Web3 Hacks in 2025

2025 incident records, sorted by known loss. The strongest mapped pattern is Access Control (79 rows); the largest tracked chain bucket is Ethereum ($2.1B).

Open full database

Incident records

Sorted by known reported loss first, then recency. Open the source before treating any summary as final.

Links
1 Mantra $5.5B — Other Details Source
2 Bybit $1.4B ethereum Access Control Attacks Details Source
3 Phishing $330M — Phishing Attacks Details Source
4 LIBRA $286M — Other Details Source
5 Cetus CLMM $260M sui Arithmetic Overflow & Underflow Attacks Details Source
6 MELANIA $200M — Other Details Source
7 Balancer V2 $128M arbitrum, base, ethereum, optimism, polygon, sonic Access Control Attacks Details Source
8 Bitget $100M — Market-Making Bot Exploit / Market Maker Bot Exploited Details Source
9 Stream Finance $93.0M — Other Details Source
10 Phishing $91.0M — Phishing Attacks Details Source
11 Phemex $85.0M arbitrum, avalanche, base, bitcoin, bsc, ethereum, optimism, polygon, solana, sui, tron, xrp, zksync era Access Control Attacks Details Source
12 Nobitex $82.0M arbitrum, avalanche, bitcoin, bsc, ethereum, polygon, tron Access Control Attacks Details Source
13 UPCX $70.0M ethereum Access Control Attacks Details Source
14 Address Poisoning Attack $50.0M — Phishing Attacks Details Source
15 Infini $50.0M ethereum Access Control Attacks Details Source
16 UXLINK $48.0M arbitrum, ethereum Access Control Attacks Details Source
17 BtcTurk $48.0M arbitrum, avalanche, base, ethereum, mantle, optimism, polygon Access Control Attacks Details Source
18 CoinDCX $44.2M — Access Control Attacks Details Source
19 GMX $42.0M — Other Details Source
20 GMX V1 Perps $42.0M arbitrum Reentrancy Details Source
21 SwissBorg $41.5M solana Third-party API compromise / Other / API Key Compromised Details Source
22 Upbit $36.0M solana Access Control Attacks Details Source
23 BigONE $28.0M bitcoin, bsc, ethereum, solana, tron Access Control Attacks Details Source
24 SBI Crypto $24.0M bitcoin, bitcoincash, doge, ethereum, litecoin Access Control Attacks Details Source
25 Hyperliquid User Private Key Compromise $21.0M — Access Control Attacks Details Source
26 FortuneWheel $21.0M — Other Details Source
27 AlexLab $16.1M — Other Details Source
28 WOO X $14.0M arbitrum, bitcoin, bsc, ethereum Phishing Attacks Details Source
29 Venus $13.0M — Phishing Attacks Details Source
30 Abracadabra Spell $13.0M arbitrum Other / Liquidation Logic Flaw Details Source
31 Ionic $12.3M — Other Details Source
32 Cork V1 $12.0M ethereum Access Control Attacks Details Source
33 BitoPro $11.5M ethereum, polygon, solana, tron Key Leaked via Infrastructure Details
34 BitoPro BitoGroup $11.5M — Access Control Attacks Details Source
35 Garden $11.4M arbitrum, base, ethereum, solana Access Control Attacks Details Source
36 DogWifTools $10.0M solana Access Control Attacks Details Source
37 Resupply $9.6M ethereum Oracle Manipulation & Price Manipulation Details Source
38 zkLend $9.6M starknet Flash Loan Attacks Details Source
39 Astra Nova $9.1M ethereum Access Control Attacks Details
40 Yearn Finance $9.0M — Other Details Source
41 Yearn Ether $9.0M ethereum yETH stablepool Exploit / Incorrect Share Accounting Details Source
42 Zoth ZeUSD $8.8M ethereum Access Control Attacks Details Source
43 Ionic Protocol $8.6M mode Phishing Attacks Details Source
44 Trust Wallet $8.5M bitcoin, ethereum, solana Access Control Attacks Details Source
45 Bunni V2 $8.4M ethereum, unichain Liquidity Distribution Function Exploit / Other / Rounding Error Details Source
46 ALEX $8.4M stacks Access Control Attacks Details Source
47 Zoth $8.3M — Access Control Attacks Details Source
48 NoOnes $7.9M binance, ethereum, solana, tron Cross-Chain Message Spoofing Details
49 Yala $7.6M ethereum, solana Deployer Key Compromised Details
50 KiloEx $7.5M base, bsc, taiko Access Control Attacks Details Source
51 Odin.Fun $7.0M icp Oracle Manipulation & Price Manipulation Details Source
52 Wemix $6.2M wemix Access Control Attacks Details
53 Pundi AI $6.0M — Access Control Attacks Details Source
54 Loopscale $5.8M solana Oracle Manipulation & Price Manipulation Details Source
55 BetterBank $5.0M pulsechain Infinite Mint and Dump / Other / Reward Logic Flaw Details Source
56 ZKSwap $5.0M ethereum Forged Proof Details
57 ZKsync $5.0M zksync era Access Control Attacks Details Source
58 1inch $5.0M ethereum Access Control Attacks Details Source
59 Aqua $4.7M — Rugpull Details Source
60 Future Protocol $4.6M bsc Incorrect Share Accounting Details
61 CrediX $4.5M sonic Access Control Attacks Details Source
62 Shibarium $4.1M shibarium Flash Loan Attacks Details Source
63 Suji Yan $4.0M — Phishing Attacks Details Source
64 Unleash Protocol $3.9M story Access Control Attacks Details Source
65 Flow Network $3.9M — Other Details Source
66 Flow $3.9M flow mint-and-dump Hack / Infinite Mint Details Source
67 ForceBridge $3.9M nervos Access Control Attacks Details Source
68 Moonwell $3.7M — Oracle Manipulation & Price Manipulation Details Source
69 Nervos Network $3.7M — Access Control Attacks Details Source
70 HyperVault $3.6M hyperliquid l1 Drain Vaults / Rugpull / Admin Drain Details Source
71 Typus Perp $3.4M sui Oracle Manipulation & Price Manipulation Details Source
72 Typus Finance $3.4M — Oracle Manipulation & Price Manipulation Details Source
73 GANA Payment $3.1M bsc Access Control Attacks Details Source
74 Phishing $3.0M — Phishing Attacks Details Source
75 Beets $3.0M — Access Control Attacks Details Source
76 GriffinAI $3.0M bsc Access Control Attacks Details Source
77 EOA Token Theft $3.0M — Other Details Source
78 Ribbon $2.7M ethereum Access Control Attacks Details Source
79 1Inch $2.6M — Reentrancy Details Source
80 Nemo Yield Trading $2.6M sui Access Control Attacks Details Source
81 Arcadia V2 $2.5M base Reentrancy Details Source
82 Moby Trade $2.5M — Access Control Attacks Details Source
83 Shibarium $2.4M — Access Control Attacks Details Source
84 Nemo $2.4M — Oracle Manipulation & Price Manipulation Details Source
85 Texture $2.2M solana Access Control Attacks Details Source
86 Mobius Token $2.2M bsc Arithmetic Overflow & Underflow Attacks Details Source
87 Rari Capital $2.0M ethereum Access Control Attacks Details Source
88 New Gold Protocol $2.0M bsc Flash Loan Attacks Details Source
89 OlaXBT $2.0M bsc Access Control Attacks Details Source
90 MEV Bots $2.0M — Access Control Attacks Details Source
91 Sirio Finance $2.0M hedera Flash Loan Attacks Details Source
92 Phishing $1.8M — Phishing Attacks Details Source
93 Abracadabra Spell $1.7M ethereum Access Control Attacks Details Source
94 Term Finance $1.6M ethereum Oracle Manipulation & Price Manipulation Details
95 Kinto Bridge $1.6M arbitrum Access Control Attacks Details Source
96 Moby $1.5M arbitrum Access Control Attacks Details Source
97 Kame Aggregator $1.3M sei swap() Function Flaw / Swap Logic Flaw Details Source
98 LND $1.3M hyperliquid l1, sonic Access Control Attacks Details Source
99 Bitcoin Mission $1.3M arbitrum Access Control Attacks Details Source
100 Seedify $1.2M avalanche, bsc Access Control Attacks Details Source
101 US Permissionless Dollar $1.0M ethereum Access Control Attacks Details Source
102 Moonwell Lending $1.0M base, optimism Oracle Manipulation & Price Manipulation Details Source
103 BTCM App $1.0M — Other Details Source
104 Mars Perps $960K neutron Thin-Market Skew Exploit / Funding Rate Arbitrage Details Source
105 Demex $951K arbitrum Oracle Manipulation & Price Manipulation Details
106 Nitron Demex $950K — Oracle Manipulation & Price Manipulation Details Source
107 Venus Core Pool $902K zksync era Donation Attack Details Source
108 Orange Finance $840K arbitrum Access Control Attacks Details Source
109 Astera.fi $822K linea Flash Loan Attacks Details Source
110 The R0AR $790K ethereum Access Control Attacks Details Source
111 Hyperdrive HL $782K hyperliquid l1 Access Control Attacks Details Source
112 Phishing $750K — Phishing Attacks Details Source
113 WebKeyDao $737K — Other Details Source
114 SuperRare $730K ethereum Access Control Attacks Details Source
115 Aerodrome V1 $700K ethereum, optimism DNS Hijack Details
116 Vicuna $700K — Oracle Manipulation & Price Manipulation Details Source
117 Trusta AI $615K — Other Details Source
118 IPC AI $590K binance Swap Logic Flaw Details
119 Silo Finance $546K ethereum fillQuote silo.borrow() Exploit / Missing Input Validation / Other Details Source
120 Agentic FoF $531K ethereum Unknown Details
121 0G Labs $516K 0g emergencyWithdraw Function Exploit / Withdrawal Logic Flaw Details Source
122 Numa $506K arbitrum Oracle Manipulation & Price Manipulation Details
123 NumaMoney $506K — Flash Loan Attacks Details Source
124 Polymarket $500K ethereum, polygon Phishing Attacks Details
125 Zunami Protocol $500K ethereum Access Control Attacks Details Source
126 Fake LAYER $465K — Rugpull Details Source
127 WaveX $430K — Other Details Source
128 Corepound $430K core Drained Contracts / Admin Drain Details Source
129 Cozy V2 $427K optimism Access Control Attacks Details Source
130 Evoq Finance $420K bsc Access Control Attacks Details Source
131 MetaPool $400K — Other Details Source
132 Cardex $400K abstract Access Control Attacks Details Source
133 phishing $394K — Phishing Attacks Details Source
134 Impermax V3 $380K base Zero-Rate Hack / Other / Liquidation Logic Flaw Details Source
135 SIR $355K ethereum Access Control Attacks Details Source
136 The Idols NFT $340K ethereum Other / Reward Logic Flaw Details Source
137 EIP-7702 Delegation Contract Exploit $336K — Other Details Source
138 Goldfinch Finance $330K ethereum Access Control Attacks Details Source
139 Voltage V3 $322K fuse Access Control Attacks Details
140 numa. $320K sonic NumaVault Exploit / Incorrect Share Accounting Details Source
141 Yearn Finance $300K ethereum Flash Loan Attacks Details Source
142 Coinbase $300K ethereum Access Control Attacks Details Source
143 Dexodus Finance $300K base Oracle Manipulation & Price Manipulation Details Source
144 Impermax V3 $300K base Flash Loan Attacks Details Source
145 MoonHacker $300K optimism Access Control Attacks Details Source
146 Zoth ZeUSD $285K ethereum Swap Logic Flaw Details
147 Zoth $285K — Oracle Manipulation & Price Manipulation Details Source
148 Malda (prev. Mendi Finance) $273K — Other Details Source
149 FutureSwap $270K ethereum Flash Loan Attacks Details Source
150 Zerobase $250K bsc Access Control Attacks Details Source
151 Hacken Token $250K — Access Control Attacks Details Source
152 Peapods Finance $207K ethereum Oracle Manipulation & Price Manipulation Details Source
153 RANT $204K bsc Incorrect Fee Accounting Details
154 USPD $200K — Access Control Attacks Details Source
155 Unilend V2 $200K ethereum Redeem Process Exploit / Other / Redeem Logic Flaw Details Source
156 four.meme $183K bsc Liquidity Pool Exploit / Other / Swap Logic Flaw Details Source
157 DoodiPals $171K solana Access Control Attacks Details
158 Port3 Network $166K bsc Infinite Mint and Dump / Infinite Mint Details Source
159 MAID $166K — Access Control Attacks Details Source
160 Sharwa.Finance $147K arbitrum Oracle Manipulation & Price Manipulation Details Source
161 Pond.fun $145K linea Admin Drain Details
162 Dexmax AI $130K ethereum Access Control Attacks Details
163 Meta Pool $130K ethereum Infinite Mint Details
164 MSCST $130K bsc Access Control Attacks Details Source
165 DMi $124K — Flash Loan Attacks Details Source
166 Anome $120K — Other Details Source
167 ModelpiToken $107K — Other Details Source
168 DRLVaultV3 $100K ethereum Oracle Manipulation & Price Manipulation Details
169 QuantMaster $100K ethereum Backdoor Contract Details
170 Alkimiya $96K ethereum Arithmetic Error Details
171 Hegic(old contract) $94K ethereum Unlimited repeated withdrawal exploit / Withdrawal Logic Flaw Details Source
172 Squid $90K — Other Details Source
173 Berally $90K berachain Access Control Attacks Details Source
174 StepHeroNFTs $90K bsc Reentrancy Details Source
175 Tailverse $88K — Other Details Source
176 OracleBNB $80K — Rugpull Details Source
177 four.meme $80K bsc Access Control Attacks Details
178 WebKeyDAO $73K bsc Access Control Attacks Details
179 IRYS AI $70K bsc Backdoor Contract Details
180 Bankroll $65K bsc Other / Arithmetic Error Details Source
181 AST Token $65K — Other Details Source
182 Grizzifi $61K bsc Reward Logic Flaw Details
183 ACB $60K — Other Details Source
184 dTRINITY $56K sonic Access Control Attacks Details
185 MUBARA $55K — Phishing Attacks Details Source
186 Eden Network $54K — Access Control Attacks Details Source
187 LAURA $48K — Other Details Source
188 Stepp2p $43K bsc Unknown Details
189 Usual $43K ethereum Arbitration Exploit / Other / Missing Input Validation Details Source
190 Sorra Finance $41K ethereum Reward Logic Flaw Details
191 DIMO $40K ethereum Access Control Attacks Details Source
192 Mosca2 $38K bsc Incorrect Share Accounting Details
193 Mosca $38K binance Incorrect Share Accounting Details
194 AIRWA $34K bsc Access Control Attacks Details Source
195 TokenHolder $26K bsc Access Control Attacks Details
196 ACB $23K bsc Oracle Manipulation & Price Manipulation Details
197 OpenOcean $22K — Other Details Source
198 VeloraDEX $20K — Delegatecall & Call Injection Attacks Details Source
199 Mosca $20K — Other Details Source
200 Raga Finance $18K hyperliquid l1 HyperEVM Delta Neutral Exploit / Unknown Details Source
201 BIGO $18K — Other Details Source
202 402bridge $18K base Access Control Attacks Details Source
203 BBX Token $12K bsc Oracle Manipulation & Price Manipulation Details Source
204 Tenderize V2 $11K ethereum Proxy Upgrade Skim / Unknown Details Source
205 Aventa $7K ethereum Unknown Details
206 Unverified_35bc $7K bsc Reentrancy Details
207 Arcade $5K — Access Control Attacks Details Source
208 Peapods Finance $4K — Other Details Source
209 FixedTokenBSwap $2K ethereum Oracle Manipulation & Price Manipulation Details
210 Panoptic V1.1 — base, ethereum, unichain Hash Collision Details Source
211 Zapper — arbitrum, base, ethereum, optimism, polygon DNS Hijack Details

Notes

Loss totals use parsed USD values only; unknown or unparseable losses are not guessed. Attack-class links are added only when the root cause is clear enough to map.

Full hack database Filter every tracked incident by chain, date, loss size, and technique. Attack class library Move from incident examples to exploit mechanics and review checklists. Largest crypto hacks Compare this year against the highest-loss incidents in the database.