Back to index
Website

Trail of Bits

Source-linked audit records across verified incidents—documenting associations, not causality or audit quality.

28
Incident links
23
Distinct protocols
$657.1M
Stolen funds
21
Linked reports

Most represented chains

  • ethereum24
  • arbitrum2
  • base2
  • unichain2
  • bsc2

Incident techniques

  • Other / Reentrancy2
  • Other / Bridge Logic Flaw1
  • Liquidation Logic Flaw1
  • + 2 more

Source-linked incidents

About these records

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

DateIncidentChains and techniqueStolen fundsAudit reportIncident
Chainflip
tronOther / Bridge Logic Flaw
 $736K Report Incident
Ajna V2
ethereumLiquidation Logic Flaw
 $775K Report Incident
FutureSwap
ethereumFlashloan Governance Attack
 $270K Report 1 Report 2 Incident
Balancer V2
arbitrumbaseethereumoptimismpolygonsonicComposable Stable Pools Exploit / Access Control / Rounding Error
 $128.0M Report Incident
Bunni V2
ethereumunichainWithdrawal Rounding Error
 $8.4M Report Incident
Panoptic V1.1
baseethereumunichainHash Collision
 $0 Report Incident
Minterest
mantleReentrancy / Other
 $1.5M Report Incident
Yield Protocol
arbitrumBalance Disparity Exploit / Incorrect Share Accounting
 $181K Report Incident
Raft
ethereumInfinite Mint and Dump / Other / Infinite Mint
 $3.3M Report Incident
Balancer V2
ethereumFrontend Attack / Other / Frontend Compromise
 $238K Report Incident
Balancer V2
ethereumSpot Price Manipulation / Flash Loan Attack
 $800K Report Incident
Multichain
bscfantommoonriverPrivate Key Compromised (Unknown Method) / Validator Key Compromised / Access Control
 $126.0M Report Incident
Yearn Finance
ethereumFlashloan Misconfiguration Exploit / Flash Loan Attack / Oracle Misconfiguration
 $11.5M — Incident
Swerve Finance
ethereumOther / Malicious Proposal
 $1.3M Report Incident
Multichain
ethereumOther / Signature Verification Flaw
 $147K Report Incident
DFX Finance
ethereumOther / Reentrancy
 $7.6M Report Incident
Beanstalk
ethereumFlashloan Governance Attack / Flash Loan Attack
 $181.0M Report Incident
Multichain
ethereumOther / Missing Input Validation
 $2.7M Report Incident
Cream Finance
ethereumFlash Loan Attack / Flashloan Price Oracle Attack / Spot Price Manipulation
 $130.0M Report Incident
Compound V2
ethereumReward index initialization error
 $0 Report 1 Report 2 Report 3 Incident
Cream Finance
ethereumOther / Flashloan Reentrancy Attack / Reentrancy
 $36.2M Report Incident
Anyswap
bscethereumfantomAccess Control / Private Key Compromised (Bad ECDSA Implementation) / Weak Key Generation
 $7.9M Report Incident
88mph
ethereumMissing Input Validation
 $0 Report Incident
Uniswap-V3
ethereumHoneypot
 $0 Report Incident
Warp Protocol
ethereumFlash-loan manipulation of LP-token valuation
 $7.8M Report Incident
Balancer
ethereumFlash Loan Attack / Incorrect Share Accounting
 $524K — Incident
Hegic
ethereumOther / Deposit Logic Flaw
 $0 — Incident
Uniswap
ethereumOther / Reentrancy
 $232K Report Incident

Bring in Ginger Security before code goes live.

Get a tailored security review estimate for your architecture and release scope.

Estimate your audit