Web3 Hacks in 2025

2025 incident records, sorted by known loss. The strongest mapped pattern is Access Control (73 rows); the largest tracked chain bucket is Ethereum ($2.1B).

Open full database

Incident records

Sorted by known reported loss first, then recency. Open the source before treating any summary as final.

Links
1 Mantra $5.5B — Other Details Source 1Source 2Source 3Source 4
2 Bybit $1.4B ethereum Access Control Attacks Details Source
3 Phishing $330M — Phishing Attacks Details Source
4 LIBRA $286M — Other Details Source 1Source 2Source 3Source 4
5 Cetus CLMM $260M sui Arithmetic Overflow & Underflow Attacks Details Source
6 Balancer V2 $128M arbitrum, base, ethereum, optimism, polygon, sonic Access Control Attacks Details Source
7 Bitget $100M — Market-Making Bot Exploit / Market Maker Bot Exploited Details Source
8 Stream Finance $93.0M — Other Details Source 1Source 2
9 Phishing $91.0M — Phishing Attacks Details Source 1Source 2
10 Phemex $85.0M arbitrum, avalanche, base, bitcoin, bsc, ethereum, optimism, polygon, solana, sui, tron, xrp, zksync era Access Control Attacks Details Source
11 Nobitex $82.0M arbitrum, avalanche, bitcoin, bsc, ethereum, polygon, tron Access Control Attacks Details Source
12 UPCX $70.0M ethereum Access Control Attacks Details Source
13 Address Poisoning Attack $50.0M — Phishing Attacks Details Source 1Source 2
14 Infini $50.0M ethereum Access Control Attacks Details Source
15 UXLINK $48.0M arbitrum, ethereum Access Control Attacks Details Source
16 BtcTurk $48.0M arbitrum, avalanche, base, ethereum, mantle, optimism, polygon Access Control Attacks Details Source
17 CoinDCX $44.2M — Access Control Attacks Details Source
18 GMX V1 EVM $42.0M arbitrum Reentrancy Details
19 GMX $42.0M arbitrum Reentrancy Details Source 1Source 2
20 SwissBorg $41.5M solana Third-party API compromise / Other / API Key Compromised Details Source
21 Upbit $36.0M solana Access Control Attacks Details Source
22 BigONE $28.0M bitcoin, bsc, ethereum, solana, tron Access Control Attacks Details Source 1Source 2Source 3
23 SBI Crypto $24.0M bitcoin, bitcoincash, doge, ethereum, litecoin Access Control Attacks Details Source
24 Hyperliquid User Private Key Compromise $21.0M — Access Control Attacks Details Source 1Source 2
25 FortuneWheel $21.0M — Other Details Source
26 AlexLab $16.1M stacks Access Control Attacks Details Source 1Source 2Source 3
27 WOO X $14.0M arbitrum, bitcoin, bsc, ethereum Phishing Attacks Details Source
28 Venus $13.0M — Phishing Attacks Details Source 1Source 2Source 3
29 Abracadabra Spell $13.0M arbitrum Other / Liquidation Logic Flaw Details Source
30 Ionic Protocol $12.3M mode Phishing Attacks Details Source
31 Cork V1 $12.0M ethereum Access Control Attacks Details Source
32 BitoPro $11.5M ethereum, polygon, solana, tron Access Control Attacks Details Source 1Source 2Source 3
33 Garden $11.4M arbitrum, base, ethereum, solana Access Control Attacks Details Source
34 Resupply $9.6M ethereum Oracle Manipulation & Price Manipulation Details Source
35 zkLend $9.6M starknet Flash Loan Attacks Details Source
36 Astra Nova $9.1M ethereum Access Control Attacks Details
37 Yearn Ether $9.0M ethereum yETH stablepool Exploit / Incorrect Share Accounting / Other Details Source
38 Zoth ZeUSD $8.8M ethereum Access Control Attacks Details Source
39 Trust Wallet $8.5M bitcoin, ethereum, solana Access Control Attacks Details Source
40 KiloEx $8.4M base, bsc, taiko Access Control Attacks Details Source
41 Bunni V2 $8.4M ethereum, unichain Withdrawal Rounding Error Details Source
42 NoOnes $7.9M binance, ethereum, solana, tron Cross-Chain Message Spoofing Details
43 Yala $7.6M ethereum, solana Deployer Key Compromised Details
44 Odin.Fun $7.0M icp Oracle Manipulation & Price Manipulation Details Source
45 Wemix $6.2M wemix Access Control Attacks Details
46 Pundi AI $6.0M — Access Control Attacks Details Source 1Source 2
47 Loopscale $5.8M solana Oracle Manipulation & Price Manipulation Details Source
48 BetterBank $5.0M pulsechain Infinite Mint and Dump / Other / Reward Logic Flaw Details Source
49 ZKSwap $5.0M ethereum Forged Proof Details
50 ZKsync $5.0M zksync era Access Control Attacks Details Source
51 1inch $5.0M ethereum Access Control Attacks Details Source
52 Aqua $4.7M — Rugpull Details Source 1Source 2Source 3
53 Future Protocol $4.6M bsc Incorrect Share Accounting Details
54 CrediX $4.5M sonic Access Control Attacks Details Source
55 Shibarium $4.1M shibarium Access Control Attacks Details Source
56 Suji Yan $4.0M — Phishing Attacks Details Source 1Source 2
57 Unleash Protocol $3.9M story Access Control Attacks Details Source
58 Flow Network $3.9M flow Other / mint-and-dump Hack / Infinite Mint Details Source 1Source 2
59 ForceBridge $3.9M nervos Access Control Attacks Details Source
60 Moonwell $3.7M base, optimism Oracle Manipulation & Price Manipulation Details Source 1Source 2
61 HyperVault $3.6M hyperliquid l1 Drain Vaults / Rugpull / Admin Drain Details Source
62 Typus Perp $3.3M sui Oracle Manipulation & Price Manipulation Details Source
63 GANA Payment $3.1M bsc Access Control Attacks Details Source
64 Phishing $3.0M — Phishing Attacks Details Source
65 Beets $3.0M — Access Control Attacks Details Source 1Source 2
66 GriffinAI $3.0M bsc Access Control Attacks Details Source
67 EOA Token Theft $3.0M — Other Details Source 1Source 2
68 Ribbon $2.7M ethereum Access Control Attacks Details Source
69 Nemo Yield Trading $2.6M sui Access Control Attacks Details Source
70 Texture $2.2M solana Access Control Attacks Details Source
71 Mobius Token $2.2M bsc Arithmetic Overflow & Underflow Attacks Details Source
72 Rari Capital $2.0M ethereum Access Control Attacks Details Source
73 New Gold Protocol $2.0M bsc Flash Loan Attacks Details Source 1Source 2Source 3
74 OlaXBT $2.0M bsc Access Control Attacks Details Source
75 MEV Bots $2.0M — Access Control Attacks Details Source 1Source 2
76 Sirio Finance $2.0M hedera Flash Loan Attacks Details Source
77 Phishing $1.8M — Phishing Attacks Details Source
78 Abracadabra Spell $1.7M ethereum Access Control Attacks Details Source
79 Term Finance $1.6M ethereum Oracle Manipulation & Price Manipulation Details
80 Kinto Bridge $1.6M arbitrum Access Control Attacks Details Source
81 Moby $1.5M arbitrum Access Control Attacks Details Source
82 Kame Aggregator $1.3M sei swap() Function Flaw / Swap Logic Flaw Details Source
83 LND $1.3M hyperliquid l1, sonic Access Control Attacks Details Source
84 Bitcoin Mission $1.3M arbitrum Access Control Attacks Details Source
85 Seedify $1.2M avalanche, bsc Access Control Attacks Details Source
86 USPD $1.0M ethereum Access Control Attacks Details Source 1Source 2
87 BTCM App $1.0M — Other Details Source
88 Mars Perps $960K neutron Thin-Market Skew Exploit / Funding Rate Arbitrage Details Source
89 Nitron Demex $950K arbitrum Oracle Manipulation & Price Manipulation Details Source 1Source 2
90 Venus Core Pool $902K zksync era Donation Attack Details Source
91 Orange Finance $840K arbitrum Access Control Attacks Details Source
92 Astera.fi $822K linea Flash Loan Attacks Details Source
93 The R0AR $790K ethereum Access Control Attacks Details Source 1Source 2
94 Hyperdrive HL $782K hyperliquid l1 Access Control Attacks Details Source
95 Phishing $750K — Phishing Attacks Details Source
96 WebKeyDao $737K bsc Access Control Attacks Details Source
97 SuperRare $730K ethereum Access Control Attacks Details Source
98 Aerodrome V1 $700K ethereum, optimism DNS Hijack Details
99 Vicuna $700K sonic Oracle Manipulation & Price Manipulation Details Source 1Source 2
100 Trusta AI $615K — Other Details Source 1Source 2

Notes

Loss totals use parsed USD values only; unknown or unparseable losses are not guessed. Attack-class links are added only when the root cause is clear enough to map.

Full hack database Filter every tracked incident by chain, date, loss size, and technique. Attack class library Move from incident examples to exploit mechanics and review checklists. Largest crypto hacks Compare this year against the highest-loss incidents in the database.