Annual Hack Dataset

Web3 Hacks in 2024

2024 incident records, sorted by known loss. The strongest mapped pattern is Access Control (61 rows); the largest tracked chain bucket is Ethereum ($616.3M).

Open full database

Incident records

Sorted by known reported loss first, then recency. Open the source before treating any summary as final.

Links
1 DMM Bitcoin $305M bitcoin Access Control Attacks Details Source
2 WazirX: India $235M ethereum Access Control Attacks Details Source
3 Chris Larsen $112M — Access Control Attacks Details Source
4 Munchables $62.5M blast Access Control Attacks Details Source
5 Radiant Capital $58.0M — Access Control Attacks Details Source
6 BitForex $56.0M — Rugpull Details Source
7 Phishing $55.0M — Phishing Attacks Details Source
8 BtcTurk $54.0M — Access Control Attacks Details Source
9 Radiant V2 $53.0M arbitrum, bsc Access Control Attacks Details Source
10 BingX $52.0M ethereum Access Control Attacks Details Source
11 Hedgey $44.7M arbitrum, ethereum Flash Loans Attacks Details Source
12 PlayDapp $32.4M — Access Control Attacks Details Source
13 Penpie $27.0M ethereum Reentrancy Details Source
14 Fixed Float $26.1M — Access Control Attacks Details Source
15 FixedFloat $26.1M bitcoin, ethereum Access Control Attacks Details Source
16 ThalaSwap $25.5M aptos Drained Liquidity Pool Details Source
17 Indodax $25.2M ethereum, optimism, polygon Access Control Attacks Details Source
18 Thala Labs $25.0M — Other Details Source
19 Gala Games $22.3M — Access Control Attacks Details Source
20 Lykke $22.0M — Other Details Source
21 Gala $22.0M ethereum Infinite Mint and Dump Details Source
22 DEXX $21.0M solana Access Control Attacks Details Source
23 Essence Finance $20.0M — Other Details Source
24 US Government Crypto Wallet $20.0M ethereum Unclassified Details Source
25 UwU Lend $20.0M ethereum Flash Loans Attacks Details Source
26 Sonne Finance $20.0M optimism Flash Loans Attacks Details Source
27 Sonne $20.0M — Other Details Source
28 GAMEE $16.4M — Access Control Attacks Details Source
29 Curio $16.0M ethereum Dao Governance Attacks Details Source
30 Rain $14.8M bitcoin, ethereum, solana, xrp Other Details Source
31 Holograph $14.4M ethereum Infinite Mint and Dump / Other Details Source
32 M2 $13.7M — Access Control Attacks Details Source
33 M2 Exchange $13.7M bitcoin, ethereum, solana Access Control Attacks Details Source
34 Massive Phishing $12.9M — Phishing Attacks Details Source
35 Polter Finance $12.0M fantom Flash Loans Attacks Details Source
36 Ronin $12.0M — Access Control Attacks Details Source
37 Ronin Bridge $12.0M ethereum Frontrunning & Sandwich Attacks Details Source
38 PrismaLST $11.6M ethereum Flash Loans Attacks Details Source
39 Gifto $10.0M — Rugpull Details Source
40 LiFi Finance $9.7M linea, metis, zksync era Router Exploit via Infinite Approvals Details Source
41 Jeffrey Zirlin $9.7M — Access Control Attacks Details Source
42 DCF $9.0M — Other Details Source
43 WOOFi Swap $8.5M arbitrum Flash Loans Attacks Details Source
44 LI.FI $8.0M — Other Details Source
45 Bittensor $8.0M — Access Control Attacks Details Source
46 Rho Markets $7.6M scroll Oracle Manipulation & Price Manipulation Details Source
47 Velocore V2 $6.8M linea, zksync era Arithmetic Overflows Underflows Details Source
48 Terra $6.5M — Other Details Source
49 Seneca $6.5M arbitrum, ethereum Access Control Attacks Details Source
50 Abracadabra Spell $6.5M ethereum Borrow Logic Exploit Details Source
51 Abracadabra Money $6.4M — Other Details Source
52 Gamma Strategies $6.4M — Flash Loans Attacks Details Source
53 DeltaPrime $6.0M arbitrum Access Control Attacks Details Source
54 BEAM $5.2M — Phishing Attacks Details Source
55 Truflation $5.0M — Access Control Attacks Details Source
56 Truflation $5.0M — Access Control Attacks Details Source
57 PolyNetwork $5.0M polynetwork Reentrancy Details Source
58 Terra 2.0 $5.0M terra2 IBC hooks exploit Details Source
59 Loopring $5.0M loopring Access Control Attacks Details Source
60 Shezmu $4.9M — Other Details Source
61 OcelotDex $4.9M ethereum Infinite Mint and Dump Details Source
62 DeltaPrime $4.8M arbitrum, avalanche Debt Swap Exploit / Other Details Source
63 Super Sushi Samurai $4.8M blast Infinite Mint and Dump Details Source
64 Tapioca DAO $4.7M arbitrum Access Control Attacks Details Source
65 DuelBits $4.6M ethereum Access Control Attacks Details Source
66 Gamma $4.5M arbitrum Oracle Manipulation & Price Manipulation Details Source
67 Radiant V2 $4.5M arbitrum Flash Loans Attacks Details Source
68 $ALI, $PUSH Tokens Phishing $4.4M — Phishing Attacks Details Source
69 Radiant Capital $4.3M — Flash Loans Attacks Details Source
70 ALEX $4.3M stacks Access Control Attacks Details Source
71 AI Protocol $4.3M — Phishing Attacks Details Source
72 Metawin $4.0M — Access Control Attacks Details Source
73 Onyx V2 $4.0M ethereum Liquidation Logic Exploit Details Source
74 OnyxDAO $3.8M — Flash Loans Attacks Details Source
75 Unknown User $3.7M — Phishing Attacks Details Source
76 UwU Lend $3.7M ethereum Flash Loans Attacks Details Source
77 Sportsbet.io $3.5M — Access Control Attacks Details Source
78 Shido $3.3M ethereum Access Control Attacks Details Source
79 Socket $3.3M — Other Details Source
80 Bungee $3.3M ethereum Missing Input Validation Details Source
81 Banana Gun $3.0M ethereum Front-end vulnerability / Other Details Source
82 Remilia $3.0M — Access Control Attacks Details Source
83 Sunray $2.9M — Access Control Attacks Details Source
84 SUNRAY·FINANCE $2.9M arbitrum Access Control Attacks Details Source
85 Phishing $2.5M — Phishing Attacks Details Source
86 ETHTrustFund $2.2M — Rugpull Details Source
87 CoinStats $2.2M — Access Control Attacks Details Source
88 ETHTrustFund $2.1M base Transferred Treasury to Mixers Details Source
89 Mozaic $2.1M — Access Control Attacks Details Source
90 Unizen $2.1M ethereum Delegatecall & Call Injection Attacks Details Source
91 GemPad $2.0M base, bsc, ethereum Reentrancy Details Source
92 $2M Coin Poker $2.0M — Access Control Attacks Details Source
93 Bedrock $2.0M — Other Details Source
94 CoinStats $2.0M — Phishing Attacks Details Source
95 pump.fun $2.0M solana Access Control Attacks Details Source
96 MangoFarmSol $2.0M solana Frontend Attack Details Source
97 Dough Finance $2.0M ethereum Access Control Attacks Details Source
98 XBridge $1.9M bsc, ethereum Access Control Attacks Details Source
99 Dolomite $1.9M ethereum Access Control Attacks Details Source
100 Nexera $1.8M ethereum Access Control Attacks Details Source
101 Concentric $1.7M arbitrum Access Control Attacks Details Source
102 XT Exchange $1.7M ethereum Access Control Attacks Details Source
103 uniBTC $1.7M ethereum Minting Logic Exploit Details Source
104 Grand Base $1.7M base Access Control Attacks Details Source
105 Goledo Finance $1.7M — Flash Loans Attacks Details Source
106 Pike Finance $1.6M — Other Details Source
107 Pike V1 $1.6M arbitrum, ethereum, optimism Storage Misalignment Exploit Details Source
108 SAGA (Fake) $1.6M — Rugpull Details Source
109 Narwhal $1.6M — Other Details Source
110 YOLO Games $1.5M blast Access Control Attacks Details Source
111 Minterest $1.5M mantle Reentrancy Details Source
112 CUT token $1.4M — Flash Loans Attacks Details Source
113 Pendle $1.4M — Phishing Attacks Details Source
114 Wilder $1.4M — Access Control Attacks Details Source
115 Solareum $1.4M solana Phishing Attacks Details
116 OrdiZK $1.4M — Rugpull Details Source
117 BlueBerry $1.4M ethereum Flash Loans Attacks Details Source
118 Blueberry Protocol Foundation $1.3M — Other Details Source
119 Monoswap $1.3M blast Access Control Attacks Details Source
120 MonoSwap $1.3M — Access Control Attacks Details Source
121 RiskOnBlast $1.3M blast Rugpull Details Source
122 MangoFarmSOL $1.3M — Rugpull Details Source
123 GeniusAI $1.3M ethereum, fantom Access Control Attacks Details Source
124 Vow $1.2M — Other Details Source
125 Genius Token $1.2M — Other Details Source
126 DeltaPrime $1.0M arbitrum Unclassified Details Source
127 Orion $994K — Other Details Source
128 FEG (Feed Every Gorilla) $900K — Other Details Source
129 Fegex $900K base, bsc, ethereum Access Control Attacks Details Source
130 Condom $900K — Rugpull Details Source
131 Aragon DAO $800K — Phishing Attacks Details Source
132 1inch $720K avalanche Access Control Attacks Details Source
133 Chainge Finance $716K — Other Details Source
134 Humanized_AI $665K — Rugpull Details Source
135 Bloom $600K — Other Details Source
136 Xai $581K — Rugpull Details Source
137 CryptoBottle $527K — Other Details Source
138 Solareum $523K — Other Details Source
139 Clober $500K — Reentrancy Details Source
140 Clober Liquidity Vault $500K base Reentrancy Details Source
141 Vestra DAO $500K ethereum Staking Logic Exploit / Other Details Source
142 Fake PIToken $490K — Rugpull Details Source
143 MINER $467K — Other Details Source
144 Predy finance $464K — Other Details Source
145 Wise Lending V1 $464K ethereum Rounding Donation Attack / Other Details Source
146 Clipper $450K base, optimism API Signature Exploit Details Source
147 vETH $450K — Other Details Source
148 URF $450K — Rugpull Details Source
149 Farcana $440K — Access Control Attacks Details Source
150 AirDAO $440K — Access Control Attacks Details Source
151 DCT Token $428K — Flash Loans Attacks Details Source
152 Fake EigenLayer $405K — Rugpull Details Source
153 Fake Polyhedra Network $400K — Rugpull Details Source
154 Fake ether.fi $354K — Rugpull Details Source
155 Kalax $350K blast Drain Vaults Details Source
156 Sumer.Money $350K — Flash Loans Attacks Details Source
157 Lava $340K arbitrum Flash Loans Attacks Details Source
158 Galaxy Fox $330K — Other Details Source
159 MoonHacker $320K — Flash Loans Attacks Details Source
160 LongNoseDog $310K — Rugpull Details Source
161 Pike Finance $300K — Other Details Source
162 Lucky Star $297K — Access Control Attacks Details Source
163 Fake SCROLL $290K — Rugpull Details Source
164 Fake Ethena Labs $290K — Rugpull Details Source
165 xPet $257K — Other Details Source
166 FA $255K — Rugpull Details Source
167 LeadBlock's Morpho Blue Market $250K ethereum Oracle Manipulation & Price Manipulation Details Source
168 Lifeform (fake) $250K — Rugpull Details Source
169 Tectonic $250K cronos Flash Loans Attacks Details Source
170 Ore $243K — Rugpull Details Source
171 NEVER $240K — Rugpull Details Source
172 OpenLeverage $236K — Other Details Source
173 Bankroll $230K — Flash Loans Attacks Details Source
174 Empower AI $230K — Rugpull Details Source
175 ZongZi $230K — Flash Loans Attacks Details Source
176 JUICE $216K — Other Details Source
177 Convergence $210K ethereum Missing Input Validation / Other Details Source
178 Spectral Labs $200K ethereum Bonding Curve Exploit / Other Details Source
179 zkFinance $200K zksync era Oracle Manipulation & Price Manipulation Details Source
180 Not Found $200K — Rugpull Details Source
181 User $196K — Phishing Attacks Details Source
182 FENGSHOU Token $191K — Access Control Attacks Details Source
183 Yield Protocol $181K arbitrum Balance Disparity Exploit Details Source
184 Nebula Revelation $180K — Reentrancy Details Source
185 MetaDragonDao $180K — Other Details Source
186 DeezNutz_404 $174K — Flash Loans Attacks Details Source
187 TGBS $151K — Flash Loans Attacks Details Source
188 DegenFox $150K — Rugpull Details Source
189 Particle Trade $142K — Other Details Source
190 Lava $130K arbitrum Flash Loans Attacks Details Source
191 N/A $130K — Oracle Manipulation & Price Manipulation Details Source
192 Magpie Protocol $129K arbitrum, avalanche, base, blast, bsc, ethereum, optimism, polygon, polygon zkevm, zksync era Router Exploit Details Source
193 LABUBU $120K — Other Details Source
194 WXETA $110K bsc, ethereum Access Control Attacks Details Source
195 OSN Token $110K — Flash Loans Attacks Details Source
196 BasketDAO $107K — Other Details Source
197 Citadel Finance $97K — Flash Loans Attacks Details Source
198 Ramses $93K — Other Details Source
199 BTC24H $86K polygon Access Control Attacks Details Source
200 HGM, AGSC $75K — Phishing Attacks Details Source
201 NovaMind $70K — Rugpull Details Source
202 Karastar $69K — Access Control Attacks Details Source
203 Saga DAO $60K — Access Control Attacks Details Source
204 Aave $56K — Other Details Source
205 Smart Bank Token $56K — Flash Loans Attacks Details Source
206 GAME $50K — Reentrancy Details Source
207 User $48K — Phishing Attacks Details Source
208 Rose Finance $45K — Flash Loans Attacks Details Source
209 DualPools $41K — Flash Loans Attacks Details Source
210 Vista Finance $29K — Flash Loans Attacks Details Source
211 YYS $29K — Flash Loans Attacks Details Source
212 Fire Token $24K — Other Details Source
213 WINR $15K — Other Details Source
214 OKX NFT Aggregator $14K bsc Access Control Attacks Details Source
215 JohnLennonC0IN $11K — Rugpull Details Source
216 BTB Token $5K — Flash Loans Attacks Details Source
217 Tectonic — cronos Oracle Manipulation & Price Manipulation Details Source
218 Ambient — ethereum Domain Hijack Details Source
219 Rivus DAO — ethereum Third-party Dev Backdoor Exploit Details Source
220 DeFi Fake Tokens — — Other Details

Notes

Loss totals use parsed USD values only; unknown or unparseable losses are not guessed. Attack-class links are added only when the root cause is clear enough to map.

Full hack database Filter every tracked incident by chain, date, loss size, and technique. Attack class library Move from incident examples to exploit mechanics and review checklists. Largest crypto hacks Compare this year against the highest-loss incidents in the database.