Annual Hack Dataset

Web3 Hacks in 2025

2025 incident records, sorted by known loss. The strongest mapped pattern is Access Control (53 rows); the largest tracked chain bucket is Ethereum ($2.0B).

Open full database

Incident records

Sorted by known reported loss first, then recency. Open the source before treating any summary as final.

Links
1 Mantra $5.5B — Other Details Source
2 Bybit $1.4B ethereum Access Control Attacks Details Source
3 Phishing $330M — Phishing Attacks Details Source
4 LIBRA $286M — Other Details Source
5 Cetus CLMM $260M sui Spoof Token Exploit / Other Details Source
6 MELANIA $200M — Other Details Source
7 Balancer V2 $128M arbitrum, base, ethereum, optimism, polygon, sonic Access Control Attacks Details Source
8 Bitget $100M — Market-Making Bot Exploit Details Source
9 Stream Finance $93.0M — Other Details Source
10 Phishing $91.0M — Phishing Attacks Details Source
11 Phemex $85.0M arbitrum, avalanche, base, bitcoin, bsc, ethereum, optimism, polygon, solana, sui, tron, xrp, zksync era Access Control Attacks Details Source
12 Nobitex $82.0M arbitrum, avalanche, bitcoin, bsc, ethereum, polygon, tron Access Control Attacks Details Source
13 UPCX $70.0M ethereum Access Control Attacks Details Source
14 Address Poisoning Attack $50.0M — Phishing Attacks Details Source
15 Infini $50.0M ethereum Access Control Attacks Details Source
16 UXLINK $48.0M arbitrum, ethereum Access Control Attacks Details Source
17 BtcTurk $48.0M arbitrum, avalanche, base, ethereum, mantle, optimism, polygon Access Control Attacks Details Source
18 CoinDCX $44.2M — Access Control Attacks Details Source
19 GMX $42.0M — Other Details Source
20 GMX V1 Perps $42.0M arbitrum Reentrancy Details Source
21 SwissBorg $41.5M solana Third-party API compromise / Other Details Source
22 Upbit $36.0M solana Access Control Attacks Details Source
23 BigONE $28.0M — Access Control Attacks Details Source
24 SBI Crypto $24.0M bitcoin, bitcoincash, doge, ethereum, litecoin Access Control Attacks Details Source
25 Hyperliquid User Private Key Compromise $21.0M — Access Control Attacks Details Source
26 FortuneWheel $21.0M — Other Details Source
27 AlexLab $16.1M — Other Details Source
28 WOO X $14.0M arbitrum, bitcoin, bsc, ethereum Phishing Attacks Details Source
29 Venus $13.0M — Phishing Attacks Details Source
30 Abracadabra Spell $13.0M arbitrum Other Details Source
31 Ionic $12.3M — Other Details Source
32 Cork V1 $12.0M ethereum Access Control Attacks Details Source
33 BitoPro BitoGroup $11.5M — Access Control Attacks Details Source
34 Garden Finance $11.0M — Other Details Source
35 Garden $10.8M arbitrum, base, ethereum, solana Access Control Attacks Details Source
36 DogWifTools $10.0M solana Access Control Attacks Details Source
37 Resupply $9.6M ethereum Oracle Manipulation & Price Manipulation Details Source
38 zkLend $9.6M starknet Empty Market Exploit / Other Details Source
39 Yearn Finance $9.0M — Other Details Source
40 Yearn Ether $9.0M ethereum yETH stablepool Exploit Details Source
41 Zoth ZeUSD $8.8M ethereum Access Control Attacks Details Source
42 Bunni V2 $8.4M ethereum, unichain Liquidity Distribution Function Exploit / Other Details Source
43 ALEX $8.4M stacks malicious transfer() method Details Source
44 Zoth $8.3M — Access Control Attacks Details Source
45 KiloEx $7.5M base, bsc, taiko Access Control Attacks Details Source
46 Trust Wallet $7.0M bitcoin, ethereum, solana Access Control Attacks Details Source
47 Odin.Fun $7.0M icp Oracle Manipulation & Price Manipulation Details Source
48 Pundi AI $6.0M — Access Control Attacks Details Source
49 Loopscale $5.8M solana Oracle Manipulation & Price Manipulation Details Source
50 BetterBank $5.0M pulsechain Infinite Mint and Dump / Other Details Source
51 ZKsync $5.0M zksync era Access Control Attacks Details Source
52 1inch $5.0M ethereum Arithmetic Overflows Underflows Details Source
53 Aqua $4.7M — Rugpull Details Source
54 CrediX $4.5M sonic Access Control Attacks Details Source
55 Suji Yan $4.0M — Phishing Attacks Details Source
56 Ionic Protocol $4.0M mode Fake Collateral Exploit Details Source
57 Unleash Protocol $3.9M story Access Control Attacks Details Source
58 Flow Network $3.9M — Other Details Source
59 Flow $3.9M flow mint-and-dump Hack Details Source
60 ForceBridge $3.9M nervos Access Control Attacks Details Source
61 Moonwell $3.7M — Oracle Manipulation & Price Manipulation Details Source
62 Nervos Network $3.7M — Access Control Attacks Details Source
63 HyperVault $3.6M hyperliquid l1 Drain Vaults / Rugpull Details Source
64 Typus Finance $3.4M — Oracle Manipulation & Price Manipulation Details Source
65 Typus Perp $3.4M sui TLP Contract Exploit Details Source
66 GANA Payment $3.1M bsc Access Control Attacks Details Source
67 Phishing $3.0M — Phishing Attacks Details Source
68 Beets $3.0M — Access Control Attacks Details Source
69 GriffinAI $3.0M bsc Access Control Attacks Details Source
70 Shibarium $3.0M shibarium Flash Loans Attacks Details Source
71 EOA Token Theft $3.0M — Other Details Source
72 Ribbon $2.7M ethereum Access Control Attacks Details Source
73 1Inch $2.6M — Reentrancy Details Source
74 Arcadia Finance $2.5M — Other Details Source
75 Arcadia V2 $2.5M base Reentrancy Details Source
76 Moby Trade $2.5M — Access Control Attacks Details Source
77 Shibarium $2.4M — Access Control Attacks Details Source
78 Nemo $2.4M — Oracle Manipulation & Price Manipulation Details Source
79 Nemo Yield Trading $2.4M sui Oracle Manipulation & Price Manipulation Details Source
80 Texture $2.2M solana Unclassified Details Source
81 Mobius Token $2.2M bsc Arithmetic Overflows Underflows Details Source
82 Rari Capital $2.0M ethereum Access Control Attacks Details Source
83 New Gold Protocol $2.0M — Flash Loans Attacks Details Source
84 OlaXBT $2.0M bsc Access Control Attacks Details Source
85 MEV Bots $2.0M — Access Control Attacks Details Source
86 Sirio Finance $2.0M hedera Flash Loans Attacks Details Source
87 Phishing $1.8M — Phishing Attacks Details Source
88 Abracadabra Spell $1.7M ethereum Sequential State Manipulation Exploit / Other Details Source
89 Kinto Bridge $1.6M arbitrum ERC1967Proxy Backdoor Hijack Details Source
90 Moby $1.5M arbitrum Access Control Attacks Details Source
91 Kame Aggregator $1.3M sei swap() Function Flaw Details Source
92 LND $1.3M hyperliquid l1, sonic Unclassified Details Source
93 Bitcoin Mission $1.3M arbitrum overPaper Function Exploit Details Source
94 Seedify $1.2M avalanche, bsc Access Control Attacks Details Source
95 US Permissionless Dollar $1.0M ethereum "CPIMP" proxy front-run Details Source
96 Moonwell Lending $1.0M base, optimism Oracle Manipulation & Price Manipulation Details Source
97 BTCM App $1.0M — Other Details Source
98 Mars Perps $960K neutron Thin-Market Skew Exploit Details Source
99 Nitron Demex $950K — Oracle Manipulation & Price Manipulation Details Source
100 Venus Core Pool $902K zksync era Donation Attack Details Source
101 Orange Finance $840K arbitrum Access Control Attacks Details Source
102 Astera.fi $822K linea Flash Loans Attacks Details Source
103 The R0AR $790K — Access Control Attacks Details Source
104 Hyperdrive HL $782K hyperliquid l1 Router Exploit / Other Details Source
105 Phishing $750K — Phishing Attacks Details Source
106 WebKeyDao $737K — Other Details Source
107 SuperRare $730K ethereum Access Control Attacks Details Source
108 Vicuna $700K — Oracle Manipulation & Price Manipulation Details Source
109 Trusta AI $615K — Other Details Source
110 Silo Finance $546K ethereum fillQuote silo.borrow() Exploit Details Source
111 Silo $545K — Other Details Source
112 0G Labs $516K 0g emergencyWithdraw Function Exploit Details Source
113 NumaMoney $506K — Flash Loans Attacks Details Source
114 Zunami $500K — Access Control Attacks Details Source
115 Zunami Protocol $500K ethereum withdrawStuckToken() exploit Details Source
116 Fake LAYER $465K — Rugpull Details Source
117 WaveX $430K — Other Details Source
118 Corepound $430K core Drained Contracts Details Source
119 Cozy Finance $427K — Access Control Attacks Details Source
120 Cozy V2 $427K optimism Insufficient Sender Verification Exploit Details Source
121 Evoq Finance $420K bsc Access Control Attacks Details Source
122 MetaPool $400K — Other Details Source
123 Cardex $400K abstract Access Control Attacks Details Source
124 phishing $394K — Phishing Attacks Details Source
125 Impermax V3 $380K base Zero-Rate Hack / Other Details Source
126 SIR $355K ethereum Transient storage collision / Other Details Source
127 The Idols NFT $340K — Other Details Source
128 EIP-7702 Delegation Contract Exploit $336K — Other Details Source
129 Goldfinch Finance $330K — Other Details Source
130 numa. $320K sonic NumaVault Exploit Details Source
131 Yearn Finance $300K ethereum Flash Loans Attacks Details Source
132 Coinbase $300K ethereum Frontrunning & Sandwich Attacks Details Source
133 Dexodus $300K — Oracle Manipulation & Price Manipulation Details Source
134 Dexodus Finance $300K base Oracle Manipulation & Price Manipulation Details Source
135 Impermax V3 $300K base Flash Loans Attacks Details Source
136 MoonHacker $300K optimism Flash Loans Attacks Details Source
137 Zoth $285K — Oracle Manipulation & Price Manipulation Details Source
138 Malda (prev. Mendi Finance) $273K — Other Details Source
139 FutureSwap $270K ethereum Flash Loans Attacks Details Source
140 Hacken Token $250K — Access Control Attacks Details Source
141 Zerobase $240K — Phishing Attacks Details Source
142 USPD $200K — Access Control Attacks Details Source
143 Peapods Finance $200K ethereum Oracle Manipulation & Price Manipulation Details Source
144 Unilend V2 $200K ethereum Redeem Process Exploit / Other Details Source
145 four.meme $183K bsc Liquidity Pool Exploit / Other Details Source
146 Port3 Network $166K bsc Infinite Mint and Dump Details Source
147 MAID $166K — Access Control Attacks Details Source
148 Sharwa.Finance $147K arbitrum Oracle Manipulation & Price Manipulation Details Source
149 MSCST $130K bsc Frontrunning & Sandwich Attacks Details Source
150 DMi $124K — Other Details Source
151 Anome $120K — Other Details Source
152 ModelpiToken $107K — Other Details Source
153 Hegic(old contract) $94K ethereum Unlimited repeated withdrawal exploit Details Source
154 Squid $90K — Other Details Source
155 Berally $90K berachain Access Control Attacks Details Source
156 StepHeroNFTs $90K — Reentrancy Details Source
157 Tailverse $88K — Other Details Source
158 OracleBNB $80K — Rugpull Details Source
159 Bankroll $65K — Other Details Source
160 AST Token $65K — Other Details Source
161 ACB $60K — Other Details Source
162 MUBARA $55K — Phishing Attacks Details Source
163 Eden Network $54K — Access Control Attacks Details Source
164 LAURA $48K — Other Details Source
165 Usual $43K ethereum Arbitration Exploit / Other Details Source
166 DIMO $40K ethereum Access Control Attacks Details Source
167 AIRWA $34K — Other Details Source
168 OpenOcean $22K — Other Details Source
169 VeloraDEX $20K — Other Details Source
170 Mosca $20K — Other Details Source
171 Raga Finance $18K hyperliquid l1 HyperEVM Delta Neutral Exploit Details Source
172 BIGO $18K — Other Details Source
173 402bridge $17K base Access Control Attacks Details Source
174 BBX Token $12K — Other Details Source
175 Tenderize V2 $11K ethereum Proxy Upgrade Skim Details Source
176 Arcade $5K — Access Control Attacks Details Source
177 Peapods Finance $4K — Other Details Source
178 Panoptic V1.1 — base, ethereum, unichain Unclassified Details Source

Notes

Loss totals use parsed USD values only; unknown or unparseable losses are not guessed. Attack-class links are added only when the root cause is clear enough to map.

Full hack database Filter every tracked incident by chain, date, loss size, and technique. Attack class library Move from incident examples to exploit mechanics and review checklists. Largest crypto hacks Compare this year against the highest-loss incidents in the database.