Web3 Hacks in 2026

2026 incident records, sorted by known loss. The strongest mapped pattern is Access Control (106 rows); the largest tracked chain bucket is Ethereum ($7.4B).

Open full database

Incident records

Sorted by known reported loss first, then recency. Open the source before treating any summary as final.

Links
101 Notional Finance $1.7M ethereum Other / Arithmetic Error Details Source23
102 Maya Protocol $1.7M mayachain Other / Withdrawal Logic Flaw Details Source2
103 Taiko $1.7M taiko Other / Forged Proof Details Source
104 BSC TMM/USDT $1.7M bsc Access Control Attacks Details Source
105 Allbridge $1.6M solana Flash Loan Attacks Details Source23
106 Zilliqa — zilliqa Biased Schnorr Nonce / Private Key Recovery Details Source
107 Token of Power $1.6M ethereum Access Control Attacks Details Source23
108 ASI Alliance & SingularityNET $1.5M ethereum Access Control Attacks Details Source234
109 Gnosis Pay $1.5M gnosis chain Signature Verification Flaw Details
110 Purrlend $1.5M hyperliquid l1, megaeth Access Control Attacks Details Source
111 Hyperliquid $1.5M — Other Details Source2
112 Meteora DAMM V2 $1.5M solana Phishing Attacks Details
113 UNCX $1.5M — Other Details Source23
114 b14g $1.4M core Unknown / Other Details Source2
115 Ekubo Protocol $1.4M ethereum Access Control Attacks Details Source2
116 TMX $1.4M arbitrum Other / Mint & Stake Loop Exploit / Arithmetic Error / Deployer Key Compromised Details Source2
117 Cascade $1.3M arbitrum Oracle Manipulation & Price Manipulation Details Source
118 Raydium $1.3M solana Other / Infinite Mint Details Source2
119 Qubic $1.3M qubic Other / Weak Key Generation Details Source2
120 Giddy $1.3M ethereum Access Control Attacks Details Source
121 Papertrade $1.3M hyperliquid l1 Oracle Manipulation & Price Manipulation Details Source
122 Radix $1.2M radix Access Control Attacks Details
123 CoW Swap $1.2M ethereum DNS Hijack Details
124 Aftermath Perps $1.1M sui Withdrawal Logic Flaw Details
125 LABUBU/OLPC $1.1M bsc Decimal Miscalculation Details
126 Affluent $1.1M ton Unbacked Mint Details
127 TranchePool $1.0M — Other Details Source2
128 Fence Finance $1.0M avalanche Incorrect Share Accounting Details
129 Oraichain $1.0M oraichain EVM Cross-Chain Unauthorized Mint Details Source
130 Bloom Trading Bot $953K solana Supply Chain Attack Details
131 LML/USDT staking protocol $950K bsc Oracle Manipulation & Price Manipulation Details Source
132 Sovryn (Lending & Margin) $914K rootstock Unknown Details
133 42DAO $912K bsc Oracle Manipulation & Price Manipulation Details Source
134 MOKE Token $907K bsc Access Control Attacks Details Source2
135 Solido Cash $900K supra Oracle Manipulation & Price Manipulation Details Source23
136 Virtue $894K iota Oracle Manipulation & Price Manipulation Details
137 Aave V3 $862K ethereum Oracle Manipulation & Price Manipulation Details Source
138 Echo Protocol $821K monad Access Control Attacks Details Source23
139 Hinkal $820K ethereum Other / Deposit Logic Flaw Details Source2
140 Alephium $815K ethereum Other / Forged Proof Details Source2
141 Gyroscope $807K — Access Control Attacks Details Source2
142 zkLink Nova $783K ethereum Cross-Chain Message Spoofing Details
143 BarnBridge $777K ethereum Malicious Proposal Details Source
144 Ajna V2 $775K ethereum Liquidation Logic Flaw Details
145 Autheo Network $750K — Other Details Source2
146 WEMIX $737K wemix3 0 Access Control Attacks Details Source
147 Chainflip $736K tron Other / Bridge Logic Flaw Details Source23
148 TeleSwap $735K bitcoin Hot Wallet Key Compromised Details Source
149 CometDEX $718K stellar Incorrect Share Accounting Details Source
150 XPlayer $717K — Flash Loan Attacks Details Source2
151 Polymarket $700K polygon Access Control Attacks Details
152 LOOPSDAO $694K bsc Oracle Manipulation & Price Manipulation Details Source2
153 BCE Token $679K bsc Other / Incorrect Share Accounting Details Source2
154 The Sandbox $675K base, bsc, ethereum Access Control Attacks Details Source23
155 RiseX $673K rise Access Control Attacks Details Source
156 Troves $667K — Access Control Attacks Details
157 ACryptoS $665K arbitrum, base, bsc +2 Missing Input Validation Details
158 ChainConnect $650K avalanche, bsc, ethereum +1 Access Control Attacks Details Source
159 Adshares $628K ethereum Forged Proof Details
160 Swan Treasury $625K bsc Access Control Attacks Details Source
161 Initia $615K initia Access Control Attacks Details
162 Meme Coin Phishing Scam $600K — Phishing Attacks Details Source
163 Namada Shielded Pools $600K namada Unbacked Cross-Chain Mint Details
164 Flamincome $595K ethereum Flash Loan Attacks Details Source
165 DeFiTuna $580K solana Other / Swap Logic Flaw Details Source23
166 LULA $578K bsc Access Control Attacks Details Source2
167 Projekt (GREEN/GOLD) $560K ethereum Flash Loan Attacks Details Source
168 TENDRIL $550K bsc Flash Loan Attacks Details
169 Lien $542K ethereum Bond Group Validation Flaw Details Source
170 Sovryn Dex $539K rootstock Unknown Details
171 MakerDAO ETH-A Liquidation Keeper Bot $538K ethereum Access Control Attacks Details
172 BlueMove DEX $529K sui Reserve Desynchronization / Incorrect Share Accounting Details Source
173 SquidMulticall Approval Exploitation $517K arbitrum, avalanche, base +2 Access Control Attacks Details Source
174 Avici $501K solana Access Control Attacks Details Source
175 Flooring Protocol $500K ethereum Infinite Mint Details
176 AFI Protocol $480K ethereum Unknown Details
177 Bankr $480K base Phishing Attacks Details Source
178 NuNet $463K ethereum Access Control Attacks Details
179 Holdstation $462K — Access Control Attacks Details Source2
180 Aurellion $456K arbitrum Access Control Attacks Details Source23
181 Garden Finance $450K arbitrum, base, bsc +1 Other / Database Breach Details Source2
182 Premia V3 $437K arbitrum Withdrawal Logic Flaw / Other Details Source2
183 Singularity Finance $413K base Oracle Manipulation & Price Manipulation Details
184 Ankr $410K flow Unbacked Mint Details
185 Edel Finance $403K ethereum Flash Loan Attacks Details Source
186 Velar Perps $401K mezo Oracle Manipulation & Price Manipulation Details
187 Predict Fun $400K bsc Access Control Attacks Details Source
188 Aethir $400K bsc Access Control Attacks Details Source
189 YieldCore $399K ethereum Access Control Attacks Details
190 FutureSwap $395K arbitrum Withdrawal Logic Flaw Details
191 BitMart $391K arbitrum, base, optimism Unknown Details
192 Ploutos Money $390K ethereum Oracle Manipulation & Price Manipulation Details Source2
193 Kimchi Token $385K — Rugpull Details Source
194 Syndicate $380K base Access Control Attacks Details Source23
195 Little Boy Plus $367K bsc Arithmetic Error Details
196 Silo V2 $359K arbitrum Oracle Manipulation & Price Manipulation Details Source
197 SQ Protocol $346K bsc Access Control Attacks Details
198 Symbiosis $336K bsc, ethereum Unbacked Cross-Chain Mint Details
199 IPOR Fusion $336K arbitrum Access Control Attacks Details Source
200 ZetaChain $334K arbitrum, avalanche, base +3 Access Control Attacks Details Source2

Notes

Loss totals use parsed USD values only; unknown or unparseable losses are not guessed. Attack-class links are added only when the root cause is clear enough to map.

Full hack database Filter every tracked incident by chain, date, loss size, and technique. Attack class library Move from incident examples to exploit mechanics and review checklists. Largest crypto hacks Compare this year against the highest-loss incidents in the database.