Web3 Hacks in 2024

2024 incident records, sorted by known loss. The strongest mapped pattern is Access Control (96 rows); the largest tracked chain bucket is Ethereum ($983.1M).

Open full database

Incident records

Sorted by known reported loss first, then recency. Open the source before treating any summary as final.

Links
1 DMM Bitcoin $305M bitcoin Access Control Attacks Details Source
2 PlayDapp $290M ethereum Access Control Attacks Details Source
3 WazirX: India $235M ethereum Access Control Attacks Details Source
4 Chris Larsen $112M — Access Control Attacks Details Source
5 Munchables $62.5M blast Access Control Attacks Details Source
6 Radiant Capital $58.0M arbitrum, bsc Access Control Attacks Details Source 1Source 2Source 3Source 4
7 BitForex $56.0M — Rugpull Details Source
8 Phishing $55.0M — Phishing Attacks Details Source
9 BtcTurk $54.0M — Access Control Attacks Details Source
10 BingX $52.0M ethereum Access Control Attacks Details Source
11 Hedgey $44.7M arbitrum, ethereum Access Control Attacks Details Source
12 Penpie $27.0M ethereum Reentrancy Details Source
13 FixedFloat $26.1M bitcoin, ethereum Access Control Attacks Details Source
14 Indodax $25.2M ethereum, optimism, polygon Access Control Attacks Details Source
15 Thala Labs $25.0M aptos Other / Drained Liquidity Pool / Missing Input Validation Details Source 1Source 2
16 Lykke $22.4M bitcoin, ethereum Unauthorized Wallet Outflows Details Source 1Source 2
17 Gala Games $22.3M ethereum Access Control Attacks Details Source
18 DEXX $21.0M solana Private Key Leakage Details Source
19 Essence Finance $20.0M — Other Details Source 1Source 2Source 3Source 4
20 US Government Crypto Wallet $20.0M ethereum Unauthorized wallet transfers Details Source
21 UwU Lend $20.0M ethereum Flash Loan Attacks Details Source
22 Sonne Finance $20.0M optimism Arithmetic Overflow & Underflow Attacks Details Source
23 GAMEE $16.4M polygon Access Control Attacks Details Source
24 Curio $16.0M ethereum Access Control Attacks Details Source
25 Rain $14.8M bitcoin, ethereum, solana, xrp Unauthorized Wallet Outflows Details Source
26 Holograph $14.4M ethereum Access Control Attacks Details Source
27 M2 $13.7M bitcoin, ethereum, solana Access Control Attacks Details Source 1Source 2Source 3
28 Polter Finance $12.0M fantom Flash Loan Attacks Details Source
29 Ronin Bridge $12.0M ethereum Access Control Attacks Details Source
30 LiFi Finance $11.6M linea, metis, zksync era Access Control Attacks Details Source
31 PrismaLST $11.6M ethereum Access Control Attacks Details Source
32 Somesing $11.6M ethereum Access Control Attacks Details
33 Gifto $10.0M — Rugpull Details Source 1Source 2
34 Jeffrey Zirlin $9.7M — Access Control Attacks Details Source
35 DCF $9.0M — Other Details Source
36 WOOFi Swap $8.8M arbitrum Flash Loan Attacks Details Source
37 Bittensor $8.0M — Access Control Attacks Details Source
38 Rho Markets $7.6M scroll Oracle Manipulation & Price Manipulation Details Source
39 CoinsPaid $7.5M bsc, ethereum Hot Wallet Key Compromised Details
40 Velocore V2 $6.8M linea, zksync era Access Control Attacks Details Source
41 Casper Network $6.7M casper Access Control Attacks Details Source
42 Terra $6.5M terra2 Reentrancy Details Source 1Source 2Source 3Source 4
43 Seneca $6.5M arbitrum, ethereum Access Control Attacks Details Source
44 Abracadabra Money $6.4M ethereum Arithmetic Overflow & Underflow Attacks Details Source
45 Gamma Strategies $6.4M arbitrum Flash Loan Attacks Details Source
46 DeltaPrime $6.0M arbitrum Access Control Attacks Details Source
47 Remilia $6.0M ethereum Access Control Attacks Details Source 1Source 2
48 EigenLayer $5.7M ethereum Phishing Attacks Details
49 Truflation $5.2M — Access Control Attacks Details Source
50 BEAM $5.2M — Phishing Attacks Details Source
51 PolyNetwork $5.0M polynetwork Reentrancy Details Source
52 Loopring $5.0M loopring Access Control Attacks Details Source
53 Shezmu $4.9M ethereum Unprotected mint function Details Source
54 DeltaPrime $4.8M arbitrum, avalanche Debt Swap Exploit / Other / Missing Input Validation Details Source
55 Super Sushi Samurai $4.8M blast Infinite Mint and Dump / Infinite Mint Details Source
56 Tapioca DAO $4.7M arbitrum Access Control Attacks Details Source
57 DuelBits $4.6M ethereum Access Control Attacks Details Source
58 Metawin $4.4M ethereum, solana Access Control Attacks Details Source 1Source 2Source 3
59 Radiant Capital $4.3M arbitrum Arithmetic Overflow & Underflow Attacks Details Source
60 ALEX $4.3M stacks Access Control Attacks Details Source
61 AI Protocol $4.3M — Phishing Attacks Details Source 1Source 2
62 OnyxDAO $3.8M ethereum Flash Loan Attacks Details Source 1Source 2
63 Unknown User $3.7M — Phishing Attacks Details Source
64 UwU Lend $3.7M ethereum Flash Loan Attacks Details Source
65 Sportsbet.io $3.5M — Access Control Attacks Details Source 1Source 2
66 Shido $3.3M ethereum Access Control Attacks Details Source
67 Socket $3.3M ethereum Access Control Attacks Details Source
68 Gain $3.0M ethereum Infinite Mint Details
69 Banana Gun $3.0M ethereum Oracle Manipulation & Price Manipulation Details Source
70 FixedFloat $3.0M — Key Leaked via Infrastructure Details
71 NFPrompt $3.0M ethereum Access Control Attacks Details
72 SUNRAY·FINANCE $2.9M arbitrum Access Control Attacks Details Source
73 Hector Network $2.7M ethereum Access Control Attacks Details
74 Phishing $2.5M — Phishing Attacks Details Source
75 CoinStats $2.2M — Access Control Attacks Details Source
76 ETHTrustFund $2.1M base Transferred Treasury to Mixers / Treasury Misappropriation / Rugpull Details Source
77 Mozaic $2.1M arbitrum Access Control Attacks Details Source
78 Unizen $2.1M ethereum Access Control Attacks Details Source
79 Starlay Finance $2.1M acala Redeem Logic Flaw Details
80 GemPad $2.0M base, bsc, ethereum Reentrancy Details Source
81 $2M Coin Poker $2.0M ethereum Access Control Attacks Details Source
82 Bedrock $2.0M ethereum Phishing Attacks Details Source 1Source 2
83 pump.fun $2.0M solana Access Control Attacks Details Source
84 MangoFarmSol $2.0M solana Frontend Attack / Admin Drain / Rugpull Details Source
85 Dough Finance $2.0M ethereum Access Control Attacks Details Source
86 AARK (Aark Digital) $1.9M arbitrum Decimal Miscalculation Details
87 XBridge $1.9M bsc, ethereum Access Control Attacks Details Source 1Source 2
88 Dolomite $1.9M ethereum Access Control Attacks Details Source
89 Concentric $1.9M arbitrum Access Control Attacks Details Source
90 Nexera $1.8M ethereum Access Control Attacks Details Source
91 XT Exchange $1.7M ethereum Access Control Attacks Details Source
92 Grand Base $1.7M base Access Control Attacks Details Source
93 Goledo Finance $1.7M conflux Flash Loan Attacks Details Source
94 Pike V1 $1.6M arbitrum, ethereum, optimism Access Control Attacks Details Source
95 SAGA (Fake) $1.6M — Rugpull Details Source
96 Narwhal $1.6M — Other Details Source
97 Shoebill Finance $1.5M bob Oracle Manipulation & Price Manipulation Details
98 YOLO Games $1.5M blast Access Control Attacks Details Source
99 Minterest $1.5M mantle Flash Loan Attacks Details Source
100 CUT token $1.4M bsc Flash Loan Attacks Details Source

Notes

Loss totals use parsed USD values only; unknown or unparseable losses are not guessed. Attack-class links are added only when the root cause is clear enough to map.

Full hack database Filter every tracked incident by chain, date, loss size, and technique. Attack class library Move from incident examples to exploit mechanics and review checklists. Largest crypto hacks Compare this year against the highest-loss incidents in the database.