Web3 Hacks in 2023

2023 incident records, sorted by known loss. The strongest mapped pattern is Access Control (72 rows); the largest tracked chain bucket is Ethereum ($1.0B).

Open full database

Incident records

Sorted by known reported loss first, then recency. Open the source before treating any summary as final.

Links
201 Poolz Network $390K bsc Arithmetic Error Details
202 unshETH $375K ethereum Access Control Attacks Details Source
203 Linda Yaccarino $375K — Rugpull Details Source
204 Do Right $371K — Rugpull Details Source
205 Themis Protocol $370K arbitrum Flash Loan Attacks Details Source
206 Custom Lending Pool $366K — Other Details Source
207 Smurfs Coin $366K — Rugpull Details Source
208 Zircon Gamma $350K bsc, moonriver Flash Loan Attacks Details Source
209 fcdep $350K bsc Infinite Mint Details
210 ATF Token $340K — Rugpull Details Source
211 DUO $334K — Rugpull Details Source
212 Art Coin $331K ethereum Deposit Logic Flaw Details
213 Worldcoin $330K — Rugpull Details Source
214 Uwerx $327K ethereum Flash Loan Attacks Details Source
215 Locus Finance $321K arbitrum, ethereum Access Control Attacks Details Source
216 Channels Finance $320K bsc Infinite Mint Details
217 HIGH RETURN (HRN) $315K — Rugpull Details Source
218 ROBIN HOOD $313K — Rugpull Details Source
219 Tommy VICE CITY $308K — Rugpull Details Source
220 DD coin $307K — Other Details Source
221 Conic Finance $300K ethereum Flash Loan Attacks Details Source
222 Mycelium $300K — Other Details Source
223 Hu Tao Spirit Soother $300K — Rugpull Details Source
224 TheStandard.io $290K arbitrum Other / Swap Logic Flaw Details Source
225 BJS $290K — Rugpull Details Source
226 Plankton Plankton $288K — Rugpull Details Source
227 SCT Token $286K — Rugpull Details Source
228 Safe $284K — Other Details Source
229 Tales of Elleria $280K arbitrum Access Control Attacks Details Source
230 FEGToken $280K — Other Details Source
231 Project culs $278K — Rugpull Details Source
232 Block Forest $275K — Flash Loan Attacks Details Source
233 Venus Protocol $274K bsc Oracle Manipulation & Price Manipulation Details
234 SyncSpace $273K — Other Details Source
235 Galxe $270K ethereum DNS Hijack Details
236 Gandalf The Grey $266K — Rugpull Details Source
237 Vip Panda Community $266K — Rugpull Details Source
238 WiseLending $260K ethereum Rounding Error Details
239 Kujira $260K — Other Details Source
240 PEPEHUB $255K — Rugpull Details Source
241 BlockGPT $255K — Rugpull Details Source
242 Hachiko $254K — Rugpull Details
243 Harbor Protocol $250K comdex Oracle Manipulation & Price Manipulation Details Source
244 Sperax USD $250K arbitrum Other / Unbacked Mint Details Source
245 Gladiator $246K — Rugpull Details Source
246 Popeye the Sailor $241K — Rugpull Details Source
247 Thunder Terminal $240K ethereum, solana Key Leaked via Infrastructure Details
248 Shido $238K bsc Unknown Details
249 Balancer V2 $238K ethereum Frontend Attack / Other / Frontend Compromise Details Source
250 Scooby Pepe $238K — Rugpull Details Source
251 DubaiCEO $237K — Rugpull Details Source
252 Reflex Staking Bot $237K — Rugpull Details Source
253 Shido Global $235K — Other Details Source
254 STILTON MUSK $232K — Rugpull Details
255 Peapods Finance $231K ethereum Reentrancy Details Source
256 Synthetify $230K solana Malicious Proposal Details
257 Astrid Finance $228K ethereum Withdraw Function Argument Manipulation / Missing Input Validation Details Source
258 Agent Smith $227K — Rugpull Details Source
259 Satori $226K — Rugpull Details Source
260 Abattoir of Zir $226K — Rugpull Details Source
261 BRA $225K bsc Flash Loan Attacks Details Source
262 PAULY $224K — Rugpull Details Source
263 Diamond DND $223K — Other Details Source
264 CIRCLE (fake) $216K — Rugpull Details Source
265 Hypr Network $215K — Other Details Source
266 Linear Finance $212K — Other Details Source
267 Celestia $209K — Rugpull Details Source
268 ArchWay Fake $207K — Rugpull Details Source
269 Elon Pepe $206K — Honeypot Details Source
270 stoicDAO $205K — Rugpull Details Source
271 Bare Bear $202K — Rugpull Details Source
272 zkSync Copycat $202K — Rugpull Details Source
273 Time $200K ethereum Other / Missing Input Validation Details Source
274 Keep3r Network $200K ethereum Access Control Attacks Details Source
275 Hex Trust Token $200K — Rugpull Details Source
276 Doglands $200K — Rugpull Details Source
277 SNOOKER $198K bsc Access Control Attacks Details Source
278 Sui Network $197K — Rugpull Details Source
279 MOL $192K — Rugpull Details Source
280 Real Web Project $190K — Rugpull Details Source
281 Wettok Market $190K — Rugpull Details Source
282 Memecoin $188K — Rugpull Details Source
283 GDS $187K bsc Reward Logic Flaw Details
284 GDS Chain $187K — Flash Loan Attacks Details Source
285 Toothless - How to train meme $186K — Rugpull Details Source
286 BigFinance $185K — Rugpull Details Source
287 Civilization $180K — Other Details Source
288 CivFund $180K ethereum Access Control Attacks Details
289 CIVNFT $180K ethereum Access Control Attacks Details
290 CoW Swap $180K ethereum Access Control Attacks Details Source
291 Web $179K — Rugpull Details Source
292 Helio Protocol $178K — Rugpull Details Source
293 Beluga $175K arbitrum Oracle Manipulation & Price Manipulation Details
294 SharedStake $175K ethereum Access Control Attacks Details Source
295 DarkProtocol $174K — Rugpull Details Source
296 Aspiring Cooperation Community $173K — Rugpull Details Source
297 ParaSpace $173K — Other Details Source
298 IPMB $172K — Rugpull Details Source
299 Trust Wallet $170K — Other Details Source
300 Nikhil Gopalani Wallet $170K — Phishing Attacks Details Source

Notes

Loss totals use parsed USD values only; unknown or unparseable losses are not guessed. Attack-class links are added only when the root cause is clear enough to map.

Full hack database Filter every tracked incident by chain, date, loss size, and technique. Attack class library Move from incident examples to exploit mechanics and review checklists. Largest crypto hacks Compare this year against the highest-loss incidents in the database.