Back to index
Website

CertiK

Source-linked audit records across verified incidents—documenting associations, not causality or audit quality.

67
Incident links
56
Distinct protocols
$302.9M
Stolen funds
51
Linked reports

Source-linked incidents

Arrakis V1
ethereumSpot Price Manipulation
Stolen funds
$7K
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Lixir Finance
ethereumSignature Verification Flaw
Stolen funds
$12K
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit document

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

DxSale
bscLiquidity Rug
Stolen funds
$7.3M
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

THORChain
basebitcoinbscethereumOther / Bridge Logic Flaw
Stolen funds
$10.7M
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Juicebox V3
ethereumMissing Input Validation
Stolen funds
$52K
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Venus Core Pool
bscDonation Attack
Stolen funds
$3.7M
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Goose Finance
bscShare Accounting Flaw / Incorrect Share Accounting
Stolen funds
$8K
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

CrediX
sonicPrivate Key Compromised / Access Control
Stolen funds
$4.5M
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Venus Core Pool
zksync eraDonation Attack
Stolen funds
$902K
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

1inch
ethereumCalldata underflow and resolver hijack / Arbitrary External Call
Stolen funds
$5.0M
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit document

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

1Inch
Reentrancy
Stolen funds
$2.6M
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit document

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

The Idols NFT
ethereumOther / Reward Logic Flaw
Stolen funds
$340K
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

1inch
avalanchePrivate Key Compromised (Supply Chain Attack) / Supply Chain Attack
Stolen funds
$723K
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit document

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

ReHold
ethereumAdmin Drain
Stolen funds
$700K
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Convergence
ethereumMissing Input Validation / Other
Stolen funds
$210K
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Chainge Finance
bscOther / Arbitrary External Call
Stolen funds
$716K
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Sumer.Money
baseFlash Loan Attack / Reentrancy
Stolen funds
$350K
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit document

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

WOOFi Swap
arbitrumPrice Oracle Manipulation / Flash Loan Attack / Spot Price Manipulation
Stolen funds
$8.8M
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Starlay Finance
acalaRedeem Logic Flaw
Stolen funds
$2.1M
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Telcoin
polygonOther / Uninitialized Proxy
Stolen funds
$1.3M
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Elephant Money
Flash Loan Attack
Stolen funds
$163K
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

SpookySwap
fantomFrontend Compromise
Stolen funds
$5K
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Onyx Protocol
ethereumFlashloan Donate Function Logic Exploit / Flash Loan Attack / Donation Attack
Stolen funds
$2.1M
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Linear Finance
Other
Stolen funds
$212K
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

SharedStake
ethereumOwnership Override Attack / Ownership Takeover
Stolen funds
$175K
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Sturdy V1
ethereumFlashloan Reentrancy Attack / Read-Only Reentrancy / Oracle Issue
Stolen funds
$775K
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

unshETH
ethereumAccess Control / Key Stored Publicly
Stolen funds
$375K
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Swaprum
arbitrumDrained Contracts / Rugpull / Backdoor Contract
Stolen funds
$3.0M
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

DEUS Finance
arbitrumbscethereumBurn Function Mistake / Other / Arithmetic Error
Stolen funds
$6.5M
Audit date
Jun 2021
Sources and audit reports
Source types

Named claim · de.fi source record

Audit reports

No public report URL captured.

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

MERLIN DEX
zksync eraDrained Contracts / Access Control / Admin Drain
Stolen funds
$1.8M
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Orion Pools
bscReentrancy
Stolen funds
$3.0M
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Thoreum Finance
bscAccess Control / Swap Logic Flaw
Stolen funds
$580K
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Amun
ethereumpolygonControlled Rebalance Manipulation / Improper Access Control
Stolen funds
$300K
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Rubic
ethereumRouter Exploit / Other / Arbitrary External Call
Stolen funds
$1.4M
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

TiFi
bscSpot Price Manipulation
Stolen funds
$44K
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Rubic
ethereumAccess Control / Private Key Compromised
Stolen funds
$1.2M
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Deri Protocol
Other
Stolen funds
$145K
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit document

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Impermax
ethereumpolygonOther / Private Key Compromised
Stolen funds
$9.0M
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit document

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Gym Network
bscDeposit Function Exploit / Other / Improper Access Control
Stolen funds
$2.1M
Audit date
May 2022
Sources and audit reports
Source types

Named claim · de.fi source record

Audit reports

No public report URL captured.

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

MM Finance Cronos
cronosDNS Spoofing / DNS Hijack
Stolen funds
$2.0M
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Saddle Finance
ethereumFlashloan Swap Logic Exploit / Other / Swap Logic Flaw
Stolen funds
$11.0M
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Elephant Money
bscFlashloan Price Oracle Attack / Flash Loan Attack / Spot Price Manipulation
Stolen funds
$22.2M
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Grim Finance
fantomFlashloan Reentrancy Attack / Reentrancy
Stolen funds
$40.0M
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Brinc Finance
Other
Stolen funds
$1.1M
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

ShibaSwap
binanceHoneypot
Stolen funds
$0
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Vee Finance
avalancheFlashloan Price Oracle Attack / Other / Spot Price Manipulation
Stolen funds
$36.0M
Audit date
May 2021
Sources and audit reports
Source types

Named claim · de.fi source record

Audit reports

No public report URL captured.

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

xToken
ethereumFlashloan Price Oracle Attack / Flash Loan Attack / Spot Price Manipulation
Stolen funds
$4.5M
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit document

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Popsicle Finance
ethereumFlashloan Incentive Rewards Exploit / Other / Reward Logic Flaw
Stolen funds
$20.7M
Audit date
May 2021
Sources and audit reports
Source types

Named claim, Report · Protocol audit document, de.fi source record

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Levyathan
binancebscPrivate Key Compromised (Stored Publicly) / Other / Key Stored Publicly
Stolen funds
$1.5M
Audit date
May 2021
Sources and audit reports
Source types

Named claim · de.fi source record

Audit reports

No public report URL captured.

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Thorchain DEX
ethereumRefund Logic Exploit / Other / Withdrawal Logic Flaw
Stolen funds
$8.0M
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Thorchain DEX
ethereumOver-ride Logic Exploit / Other / Bridge Logic Flaw
Stolen funds
$5.0M
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

THORChain DEX
ethereumBridge Logic Flaw
Stolen funds
$350K
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

xWin Finance
bscOther / Missing Input Validation
Stolen funds
$270K
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

SharedStake
ethereumAccess Control / Improper Access Control
Stolen funds
$500K
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

88mph
ethereumMissing Input Validation
Stolen funds
$0
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit document

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Hunny Finance
bscIncorrect Share Accounting
Stolen funds
$0
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Telcoin
binanceHoneypot
Stolen funds
$0
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

xToken
ethereumFlashloan Price Oracle Attack / Flash Loan Attack / Spot Price Manipulation
Stolen funds
$24.0M
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit document

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Spartan Protocol
binancebscFlash Loan Attack / Flashloan Pool Shares Exploit / Incorrect Share Accounting
Stolen funds
$30.5M
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

makiswap.com
ethereumHoneypot
Stolen funds
$0
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

NAOS Finance
ethereumHoneypot
Stolen funds
$0
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Infinity Cat
ethereumHoneypot
Stolen funds
$0
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Stonedefi.io
ethereumHoneypot
Stolen funds
$0
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

DODO AMM
ethereumAccess Control Exploit / Other / Improper Access Control
Stolen funds
$3.8M
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit document

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Saddle Finance
Other
Stolen funds
$276K
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Soda Protocol
ethereumWithdrawal Logic Flaw
Stolen funds
$160K
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

bZx
ethereumOther
Stolen funds
$8.1M
Audit date
Sep 2020
Sources and audit reports
Source types

Named claim · de.fi source record

Audit reports

No public report URL captured.

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Bring in Ginger Security before code goes live.

Get a tailored security review estimate for your architecture and release scope.

Estimate your audit