Web3 Hacks in 2026

2026 incident records, sorted by known loss. The strongest mapped pattern is Access Control (98 rows); the largest tracked chain bucket is Ethereum ($952.4M).

Open full database

Incident records

Sorted by known reported loss first, then recency. Open the source before treating any summary as final.

Links
101 Hyperbridge Unverified $2.5M — Unclassified Details Source
102 Hyperbridge $2.5M arbitrum, base, bsc, ethereum Fake State Proof / Other / Forged Proof Details Source
103 Aquifer $2.5M solana Other Details Source
104 SecondFi Unverified $2.4M — Unclassified Details Source
105 SecondFi $2.4M cardano Weak Key Generation Details
106 Tessera DAO $2.4M bsc Access Control Attacks Details Source
107 Aztec Connect Unverified $2.3M — Unclassified Details Source
108 FOOM Cash $2.3M base, ethereum Phishing Attacks Details Source
109 Aztec Bridge Unverified $2.2M — Unclassified Details Source
110 Venus $2.2M — Other Details Source
111 Thetanuts Finance $2.1M ethereum Arithmetic Overflow & Underflow Attacks Details Source
112 Aztec Connect $2.1M ethereum Forged Proof Details
113 DYORSWAP / Fake GIWA Bridge $2.1M ethereum Phishing Attacks Details
114 Aztec $2.0M — Other Details Source
115 Aztec $2.0M — Other Details Source
116 DYORSWAP $2.0M — Phishing Attacks Details Source
117 RRWallet $2.0M bitcoin Weak Key Generation Details Source
118 Aztec Bridge $2.0M ethereum Bridge Logic Flaw Details
119 Dango $1.9M dango Donate Negative Amounts Hack / Missing Input Validation Details Source
120 Transit Finance $1.9M tron Access Control Attacks Details Source
121 Payy Network $1.8M ethereum Access Control Attacks Details Source
122 Limit Break Payment Processor $1.8M apechain, base, ethereum, polygon Access Control Attacks Details
123 Moonwell Lending $1.8M base Oracle Manipulation & Price Manipulation Details Source
124 USDC Permit Signature Phishing $1.8M — Phishing Attacks Details Source
125 Notional Finance $1.7M ethereum Other / Arithmetic Error Details Source
126 Maya Protocol $1.7M mayachain Other / Withdrawal Logic Flaw Details Source
127 Taiko Bridge $1.7M taiko Forged Proof Details
128 Taiko $1.7M — Other Details Source
129 BSC TMM/USDT $1.7M bsc Access Control Attacks Details Source
130 Allbridge $1.6M solana Flash Loan Attacks Details Source
131 Zilliqa — zilliqa Biased Schnorr Nonce / Private Key Recovery Details Source
132 Token of Power $1.6M ethereum Access Control Attacks Details Source
133 Fetch.ai $1.5M ethereum Access Control Attacks Details
134 Purrlend $1.5M hyperliquid l1, megaeth Access Control Attacks Details Source
135 ASI Alliance & SingularityNET $1.5M — Access Control Attacks Details Source
136 Gnosis Pay $1.5M gnosis chain Signature Verification Flaw Details
137 Hyperliquid $1.5M — Other Details Source
138 Meteora DAMM V2 $1.5M solana Phishing Attacks Details
139 USDGambit and TLP $1.5M arbitrum Deployer Key Compromised Details
140 Ekubo Protocol $1.4M ethereum Access Control Attacks Details Source
141 TMX $1.4M — Other Details Source
142 TMX TRIBE $1.4M arbitrum Mint & Stake Loop Exploit / Arithmetic Error Details Source
143 Cascade $1.3M arbitrum Oracle Manipulation & Price Manipulation Details Source
144 Raydium $1.3M solana Other / Infinite Mint Details Source
145 Giddy $1.3M ethereum Access Control Attacks Details Source
146 Radix $1.2M radix Access Control Attacks Details
147 CoW Swap $1.2M ethereum DNS Hijack Details
148 Aftermath Perps $1.1M sui Withdrawal Logic Flaw Details
149 LABUBU/OLPC $1.1M bsc Decimal Miscalculation Details
150 Oraichain $1.0M oraichain EVM Cross-Chain Unauthorized Mint Details Source
151 Drift Protocol Unverified $1.0M — Unclassified Details Source
152 LML/USDT staking protocol $950K bsc Oracle Manipulation & Price Manipulation Details Source
153 42DAO $912K bsc Oracle Manipulation & Price Manipulation Details Source
154 MOKE Token $907K bsc Access Control Attacks Details Source
155 Solido Cash $900K supra Oracle Manipulation & Price Manipulation Details Source
156 Virtue $894K iota Oracle Manipulation & Price Manipulation Details
157 Echo Bridge $821K monad Access Control Attacks Details
158 Hinkal $820K ethereum Other / Deposit Logic Flaw Details Source
159 Echo Protocol $816K — Access Control Attacks Details Source
160 Alephium $815K ethereum Other / Forged Proof Details Source
161 Gyroscope $807K — Access Control Attacks Details Source
162 BarnBridge $777K ethereum Malicious Proposal Details Source
163 Ajna V2 $775K ethereum Liquidation Logic Flaw Details
164 WEMIX $737K wemix3 0 Access Control Attacks Details Source
165 Chainflip $736K tron Other / Bridge Logic Flaw Details Source
166 TeleSwap $735K bitcoin Hot Wallet Key Compromised Details Source
167 CometDEX $718K stellar Incorrect Share Accounting Details Source
168 XPlayer $717K — Flash Loan Attacks Details Source
169 Polymarket $700K polygon Access Control Attacks Details
170 LOOPSDAO $694K bsc Oracle Manipulation & Price Manipulation Details Source
171 BCE $679K bsc Incorrect Share Accounting Details
172 BCE Token $679K — Other Details Source
173 The Sandbox $675K base, bsc, ethereum Access Control Attacks Details Source
174 RiseX $673K rise Access Control Attacks Details Source
175 ChainConnect $650K avalanche, bsc, ethereum, polygon Access Control Attacks Details Source
176 Adshares $628K ethereum Forged Proof Details
177 Swan Treasury $625K bsc Access Control Attacks Details Source
178 Meme Coin Phishing Scam $600K — Phishing Attacks Details Source
179 Namada Shielded Pools $600K namada Unbacked Cross-Chain Mint Details
180 Flamincome $595K ethereum Flash Loan Attacks Details Source
181 DeFiTuna $580K solana Other / Swap Logic Flaw Details Source
182 LULA $578K bsc Access Control Attacks Details Source
183 Projekt (GREEN/GOLD) $560K ethereum Flash Loan Attacks Details Source
184 Lien $542K ethereum Bond Group Validation Flaw Details Source
185 BlueMove DEX $529K sui Reserve Desynchronization / Incorrect Share Accounting Details Source
186 SquidMulticall Approval Exploitation $517K arbitrum, avalanche, base, bsc, optimism Access Control Attacks Details Source
187 Avici $501K solana Access Control Attacks Details Source
188 Flooring Protocol $500K ethereum Infinite Mint Details
189 AFI Protocol $480K ethereum Unknown Details
190 Bankr $480K base Phishing Attacks Details Source
191 NuNet $463K ethereum Access Control Attacks Details
192 Holdstation $462K — Access Control Attacks Details Source
193 Aurellion $456K arbitrum Access Control Attacks Details Source
194 Garden Finance $450K arbitrum, base, bsc, ethereum Other / Database Breach Details Source
195 Aethir $423K bsc Access Control Attacks Details Source
196 Singularity Finance $413K base Oracle Manipulation & Price Manipulation Details
197 Ankr $410K flow Unbacked Mint Details
198 Velar Perps $401K mezo Oracle Manipulation & Price Manipulation Details
199 Syndicate $400K base Access Control Attacks Details Source
200 YieldCore $399K ethereum Access Control Attacks Details

Notes

Loss totals use parsed USD values only; unknown or unparseable losses are not guessed. Attack-class links are added only when the root cause is clear enough to map.

Full hack database Filter every tracked incident by chain, date, loss size, and technique. Attack class library Move from incident examples to exploit mechanics and review checklists. Largest crypto hacks Compare this year against the highest-loss incidents in the database.