Web3 Hacks in 2024

2024 incident records, sorted by known loss. The strongest mapped pattern is Access Control (95 rows); the largest tracked chain bucket is Ethereum ($959.6M).

Open full database

Incident records

Sorted by known reported loss first, then recency. Open the source before treating any summary as final.

Links
201 TonUP $108K ton Reward Logic Flaw Details
202 SteamSwap $105K bsc Oracle Manipulation & Price Manipulation Details
203 BYC Token $100K binance Incorrect Fee Accounting Details
204 OPSEC $100K ethereum Access Control Attacks Details
205 LayerSwap $100K ethereum DNS Hijack Details
206 Ramses $93K arbitrum Other / Reward Logic Flaw Details Source2
207 Citadel Finance $93K arbitrum Access Control Attacks Details Source
208 Affine Protocol $88K ethereum Missing Input Validation Details
209 SQUID $87K bsc Swap Logic Flaw Details
210 BTC24H $86K polygon Access Control Attacks Details Source
211 xBlast $84K ethereum Hot Wallet Key Compromised Details
212 Matez $80K bsc Arithmetic Error Details
213 HGM, AGSC $75K — Phishing Attacks Details Source
214 Spectra Finance $73K ethereum Access Control Attacks Details
215 NovaMind $70K — Rugpull Details Source
216 Karastar $69K — Access Control Attacks Details Source
217 MainnetSettler $66K ethereum Access Control Attacks Details
218 Saga DAO $66K solana Access Control Attacks Details Source2
219 CoW $59K ethereum Access Control Attacks Details
220 MintRisesPrices $59K bsc Reentrancy Details
221 Aave $56K ethereum Access Control Attacks Details Source
222 Smart Bank Token $56K — Flash Loan Attacks Details Source
223 JUICE $54K ethereum Other / Reward Logic Flaw Details Source2
224 Pythia $53K ethereum Reentrancy Details
225 GAME $50K — Reentrancy Details Source
226 User $48K — Phishing Attacks Details Source
227 Rose Finance $45K — Flash Loan Attacks Details Source
228 ZoomerCoin $41K ethereum Flash Loan Attacks Details
229 DualPools $41K bsc Flash Loan Attacks Details Source
230 EXcommunity $37K bsc Unknown Details
231 JokInTheBox $34K ethereum Withdrawal Logic Flaw Details
232 MFT $34K bsc Unknown Details
233 GPU $32K bsc Arithmetic Error Details
234 APEMAGA $32K ethereum Unknown Details
235 AK1111 $32K bsc Access Control Attacks Details
236 dYdX V3 $31K ethereum DNS Hijack Details
237 Omnipus $30K ethereum Missing Input Validation Details
238 YYS $29K — Flash Loan Attacks Details Source
239 Vista Finance $28K bsc Flash Loan Attacks Details Source
240 OTSea $26K ethereum Reward Logic Flaw Details
241 Zenterest $21K ethereum Oracle Manipulation & Price Manipulation Details
242 BNBS $20K binance Reentrancy Details
243 Fire Token $20K ethereum Oracle Manipulation & Price Manipulation Details Source
244 ChiSale $16K ethereum Unknown Details
245 MixedSwapRouter $16K arbitrum Access Control Attacks Details
246 Bizness $16K base Reentrancy Details
247 WINR $15K — Other Details Source
248 Erc20transfer $15K ethereum Access Control Attacks Details
249 RPP $14K bsc Unknown Details
250 OKX NFT Aggregator $14K bsc Access Control Attacks Details Source
251 X319 $13K bsc Access Control Attacks Details
252 JHY Token $12K binance Incorrect Share Accounting Details
253 LABUBU $12K binance Other / Donation Attack Details Source2
254 JohnLennonC0IN $11K — Rugpull Details Source
255 NFTG $10K bsc Access Control Attacks Details
256 ALP $10K bsc Access Control Attacks Details
257 Saturn $9K bsc Oracle Manipulation & Price Manipulation Details
258 Proxy_b7e1 $8K bsc Unknown Details
259 VRug $8K ethereum Liquidity Rug Details
260 DOGGO $7K ethereum Withdrawal Logic Flaw Details
261 BTB Token $5K — Flash Loan Attacks Details Source
262 SlurpyCoin $3K binance Swap Logic Flaw Details
263 ETHFIN $1K bsc Access Control Attacks Details
264 Tectonic — cronos Oracle Manipulation & Price Manipulation Details Source
265 Ambient — ethereum Phishing Attacks Details Source
266 Rivus DAO — ethereum Third-party Dev Backdoor Exploit / Backdoor Contract Details Source
267 WIFCOIN — ethereum Unknown Details
268 Scroll Token — ethereum Arithmetic Error Details
269 BNBX — bsc Arithmetic Error Details
270 Rico — arbitrum Access Control Attacks Details
271 BBT — ethereum Unknown Details
272 GHT — ethereum Unknown Details
273 Smoofs — polygon Reentrancy Details
274 RuggedArt — ethereum Reentrancy Details
275 Massive Phishing — — Phishing Attacks Details Source
276 DeFi Fake Tokens — — Other Details

Notes

Loss totals use parsed USD values only; unknown or unparseable losses are not guessed. Attack-class links are added only when the root cause is clear enough to map.

Full hack database Filter every tracked incident by chain, date, loss size, and technique. Attack class library Move from incident examples to exploit mechanics and review checklists. Largest crypto hacks Compare this year against the highest-loss incidents in the database.