Web3 Hacks in 2024

2024 incident records, sorted by known loss. The strongest mapped pattern is Access Control (99 rows); the largest tracked chain bucket is Ethereum ($983.4M).

Open full database

Incident records

Sorted by known reported loss first, then recency. Open the source before treating any summary as final.

Links
101 MangoFarmSol $2.0M solana Frontend Attack / Admin Drain Details Source
102 Dough Finance $2.0M ethereum Access Control Attacks Details Source
103 AARK (Aark Digital) $1.9M arbitrum Decimal Miscalculation Details
104 XBridge $1.9M bsc, ethereum Access Control Attacks Details Source
105 Dolomite $1.9M ethereum Access Control Attacks Details Source
106 Concentric $1.9M arbitrum Access Control Attacks Details Source
107 Nexera $1.8M ethereum Access Control Attacks Details Source
108 XT Exchange $1.7M ethereum Access Control Attacks Details Source
109 Grand Base $1.7M base Access Control Attacks Details Source
110 Goledo Finance $1.7M conflux Flash Loan Attacks Details Source
111 Pike V1 $1.6M arbitrum, ethereum, optimism Access Control Attacks Details Source
112 SAGA (Fake) $1.6M — Rugpull Details Source
113 Narwhal $1.6M — Other Details Source
114 Shoebill Finance $1.5M bob Oracle Manipulation & Price Manipulation Details
115 YOLO Games $1.5M blast Access Control Attacks Details Source
116 Minterest $1.5M mantle Flash Loan Attacks Details Source
117 Caterpillar Coin $1.4M bsc Oracle Manipulation & Price Manipulation Details
118 CUT token $1.4M — Flash Loan Attacks Details Source
119 Pendle $1.4M — Phishing Attacks Details Source
120 Solareum $1.4M solana Phishing Attacks Details
121 Wilder $1.8M — Access Control Attacks Details Source
122 OrdiZK $1.4M — Rugpull Details Source
123 BlueBerry $1.4M ethereum Flash Loan Attacks Details Source
124 Blueberry Protocol Foundation $1.3M — Other Details Source
125 Monoswap $1.3M blast Access Control Attacks Details Source
126 MonoSwap $1.3M — Access Control Attacks Details Source
127 RiskOnBlast $1.3M blast Rugpull / Exit Scam Details Source
128 MangoFarmSOL $1.3M — Rugpull Details Source
129 GeniusAI $1.3M ethereum, fantom Access Control Attacks Details Source
130 Vowcurrency $1.2M ethereum Access Control Attacks Details
131 Vow $1.2M — Other Details Source
132 Genius Token $1.2M — Other Details Source
133 BasketDAO $1.2M ethereum Access Control Attacks Details Source
134 Fegex $1.1M base, bsc, ethereum Access Control Attacks Details Source
135 Base Lending $1.0M base Deposit Logic Flaw Details
136 DeltaPrime $1.0M arbitrum Access Control Attacks Details Source
137 Zest $1.0M stacks Oracle Manipulation & Price Manipulation Details
138 Orion $994K bsc Access Control Attacks Details Source
139 FEG (Feed Every Gorilla) $900K — Other Details Source
140 Condom $900K — Rugpull Details Source
141 NORMIE $882K base Unknown Details
142 Aragon DAO $800K — Phishing Attacks Details Source
143 Polyhedra Network $760K bsc Access Control Attacks Details
144 MOBOX $750K optimism Borrow Logic Flaw Details
145 1inch $723K avalanche Access Control Attacks Details Source
146 Chainge Finance $716K bsc Access Control Attacks Details Source
147 ReHold $700K ethereum Admin Drain Details
148 Humanized_AI $665K — Rugpull Details Source
149 Bloom $600K blast Other / Unknown Details Source
150 Blastoff $600K blast Unknown Details
151 Serenity Shield $586K ethereum Phishing Attacks Details
152 Xai $581K — Rugpull Details Source
153 CryptoBottle $527K — Other Details Source
154 Solareum $523K — Other Details Source
155 UtopiaSphere $521K bsc Oracle Manipulation & Price Manipulation Details
156 Clober $500K — Reentrancy Details Source
157 Clober Liquidity Vault $500K base Reentrancy Details Source
158 Vestra DAO $500K ethereum Staking Logic Exploit / Other / Staking Logic Flaw Details Source
159 Cryptobottle $490K polygon Oracle Manipulation & Price Manipulation Details
160 Fake PIToken $490K — Rugpull Details Source
161 Swarm Markets $473K ethereum Access Control Attacks Details
162 MINER $467K ethereum Other / Missing Input Validation Details Source
163 Predy finance $464K arbitrum Access Control Attacks Details Source
164 Wise Lending V1 $464K ethereum Rounding Donation Attack / Other / Donation Attack Details Source
165 Clipper $450K base, optimism API Signature Exploit / Deposit Logic Flaw Details Source
166 vETH $450K ethereum Oracle Manipulation & Price Manipulation Details Source
167 BGM $450K bsc Oracle Manipulation & Price Manipulation Details
168 URF $450K — Rugpull Details Source
169 Farcana $440K — Access Control Attacks Details Source
170 AirDAO $440K ethereum Access Control Attacks Details Source
171 DCT Token $428K — Flash Loan Attacks Details Source
172 Tsuru $410K base Unknown Details
173 Fake EigenLayer $405K — Rugpull Details Source
174 Fake Polyhedra Network $400K — Rugpull Details Source
175 Fake ether.fi $354K — Rugpull Details Source
176 Kalax $350K blast Drain Vaults / Admin Drain Details Source
177 Sumer.Money $350K base Flash Loan Attacks Details Source
178 Lava $340K arbitrum Flash Loan Attacks Details Source
179 Galaxy Fox $330K ethereum Access Control Attacks Details Source
180 MoonHacker $320K — Flash Loan Attacks Details Source
181 LongNoseDog $310K — Rugpull Details Source
182 Pike Finance $300K — Other Details Source
183 ParaSwap $300K ethereum Access Control Attacks Details
184 Lucky Star $297K — Access Control Attacks Details Source
185 Fake SCROLL $290K — Rugpull Details Source
186 Fake Ethena Labs $290K — Rugpull Details Source
187 TLN Protocol $280K bsc Unknown Details
188 xPet $257K — Other Details Source
189 FA $255K — Rugpull Details Source
190 Spectral Labs $250K ethereum Access Control Attacks Details Source
191 LeadBlock's Morpho Blue Market $250K ethereum Oracle Manipulation & Price Manipulation Details Source
192 Lifeform (fake) $250K — Rugpull Details Source
193 Tectonic $250K cronos Flash Loan Attacks Details Source
194 Ore $243K — Rugpull Details Source
195 HarryPotterObamaSonic10Inu $243K ethereum Oracle Manipulation & Price Manipulation Details
196 NEVER $240K — Rugpull Details Source
197 OpenLeverage $236K bsc Other / Unknown Details Source
198 Bankroll $235K bsc Flash Loan Attacks Details Source
199 Empower AI $230K — Rugpull Details Source
200 ZongZi $230K bsc Flash Loan Attacks Details Source

Notes

Loss totals use parsed USD values only; unknown or unparseable losses are not guessed. Attack-class links are added only when the root cause is clear enough to map.

Full hack database Filter every tracked incident by chain, date, loss size, and technique. Attack class library Move from incident examples to exploit mechanics and review checklists. Largest crypto hacks Compare this year against the highest-loss incidents in the database.