Web3 Hacks in 2024

2024 incident records, sorted by known loss. The strongest mapped pattern is Access Control (95 rows); the largest tracked chain bucket is Ethereum ($959.6M).

Open full database

Incident records

Sorted by known reported loss first, then recency. Open the source before treating any summary as final.

Links
101 Wilder $1.8M — Access Control Attacks Details Source
102 OrdiZK $1.4M — Rugpull Details Source
103 BlueBerry $1.3M ethereum Flash Loan Attacks Details Source
104 MonoSwap $1.3M blast Access Control Attacks Details Source
105 RiskOnBlast $1.3M blast Rugpull / Exit Scam Details Source
106 Genius Token $1.3M ethereum, fantom Access Control Attacks Details Source
107 Vow $1.2M ethereum Access Control Attacks Details Source
108 Holograph $1.2M ethereum Access Control Attacks Details Source
109 BasketDAO $1.2M ethereum Access Control Attacks Details Source
110 Fegex $1.1M base, bsc, ethereum Access Control Attacks Details Source
111 AirDAO $1.1M ethereum Access Control Attacks Details Source
112 Base Lending $1.0M base Deposit Logic Flaw Details
113 DeltaPrime $1.0M arbitrum Access Control Attacks Details Source
114 Zest $1.0M stacks Oracle Manipulation & Price Manipulation Details
115 FEG (Feed Every Gorilla) $900K — Other Details Source
116 Condom $900K — Rugpull Details Source
117 NORMIE $882K base Unknown Details
118 Aragon DAO $800K — Phishing Attacks Details Source
119 Polyhedra Network $760K bsc Access Control Attacks Details
120 MOBOX $750K optimism Borrow Logic Flaw Details
121 1inch $723K avalanche Access Control Attacks Details Source
122 Chainge Finance $716K bsc Access Control Attacks Details Source2
123 ReHold $700K ethereum Admin Drain Details
124 Humanized_AI $665K — Rugpull Details Source
125 Orion $645K bsc Access Control Attacks Details Source
126 Blastoff $600K blast Unknown Details
127 Serenity Shield $586K ethereum Phishing Attacks Details
128 Xai $581K — Rugpull Details Source
129 Bloom $540K blast Other / Unknown Details Source23
130 CryptoBottle $527K — Other Details Source
131 UtopiaSphere $521K bsc Oracle Manipulation & Price Manipulation Details
132 Clober $500K base Reentrancy Details Source
133 Vestra DAO $500K ethereum Staking Logic Exploit / Other / Staking Logic Flaw Details Source
134 Cryptobottle $490K polygon Oracle Manipulation & Price Manipulation Details
135 Fake PIToken $490K — Rugpull Details Source
136 MINER $466K ethereum Other / Missing Input Validation Details Source
137 Predy finance $464K arbitrum Access Control Attacks Details Source
138 Wise Lending V1 $464K ethereum Rounding Donation Attack / Other / Donation Attack Details Source
139 Clipper $450K base, optimism API Signature Exploit / Deposit Logic Flaw Details Source
140 BGM $450K bsc Oracle Manipulation & Price Manipulation Details
141 URF $450K — Rugpull Details Source
142 Nexera $449K ethereum Access Control Attacks Details Source
143 vETH $447K ethereum Oracle Manipulation & Price Manipulation Details Source2
144 Farcana $440K — Access Control Attacks Details Source
145 DCT Token $428K — Flash Loan Attacks Details Source2
146 Tsuru $410K base Unknown Details
147 Fake EigenLayer $405K — Rugpull Details Source
148 Fake Polyhedra Network $400K — Rugpull Details Source
149 Fake ether.fi $354K — Rugpull Details Source
150 Kalax $350K blast Drain Vaults / Admin Drain Details Source
151 Sumer.Money $350K base Flash Loan Attacks Details Source
152 Lava $340K arbitrum Flash Loan Attacks Details Source
153 Galaxy Fox $330K ethereum Access Control Attacks Details Source
154 LongNoseDog $310K — Rugpull Details Source
155 Pike Finance $300K — Other Details Source2
156 ParaSwap $300K ethereum Access Control Attacks Details
157 Lucky Star $297K — Access Control Attacks Details Source
158 Fake SCROLL $290K — Rugpull Details Source
159 Fake Ethena Labs $290K — Rugpull Details Source
160 TLN Protocol $280K bsc Unknown Details
161 xPet $257K — Other Details Source
162 FA $255K — Rugpull Details Source
163 Spectral Labs $250K ethereum Access Control Attacks Details Source
164 LeadBlock's Morpho Blue Market $250K ethereum Oracle Manipulation & Price Manipulation Details Source
165 Lifeform (fake) $250K — Rugpull Details Source
166 Tectonic $250K cronos Flash Loan Attacks Details Source
167 Ore $243K — Rugpull Details Source
168 HarryPotterObamaSonic10Inu $243K ethereum Oracle Manipulation & Price Manipulation Details
169 NEVER $240K — Rugpull Details Source
170 OpenLeverage $236K bsc Other / Unknown Details Source
171 Bankroll $235K bsc Flash Loan Attacks Details Source2
172 Empower AI $230K — Rugpull Details Source
173 ZongZi $229K bsc Flash Loan Attacks Details Source
174 Convergence $210K ethereum Missing Input Validation / Other Details Source
175 zkFinance $200K zksync era Oracle Manipulation & Price Manipulation Details Source
176 DefiPlaza $200K ethereum Swap Logic Flaw Details
177 Not Found $200K — Rugpull Details Source
178 User $196K — Phishing Attacks Details Source
179 FENGSHOU Token $191K bsc Access Control Attacks Details Source
180 iVest $190K bsc Unknown Details
181 MetaDragonDao $181K bsc Access Control Attacks Details Source
182 Yield Protocol $181K arbitrum Balance Disparity Exploit / Incorrect Share Accounting Details Source
183 Nebula Revelation $180K optimism Reentrancy Details Source
184 DeezNutz_404 $170K ethereum Flash Loan Attacks Details Source
185 MAAT Protocol $168K binance Withdrawal Logic Flaw Details
186 TGBS $151K — Pool-burn price manipulation Details Source
187 YIEDL $150K bsc Missing Input Validation Details
188 DegenFox $150K — Rugpull Details Source
189 Particle Trade $140K ethereum Other / Missing Input Validation Details Source
190 Z123 $136K bsc Oracle Manipulation & Price Manipulation Details
191 Perpy $132K arbitrum Access Control Attacks Details
192 BUBAI $131K ethereum Liquidity Rug Details
193 Lava $130K arbitrum Flash Loan Attacks Details Source
194 Barley Finance $130K ethereum Infinite Mint Details
195 Magpie Protocol $129K arbitrum, avalanche, base +7 Router Exploit / Missing Input Validation Details Source
196 Swarm Markets $120K ethereum Access Control Attacks Details
197 YON $118K bsc Access Control Attacks Details
198 AutoChain Global $113K bsc Unknown Details
199 WXETA $110K bsc, ethereum Access Control Attacks Details Source
200 OSN Token $110K — Flash Loan Attacks Details Source

Notes

Loss totals use parsed USD values only; unknown or unparseable losses are not guessed. Attack-class links are added only when the root cause is clear enough to map.

Full hack database Filter every tracked incident by chain, date, loss size, and technique. Attack class library Move from incident examples to exploit mechanics and review checklists. Largest crypto hacks Compare this year against the highest-loss incidents in the database.