Web3 Hacks in 2024

2024 incident records, sorted by known loss. The strongest mapped pattern is Access Control (102 rows); the largest tracked chain bucket is Ethereum ($984.2M).

Open full database

Incident records

Sorted by known reported loss first, then recency. Open the source before treating any summary as final.

Links
1 DMM Bitcoin $305M bitcoin Access Control Attacks Details Source
2 PlayDapp $290M ethereum Access Control Attacks Details Source
3 WazirX: India $235M ethereum Access Control Attacks Details Source
4 Chris Larsen $112M — Access Control Attacks Details Source
5 Munchables $62.5M blast Access Control Attacks Details Source
6 Radiant Capital $58.0M — Access Control Attacks Details Source
7 BitForex $56.0M — Rugpull Details Source
8 Phishing $55.0M — Phishing Attacks Details Source
9 BtcTurk $54.0M — Access Control Attacks Details Source
10 Radiant V2 $53.0M arbitrum, bsc Access Control Attacks Details Source
11 BingX $52.0M ethereum Access Control Attacks Details Source
12 Hedgey $44.7M arbitrum, ethereum Access Control Attacks Details Source
13 Penpie $27.0M ethereum Reentrancy Details Source
14 FixedFloat $26.1M bitcoin, ethereum Access Control Attacks Details Source
15 ThalaSwap $25.5M aptos Drained Liquidity Pool / Missing Input Validation Details Source
16 Indodax $25.2M ethereum, optimism, polygon Access Control Attacks Details Source
17 Thala Labs $25.0M — Other Details Source
18 Lykke $22.4M bitcoin, ethereum Other / Hot Wallet Key Compromised Details Source
19 Gala Games $22.3M — Access Control Attacks Details Source
20 Gala $22.3M ethereum Access Control Attacks Details Source
21 DEXX $21.0M solana Access Control Attacks Details Source
22 Essence Finance $20.0M — Other Details Source
23 US Government Crypto Wallet $20.0M ethereum Access Control Attacks Details Source
24 UwU Lend $20.0M ethereum Flash Loan Attacks Details Source
25 Sonne Finance $20.0M optimism Flash Loan Attacks Details Source
26 Sonne $20.0M — Arithmetic Overflow & Underflow Attacks Details Source
27 GAMEE $16.4M — Access Control Attacks Details Source
28 Curio $16.0M ethereum Access Control Attacks Details Source
29 Rain $14.8M bitcoin, ethereum, solana, xrp Access Control Attacks Details Source
30 Holograph $14.4M ethereum Access Control Attacks Details Source
31 M2 $13.7M — Access Control Attacks Details Source
32 M2 Exchange $13.7M bitcoin, ethereum, solana Access Control Attacks Details Source
33 Massive Phishing $12.9M — Phishing Attacks Details Source
34 Polter Finance $12.0M fantom Flash Loan Attacks Details Source
35 Ronin $12.0M — Access Control Attacks Details Source
36 Ronin Bridge $12.0M ethereum Access Control Attacks Details Source
37 PrismaLST $11.6M ethereum Access Control Attacks Details Source
38 Somesing $11.6M ethereum Unbacked Mint Details
39 Gifto $10.0M — Rugpull Details Source
40 LiFi Finance $9.7M linea, metis, zksync era Access Control Attacks Details Source
41 Jeffrey Zirlin $9.7M — Access Control Attacks Details Source
42 DCF $9.0M — Other Details Source
43 WOOFi Swap $8.8M arbitrum Flash Loan Attacks Details Source
44 LI.FI $8.0M — Delegatecall & Call Injection Attacks Details Source
45 Bittensor $8.0M — Access Control Attacks Details Source
46 Rho Markets $7.6M scroll Oracle Manipulation & Price Manipulation Details Source
47 CoinsPaid $7.5M bsc, ethereum Hot Wallet Key Compromised Details
48 Gamee $7.0M polygon Key Leaked via Infrastructure Details
49 Velocore V2 $6.8M linea, zksync era Access Control Attacks Details Source
50 Solrise Finance $6.7M casper Access Control Attacks Details
51 Terra $6.5M — Other Details Source
52 Seneca $6.5M arbitrum, ethereum Access Control Attacks Details Source
53 Abracadabra Spell $6.5M ethereum Arithmetic Overflow & Underflow Attacks Details Source
54 Abracadabra Money $6.4M — Arithmetic Overflow & Underflow Attacks Details Source
55 Gamma Strategies $6.4M — Flash Loan Attacks Details Source
56 Terra 2.0 $6.4M terra2 Reentrancy Details Source
57 DeltaPrime $6.0M arbitrum Access Control Attacks Details Source
58 Remilia $6.0M ethereum Access Control Attacks Details Source
59 EigenLayer $5.7M ethereum Phishing Attacks Details
60 Truflation $5.2M — Access Control Attacks Details Source
61 BEAM $5.2M — Phishing Attacks Details Source
62 Truflation $5.0M — Access Control Attacks Details Source
63 PolyNetwork $5.0M polynetwork Reentrancy Details Source
64 Loopring $5.0M loopring Access Control Attacks Details Source
65 Shezmu $4.9M — Other Details Source
66 OcelotDex $4.9M ethereum Infinite Mint and Dump / Infinite Mint Details Source
67 DeltaPrime $4.8M arbitrum, avalanche Debt Swap Exploit / Other / Missing Input Validation Details Source
68 Super Sushi Samurai $4.8M blast Infinite Mint and Dump / Infinite Mint Details Source
69 Tapioca DAO $4.7M arbitrum Access Control Attacks Details Source
70 DuelBits $4.6M ethereum Access Control Attacks Details Source
71 Gamma $4.5M arbitrum Oracle Manipulation & Price Manipulation Details Source
72 Radiant V2 $4.5M arbitrum Flash Loan Attacks Details Source
73 Metawin $4.4M ethereum, solana Access Control Attacks Details Source
74 $ALI, $PUSH Tokens Phishing $4.4M — Phishing Attacks Details Source
75 Radiant Capital $4.3M — Arithmetic Overflow & Underflow Attacks Details Source
76 ALEX $4.3M stacks Access Control Attacks Details Source
77 AI Protocol $4.3M — Phishing Attacks Details Source
78 Onyx V2 $4.0M ethereum Liquidation Logic Exploit / Liquidation Logic Flaw Details Source
79 OnyxDAO $3.8M — Flash Loan Attacks Details Source
80 Unknown User $3.7M — Phishing Attacks Details Source
81 UwU Lend $3.7M ethereum Flash Loan Attacks Details Source
82 Sportsbet.io $3.5M — Access Control Attacks Details Source
83 Shido $3.3M ethereum Access Control Attacks Details Source
84 Socket $3.3M — Other Details Source
85 Bungee $3.3M ethereum Access Control Attacks Details Source
86 Gain $3.0M ethereum Infinite Mint Details
87 Banana Gun $3.0M ethereum Front-end vulnerability / Other / Frontend Compromise Details Source
88 FixedFloat $3.0M — Key Leaked via Infrastructure Details
89 NFPrompt $3.0M ethereum Access Control Attacks Details
90 SUNRAY·FINANCE $2.9M arbitrum Access Control Attacks Details Source
91 Hector Network $2.7M ethereum Access Control Attacks Details
92 Phishing $2.5M — Phishing Attacks Details Source
93 ETHTrustFund $2.2M — Rugpull Details Source
94 CoinStats $2.2M — Access Control Attacks Details Source
95 ETHTrustFund $2.1M base Transferred Treasury to Mixers / Treasury Misappropriation Details Source
96 Mozaic $2.1M arbitrum Access Control Attacks Details Source
97 Unizen $2.1M ethereum Access Control Attacks Details Source
98 Starlay Finance $2.1M acala Redeem Logic Flaw Details
99 GemPad $2.0M base, bsc, ethereum Reentrancy Details Source
100 $2M Coin Poker $2.0M — Access Control Attacks Details Source
101 CoinPoker $2.0M ethereum Hot Wallet Key Compromised Details
102 Bedrock $2.0M — Other Details Source
103 uniBTC $2.0M ethereum Phishing Attacks Details Source
104 CoinStats $2.0M — Phishing Attacks Details Source
105 pump.fun $2.0M solana Access Control Attacks Details Source
106 MangoFarmSol $2.0M solana Frontend Attack / Admin Drain Details Source
107 Dough Finance $2.0M ethereum Access Control Attacks Details Source
108 AARK (Aark Digital) $1.9M arbitrum Decimal Miscalculation Details
109 XBridge $1.9M bsc, ethereum Access Control Attacks Details Source
110 Dolomite $1.9M ethereum Access Control Attacks Details Source
111 Nexera $1.8M ethereum Access Control Attacks Details Source
112 Concentric $1.7M arbitrum Access Control Attacks Details Source
113 XT Exchange $1.7M ethereum Access Control Attacks Details Source
114 Grand Base $1.7M base Access Control Attacks Details Source
115 Goledo Finance $1.7M conflux Flash Loan Attacks Details Source
116 Pike V1 $1.6M arbitrum, ethereum, optimism Access Control Attacks Details Source
117 SAGA (Fake) $1.6M — Rugpull Details Source
118 Narwhal $1.6M — Other Details Source
119 Shoebill Finance $1.5M bob Oracle Manipulation & Price Manipulation Details
120 YOLO Games $1.5M blast Access Control Attacks Details Source
121 Minterest $1.5M mantle Flash Loan Attacks Details Source
122 Caterpillar Coin $1.4M bsc Oracle Manipulation & Price Manipulation Details
123 CUT token $1.4M — Flash Loan Attacks Details Source
124 Pendle $1.4M — Phishing Attacks Details Source
125 Wilder $1.4M — Access Control Attacks Details Source
126 Solareum $1.4M solana Phishing Attacks Details
127 OrdiZK $1.4M — Rugpull Details Source
128 BlueBerry $1.4M ethereum Flash Loan Attacks Details Source
129 Blueberry Protocol Foundation $1.3M — Other Details Source
130 Monoswap $1.3M blast Access Control Attacks Details Source
131 MonoSwap $1.3M — Access Control Attacks Details Source
132 RiskOnBlast $1.3M blast Rugpull / Exit Scam Details Source
133 MangoFarmSOL $1.3M — Rugpull Details Source
134 GeniusAI $1.3M ethereum, fantom Access Control Attacks Details Source
135 Vowcurrency $1.2M ethereum Access Control Attacks Details
136 Vow $1.2M — Other Details Source
137 Genius Token $1.2M — Other Details Source
138 BasketDAO $1.2M ethereum Access Control Attacks Details Source
139 Fegex $1.1M base, bsc, ethereum Access Control Attacks Details Source
140 AirDAO $1.1M ethereum Phishing Attacks Details
141 Base Lending $1.0M base Deposit Logic Flaw Details
142 DeltaPrime $1.0M arbitrum Access Control Attacks Details Source
143 Zest $1.0M stacks Oracle Manipulation & Price Manipulation Details
144 Orion $994K — Other Details Source
145 FEG (Feed Every Gorilla) $900K — Other Details Source
146 Condom $900K — Rugpull Details Source
147 NORMIE $882K base Unknown Details
148 Aragon DAO $800K — Phishing Attacks Details Source
149 Polyhedra Network $760K bsc Access Control Attacks Details
150 MOBOX $750K optimism Borrow Logic Flaw Details
151 1inch $723K avalanche Access Control Attacks Details Source
152 Chainge Finance $716K bsc Access Control Attacks Details Source
153 ReHold $700K ethereum Admin Drain Details
154 Humanized_AI $665K — Rugpull Details Source
155 Orion Protocol $645K bsc Access Control Attacks Details
156 Bloom $600K blast Other / Unknown Details Source
157 Blastoff $600K blast Unknown Details
158 Serenity Shield $586K ethereum Phishing Attacks Details
159 Xai $581K — Rugpull Details Source
160 CryptoBottle $527K — Other Details Source
161 Solareum $523K — Other Details Source
162 UtopiaSphere $521K bsc Oracle Manipulation & Price Manipulation Details
163 Clober $500K — Reentrancy Details Source
164 Clober Liquidity Vault $500K base Reentrancy Details Source
165 Vestra DAO $500K ethereum Staking Logic Exploit / Other / Staking Logic Flaw Details Source
166 Cryptobottle $490K polygon Oracle Manipulation & Price Manipulation Details
167 Fake PIToken $490K — Rugpull Details Source
168 Swarm Markets $473K ethereum Access Control Attacks Details
169 MINER $467K ethereum Other / Missing Input Validation Details Source
170 Predy finance $464K arbitrum Access Control Attacks Details Source
171 Wise Lending V1 $464K ethereum Rounding Donation Attack / Other / Donation Attack Details Source
172 Clipper $450K base, optimism API Signature Exploit / Deposit Logic Flaw Details Source
173 vETH $450K ethereum Oracle Manipulation & Price Manipulation Details Source
174 BGM $450K bsc Oracle Manipulation & Price Manipulation Details
175 URF $450K — Rugpull Details Source
176 Farcana $440K — Access Control Attacks Details Source
177 AirDAO $440K — Access Control Attacks Details Source
178 DCT Token $428K — Flash Loan Attacks Details Source
179 Tsuru $410K base Unknown Details
180 Fake EigenLayer $405K — Rugpull Details Source
181 Fake Polyhedra Network $400K — Rugpull Details Source
182 Fake ether.fi $354K — Rugpull Details Source
183 Kalax $350K blast Drain Vaults / Admin Drain Details Source
184 Sumer.Money $350K base Flash Loan Attacks Details Source
185 Lava $340K arbitrum Flash Loan Attacks Details Source
186 Galaxy Fox $330K ethereum Access Control Attacks Details Source
187 MoonHacker $320K — Flash Loan Attacks Details Source
188 LongNoseDog $310K — Rugpull Details Source
189 Pike Finance $300K — Other Details Source
190 ParaSwap $300K ethereum Access Control Attacks Details
191 Lucky Star $297K — Access Control Attacks Details Source
192 Fake SCROLL $290K — Rugpull Details Source
193 Fake Ethena Labs $290K — Rugpull Details Source
194 TLN Protocol $280K bsc Unknown Details
195 xPet $257K — Other Details Source
196 FA $255K — Rugpull Details Source
197 Spectral Labs $250K ethereum Access Control Attacks Details Source
198 LeadBlock's Morpho Blue Market $250K ethereum Oracle Manipulation & Price Manipulation Details Source
199 Lifeform (fake) $250K — Rugpull Details Source
200 Tectonic $250K cronos Flash Loan Attacks Details Source
201 Ore $243K — Rugpull Details Source
202 HarryPotterObamaSonic10Inu $243K ethereum Oracle Manipulation & Price Manipulation Details
203 NEVER $240K — Rugpull Details Source
204 OpenLeverage $236K bsc Other / Unknown Details Source
205 Bankroll $235K bsc Flash Loan Attacks Details Source
206 Empower AI $230K — Rugpull Details Source
207 ZongZi $230K bsc Flash Loan Attacks Details Source
208 JUICE $216K — Other Details Source
209 Convergence $210K ethereum Missing Input Validation / Other Details Source
210 zkFinance $200K zksync era Oracle Manipulation & Price Manipulation Details Source
211 DefiPlaza $200K ethereum Swap Logic Flaw Details
212 Not Found $200K — Rugpull Details Source
213 User $196K — Phishing Attacks Details Source
214 FENGSHOU Token $191K bsc Access Control Attacks Details Source
215 iVest $190K bsc Unknown Details
216 MetaDragonDao $181K bsc Other / Improper Access Control Details Source
217 Yield Protocol $181K arbitrum Balance Disparity Exploit / Incorrect Share Accounting Details Source
218 Nebula Revelation $180K optimism Reentrancy Details Source
219 DeezNutz_404 $174K ethereum Flash Loan Attacks Details Source
220 MAAT Protocol $168K binance Withdrawal Logic Flaw Details
221 TGBS $151K — Flash Loan Attacks Details Source
222 YIEDL $150K bsc Missing Input Validation Details
223 DegenFox $150K — Rugpull Details Source
224 Particle Trade $142K ethereum Other / Missing Input Validation Details Source
225 Z123 $136K bsc Oracle Manipulation & Price Manipulation Details
226 Perpy $132K arbitrum Access Control Attacks Details
227 BUBAI $131K ethereum Liquidity Rug Details
228 Lava $130K arbitrum Flash Loan Attacks Details Source
229 N/A $130K — Oracle Manipulation & Price Manipulation Details Source
230 Barley Finance $130K ethereum Infinite Mint Details
231 Magpie Protocol $129K arbitrum, avalanche, base, blast, bsc, ethereum, optimism, polygon, polygon zkevm, zksync era Router Exploit / Missing Input Validation Details Source
232 LABUBU $120K — Other Details Source
233 YON $118K bsc Access Control Attacks Details
234 AutoChain Global $113K bsc Unknown Details
235 WXETA $110K bsc, ethereum Access Control Attacks Details Source
236 OSN Token $110K — Flash Loan Attacks Details Source
237 TonUP $108K ton Reward Logic Flaw Details
238 SteamSwap $105K bsc Oracle Manipulation & Price Manipulation Details
239 BYC Token $100K binance Incorrect Fee Accounting Details
240 OPSEC $100K ethereum Access Control Attacks Details
241 LayerSwap $100K ethereum DNS Hijack Details
242 Citadel Finance $97K — Flash Loan Attacks Details Source
243 Ramses $93K arbitrum Other / Reward Logic Flaw Details Source
244 Citadel.one $93K arbitrum Access Control Attacks Details
245 Affine Protocol $88K ethereum Missing Input Validation Details
246 SQUID $87K bsc Swap Logic Flaw Details
247 BTC24H $86K polygon Access Control Attacks Details Source
248 xBlast $84K ethereum Hot Wallet Key Compromised Details
249 Matez $80K bsc Arithmetic Error Details
250 HGM, AGSC $75K — Phishing Attacks Details Source
251 Spectra Finance $73K ethereum Access Control Attacks Details
252 NovaMind $70K — Rugpull Details Source
253 Karastar $69K — Access Control Attacks Details Source
254 MainnetSettler $66K ethereum Access Control Attacks Details
255 Saga DAO $66K solana Access Control Attacks Details Source
256 CoW $59K ethereum Access Control Attacks Details
257 MintRisesPrices $59K bsc Reentrancy Details
258 Aave $56K ethereum Access Control Attacks Details Source
259 Smart Bank Token $56K — Flash Loan Attacks Details Source
260 Juice Finance $54K ethereum Reward Logic Flaw Details
261 Pythia $53K ethereum Reentrancy Details
262 GAME $50K — Reentrancy Details Source
263 User $48K — Phishing Attacks Details Source
264 Rose Finance $45K — Flash Loan Attacks Details Source
265 DualPools $41K bsc Flash Loan Attacks Details Source
266 ZoomerCoin $41K ethereum Flash Loan Attacks Details
267 EXcommunity $37K bsc Unknown Details
268 JokInTheBox $34K ethereum Withdrawal Logic Flaw Details
269 MFT $34K bsc Unknown Details
270 GPU $32K bsc Arithmetic Error Details
271 APEMAGA $32K ethereum Unknown Details
272 AK1111 $32K bsc Access Control Attacks Details
273 dYdX V3 $31K ethereum DNS Hijack Details
274 Omnipus $30K ethereum Missing Input Validation Details
275 Vista Finance $29K bsc Flash Loan Attacks Details Source
276 YYS $29K — Flash Loan Attacks Details Source
277 OTSea $26K ethereum Reward Logic Flaw Details
278 Fire Token $24K ethereum Oracle Manipulation & Price Manipulation Details Source
279 Zenterest $21K ethereum Oracle Manipulation & Price Manipulation Details
280 BNBS $20K binance Reentrancy Details
281 ChiSale $16K ethereum Unknown Details
282 MixedSwapRouter $16K arbitrum Access Control Attacks Details
283 Bizness $16K base Reentrancy Details
284 WINR $15K — Other Details Source
285 Erc20transfer $15K ethereum Access Control Attacks Details
286 RPP $14K bsc Unknown Details
287 OKX NFT Aggregator $14K bsc Access Control Attacks Details Source
288 X319 $13K bsc Access Control Attacks Details
289 JHY Token $12K binance Incorrect Share Accounting Details
290 LABUBU Token $12K binance Donation Attack Details
291 JohnLennonC0IN $11K — Rugpull Details Source
292 NFTG $10K bsc Access Control Attacks Details
293 ALP $10K bsc Access Control Attacks Details
294 Saturn $9K bsc Oracle Manipulation & Price Manipulation Details
295 Proxy_b7e1 $8K bsc Unknown Details
296 VRug $8K ethereum Liquidity Rug Details
297 DOGGO $7K ethereum Withdrawal Logic Flaw Details
298 BTB Token $5K — Flash Loan Attacks Details Source
299 SlurpyCoin $3K binance Swap Logic Flaw Details
300 ETHFIN $1K bsc Access Control Attacks Details
301 Tectonic — cronos Oracle Manipulation & Price Manipulation Details Source
302 Ambient — ethereum Phishing Attacks Details Source
303 Rivus DAO — ethereum Third-party Dev Backdoor Exploit / Backdoor Contract Details Source
304 WIFCOIN — ethereum Unknown Details
305 Scroll Token — ethereum Arithmetic Error Details
306 BNBX — bsc Arithmetic Error Details
307 Rico — arbitrum Access Control Attacks Details
308 Sumer — base Reentrancy Details
309 BBT — ethereum Unknown Details
310 GHT — ethereum Unknown Details
311 Smoofs — polygon Reentrancy Details
312 RuggedArt — ethereum Reentrancy Details
313 DeFi Fake Tokens — — Other Details

Notes

Loss totals use parsed USD values only; unknown or unparseable losses are not guessed. Attack-class links are added only when the root cause is clear enough to map.

Full hack database Filter every tracked incident by chain, date, loss size, and technique. Attack class library Move from incident examples to exploit mechanics and review checklists. Largest crypto hacks Compare this year against the highest-loss incidents in the database.