Web3 Hacks in 2024

2024 incident records, sorted by known loss. The strongest mapped pattern is Access Control (99 rows); the largest tracked chain bucket is Ethereum ($983.4M).

Open full database

Incident records

Sorted by known reported loss first, then recency. Open the source before treating any summary as final.

Links
201 JUICE $216K — Other Details Source
202 Convergence $210K ethereum Missing Input Validation / Other Details Source
203 zkFinance $200K zksync era Oracle Manipulation & Price Manipulation Details Source
204 DefiPlaza $200K ethereum Swap Logic Flaw Details
205 Not Found $200K — Rugpull Details Source
206 User $196K — Phishing Attacks Details Source
207 FENGSHOU Token $191K bsc Access Control Attacks Details Source
208 iVest $190K bsc Unknown Details
209 MetaDragonDao $181K bsc Access Control Attacks Details Source
210 Yield Protocol $181K arbitrum Balance Disparity Exploit / Incorrect Share Accounting Details Source
211 Nebula Revelation $180K optimism Reentrancy Details Source
212 DeezNutz_404 $174K ethereum Flash Loan Attacks Details Source
213 MAAT Protocol $168K binance Withdrawal Logic Flaw Details
214 TGBS $151K — Pool-burn price manipulation Details Source
215 YIEDL $150K bsc Missing Input Validation Details
216 DegenFox $150K — Rugpull Details Source
217 Particle Trade $142K ethereum Other / Missing Input Validation Details Source
218 Z123 $136K bsc Oracle Manipulation & Price Manipulation Details
219 Perpy $132K arbitrum Access Control Attacks Details
220 BUBAI $131K ethereum Liquidity Rug Details
221 Lava $130K arbitrum Flash Loan Attacks Details Source
222 N/A $130K — Oracle Manipulation & Price Manipulation Details Source
223 Barley Finance $130K ethereum Infinite Mint Details
224 Magpie Protocol $129K arbitrum, avalanche, base, blast, bsc, ethereum, optimism, polygon, polygon zkevm, zksync era Router Exploit / Missing Input Validation Details Source
225 LABUBU $120K — Other Details Source
226 YON $118K bsc Access Control Attacks Details
227 AutoChain Global $113K bsc Unknown Details
228 WXETA $110K bsc, ethereum Access Control Attacks Details Source
229 OSN Token $110K — Flash Loan Attacks Details Source
230 TonUP $108K ton Reward Logic Flaw Details
231 SteamSwap $105K bsc Oracle Manipulation & Price Manipulation Details
232 BYC Token $100K binance Incorrect Fee Accounting Details
233 OPSEC $100K ethereum Access Control Attacks Details
234 LayerSwap $100K ethereum DNS Hijack Details
235 Citadel Finance $97K — Flash Loan Attacks Details Source
236 Ramses $93K arbitrum Other / Reward Logic Flaw Details Source
237 Citadel.one $93K arbitrum Access Control Attacks Details
238 Affine Protocol $88K ethereum Missing Input Validation Details
239 SQUID $87K bsc Swap Logic Flaw Details
240 BTC24H $86K polygon Access Control Attacks Details Source
241 xBlast $84K ethereum Hot Wallet Key Compromised Details
242 Matez $80K bsc Arithmetic Error Details
243 HGM, AGSC $75K — Phishing Attacks Details Source
244 Spectra Finance $73K ethereum Access Control Attacks Details
245 NovaMind $70K — Rugpull Details Source
246 Karastar $69K — Access Control Attacks Details Source
247 MainnetSettler $66K ethereum Access Control Attacks Details
248 Saga DAO $66K solana Access Control Attacks Details Source
249 CoW $59K ethereum Access Control Attacks Details
250 MintRisesPrices $59K bsc Reentrancy Details
251 Aave $56K ethereum Access Control Attacks Details Source
252 Smart Bank Token $56K — Flash Loan Attacks Details Source
253 Juice Finance $54K ethereum Reward Logic Flaw Details
254 Pythia $53K ethereum Reentrancy Details
255 GAME $50K — Reentrancy Details Source
256 User $48K — Phishing Attacks Details Source
257 Rose Finance $45K — Flash Loan Attacks Details Source
258 DualPools $41K bsc Flash Loan Attacks Details Source
259 ZoomerCoin $41K ethereum Flash Loan Attacks Details
260 EXcommunity $37K bsc Unknown Details
261 JokInTheBox $34K ethereum Withdrawal Logic Flaw Details
262 MFT $34K bsc Unknown Details
263 GPU $32K bsc Arithmetic Error Details
264 APEMAGA $32K ethereum Unknown Details
265 AK1111 $32K bsc Access Control Attacks Details
266 dYdX V3 $31K ethereum DNS Hijack Details
267 Omnipus $30K ethereum Missing Input Validation Details
268 Vista Finance $29K bsc Flash Loan Attacks Details Source
269 YYS $29K — Flash Loan Attacks Details Source
270 OTSea $26K ethereum Reward Logic Flaw Details
271 Fire Token $24K ethereum Oracle Manipulation & Price Manipulation Details Source
272 Zenterest $21K ethereum Oracle Manipulation & Price Manipulation Details
273 BNBS $20K binance Reentrancy Details
274 ChiSale $16K ethereum Unknown Details
275 MixedSwapRouter $16K arbitrum Access Control Attacks Details
276 Bizness $16K base Reentrancy Details
277 WINR $15K — Other Details Source
278 Erc20transfer $15K ethereum Access Control Attacks Details
279 RPP $14K bsc Unknown Details
280 OKX NFT Aggregator $14K bsc Access Control Attacks Details Source
281 X319 $13K bsc Access Control Attacks Details
282 JHY Token $12K binance Incorrect Share Accounting Details
283 LABUBU Token $12K binance Donation Attack Details
284 JohnLennonC0IN $11K — Rugpull Details Source
285 NFTG $10K bsc Access Control Attacks Details
286 ALP $10K bsc Access Control Attacks Details
287 Saturn $9K bsc Oracle Manipulation & Price Manipulation Details
288 Proxy_b7e1 $8K bsc Unknown Details
289 VRug $8K ethereum Liquidity Rug Details
290 DOGGO $7K ethereum Withdrawal Logic Flaw Details
291 BTB Token $5K — Flash Loan Attacks Details Source
292 SlurpyCoin $3K binance Swap Logic Flaw Details
293 ETHFIN $1K bsc Access Control Attacks Details
294 Tectonic — cronos Oracle Manipulation & Price Manipulation Details Source
295 Ambient — ethereum Phishing Attacks Details Source
296 Rivus DAO — ethereum Third-party Dev Backdoor Exploit / Backdoor Contract Details Source
297 WIFCOIN — ethereum Unknown Details
298 Scroll Token — ethereum Arithmetic Error Details
299 BNBX — bsc Arithmetic Error Details
300 Rico — arbitrum Access Control Attacks Details

Notes

Loss totals use parsed USD values only; unknown or unparseable losses are not guessed. Attack-class links are added only when the root cause is clear enough to map.

Full hack database Filter every tracked incident by chain, date, loss size, and technique. Attack class library Move from incident examples to exploit mechanics and review checklists. Largest crypto hacks Compare this year against the highest-loss incidents in the database.