Web3 Hacks in 2023

2023 incident records, sorted by known loss. The strongest mapped pattern is Access Control (68 rows); the largest tracked chain bucket is Ethereum ($997.3M).

Open full database

Incident records

Sorted by known reported loss first, then recency. Open the source before treating any summary as final.

Links
501 Degen Millionares Club $17K — Access Control Attacks Details Source2
502 Venus Token $17K — Other Details
503 DAppSocial $16K ethereum Access Control Attacks Details
504 CFC $16K bsc Donation Attack Details
505 Dragonball $16K — Flash Loan Attacks Details Source
506 Ethereum Hive $16K — Other Details Source
507 Raichu Thunderstone $15K — Rugpull Details Source
508 DeriTrade $13K — Rugpull Details Source
509 Alexa $13K — Other Details Source2
510 MicDao $13K bsc Oracle Manipulation & Price Manipulation Details
511 XSD Token $12K — Flash Loan Attacks Details Source
512 OceanLifeToken $11K — Flash Loan Attacks Details Source
513 The Onigiri Neko $10K — Rugpull Details Source
514 Indexed Finance $10K ethereum Swap Logic Flaw Details
515 Fake DAI Token $10K — Other Details Source
516 Robinhood $8K bsc Phishing Attacks Details
517 EAC $6K bsc Oracle Manipulation & Price Manipulation Details
518 SpookySwap $5K fantom Frontend Compromise Details
519 Sheep $3K bsc Incorrect Share Accounting Details
520 Ethscriptions $3K ethereum Access Control Attacks Details
521 uniclyNFT $2K ethereum Reentrancy Details
522 GYM Network $1K bsc Access Control Attacks Details
523 Libertify $230 ethereum, polygon Reentrancy Details Source2
524 Fortress Trust — bitcoin, ethereum Third-party phishing and account takeover Details
525 MetaLabz — bsc Access Control Attacks Details
526 AlphaPo — ethereum, tron Access Control Attacks Details Source
527 Floating Point Group — — Cyber incident; initial access unknown Details
528 ElonDoge — binance Honeypot Details Source
529 ERC20 Permit — — Phishing Attacks Details Source2
530 Umami finance — — Other Details Source
531 Spark — ethereum Honeypot Details Source

Notes

Loss totals use parsed USD values only; unknown or unparseable losses are not guessed. Attack-class links are added only when the root cause is clear enough to map.

Full hack database Filter every tracked incident by chain, date, loss size, and technique. Attack class library Move from incident examples to exploit mechanics and review checklists. Largest crypto hacks Compare this year against the highest-loss incidents in the database.