — Rugpull

Notes

Loss totals use parsed USD values only; unknown or unparseable losses are not guessed. Attack-class links are added only when the root cause is clear enough to map.