Web3 Hacks in 2025

2025 incident records, sorted by known loss. The strongest mapped pattern is Access Control (78 rows); the largest tracked chain bucket is Ethereum ($2.1B).

Open full database

Incident records

Sorted by known reported loss first, then recency. Open the source before treating any summary as final.

Links
101 Astera.fi $822K linea Flash Loan Attacks Details Source
102 The R0AR $790K ethereum Access Control Attacks Details Source
103 Hyperdrive HL $782K hyperliquid l1 Access Control Attacks Details Source
104 Phishing $750K — Phishing Attacks Details Source
105 WebKeyDao $737K bsc Access Control Attacks Details Source
106 SuperRare $730K ethereum Access Control Attacks Details Source
107 Aerodrome V1 $700K ethereum, optimism DNS Hijack Details
108 Vicuna $700K sonic Oracle Manipulation & Price Manipulation Details Source
109 Trusta AI $615K — Other Details Source
110 IPC AI $590K binance Swap Logic Flaw Details
111 Silo Finance $546K ethereum fillQuote silo.borrow() Exploit / Missing Input Validation / Other Details Source
112 Agentic FoF $531K ethereum Unknown Details
113 0G Labs $516K 0g emergencyWithdraw Function Exploit / Withdrawal Logic Flaw Details Source
114 Numa $506K arbitrum Oracle Manipulation & Price Manipulation Details
115 NumaMoney $506K — Flash Loan Attacks Details Source
116 Polymarket $500K ethereum, polygon Phishing Attacks Details
117 Zunami Protocol $500K ethereum Access Control Attacks Details Source
118 Fake LAYER $465K — Rugpull Details Source
119 WaveX $430K — Other Details Source
120 Corepound $430K core Drained Contracts / Admin Drain Details Source
121 Cozy V2 $427K optimism Access Control Attacks Details Source
122 Evoq Finance $420K bsc Access Control Attacks Details Source
123 Cardex $400K abstract Access Control Attacks Details Source
124 phishing $394K — Phishing Attacks Details Source
125 Impermax V3 $380K base Zero-Rate Hack / Other / Liquidation Logic Flaw Details Source
126 SIR $355K ethereum Access Control Attacks Details Source
127 The Idols NFT $340K ethereum Other / Reward Logic Flaw Details Source
128 EIP-7702 Delegation Contract Exploit $336K — Other Details Source
129 Goldfinch Finance $330K ethereum Access Control Attacks Details Source
130 Voltage V3 $322K fuse Access Control Attacks Details
131 numa. $320K sonic NumaVault Exploit / Incorrect Share Accounting Details Source
132 Yearn Finance $300K ethereum Flash Loan Attacks Details Source
133 Coinbase $300K ethereum Access Control Attacks Details Source
134 Dexodus Finance $300K base Oracle Manipulation & Price Manipulation Details Source
135 Impermax V3 $300K base Flash Loan Attacks Details Source
136 MoonHacker $300K optimism Access Control Attacks Details Source
137 Zoth ZeUSD $285K ethereum Swap Logic Flaw Details
138 Zoth $285K — Oracle Manipulation & Price Manipulation Details Source
139 Malda (prev. Mendi Finance) $273K — Other Details Source
140 FutureSwap $270K ethereum Flash Loan Attacks Details Source
141 Zerobase $250K bsc Access Control Attacks Details Source
142 Hacken Token $250K — Access Control Attacks Details Source
143 Peapods Finance $207K ethereum Oracle Manipulation & Price Manipulation Details Source
144 RANT $204K bsc Incorrect Fee Accounting Details
145 USPD $200K — Access Control Attacks Details Source
146 Unilend V2 $200K ethereum Redeem Process Exploit / Other / Redeem Logic Flaw Details Source
147 four.meme $183K bsc Liquidity Pool Exploit / Other / Swap Logic Flaw Details Source
148 DoodiPals $171K solana Access Control Attacks Details
149 FilDA $167K elastos Oracle Manipulation & Price Manipulation Details
150 Port3 Network $166K bsc Infinite Mint and Dump / Infinite Mint Details Source
151 MAID $166K — Access Control Attacks Details Source
152 Sharwa.Finance $147K arbitrum Oracle Manipulation & Price Manipulation Details Source
153 Pond.fun $145K linea Admin Drain Details
154 Dexmax AI $130K ethereum Access Control Attacks Details
155 Meta Pool $130K ethereum Infinite Mint / Other Details Source
156 MSCST $130K bsc Access Control Attacks Details Source
157 DMi $124K — Flash Loan Attacks Details Source
158 Anome $120K — Other Details Source
159 ModelpiToken $107K — Other Details Source
160 DRLVaultV3 $100K ethereum Oracle Manipulation & Price Manipulation Details
161 QuantMaster $100K ethereum Backdoor Contract Details
162 Alkimiya $96K ethereum Arithmetic Error Details
163 Hegic(old contract) $94K ethereum Unlimited repeated withdrawal exploit / Withdrawal Logic Flaw Details Source
164 Squid $90K — Other Details Source
165 Berally $90K berachain Access Control Attacks Details Source
166 StepHeroNFTs $90K bsc Reentrancy Details Source
167 Tailverse $88K — Other Details Source
168 OracleBNB $80K — Rugpull Details Source
169 four.meme $80K bsc Access Control Attacks Details
170 IRYS AI $70K bsc Backdoor Contract Details
171 Bankroll $65K bsc Other / Arithmetic Error Details Source
172 AST Token $65K — Other Details Source
173 Grizzifi $61K bsc Reward Logic Flaw Details
174 ACB $60K — Other Details Source
175 dTRINITY $56K sonic Access Control Attacks Details
176 MUBARA $55K — Phishing Attacks Details Source
177 Eden Network $54K — Access Control Attacks Details Source
178 LAURA $48K — Other Details Source
179 Stepp2p $43K bsc Unknown Details
180 Usual $43K ethereum Arbitration Exploit / Other / Missing Input Validation Details Source
181 Sorra Finance $41K ethereum Reward Logic Flaw Details
182 DIMO $40K ethereum Access Control Attacks Details Source
183 Mosca2 $38K bsc Incorrect Share Accounting Details
184 Mosca $38K binance Incorrect Share Accounting Details
185 AIRWA $34K bsc Access Control Attacks Details Source
186 TokenHolder $26K bsc Access Control Attacks Details
187 ACB $23K bsc Oracle Manipulation & Price Manipulation Details
188 OpenOcean $22K — Other Details Source
189 VeloraDEX $20K — Delegatecall & Call Injection Attacks Details Source
190 Mosca $20K — Other Details Source
191 Raga Finance $18K hyperliquid l1 HyperEVM Delta Neutral Exploit / Unknown Details Source
192 BIGO $18K — Other Details Source
193 402bridge $18K base Access Control Attacks Details Source
194 BBX Token $12K bsc Oracle Manipulation & Price Manipulation Details Source
195 Tenderize V2 $11K ethereum Proxy Upgrade Skim / Unknown Details Source
196 Aventa $7K ethereum Unknown Details
197 Unverified_35bc $7K bsc Reentrancy Details
198 Arcade $5K — Access Control Attacks Details Source
199 Peapods Finance $4K — Other Details Source
200 FixedTokenBSwap $2K ethereum Oracle Manipulation & Price Manipulation Details

Notes

Loss totals use parsed USD values only; unknown or unparseable losses are not guessed. Attack-class links are added only when the root cause is clear enough to map.

Full hack database Filter every tracked incident by chain, date, loss size, and technique. Attack class library Move from incident examples to exploit mechanics and review checklists. Largest crypto hacks Compare this year against the highest-loss incidents in the database.