Back to index
Website

Trail of Bits

Source-linked audit records across verified incidents—documenting associations, not causality or audit quality.

28
Incident links
21
Distinct protocols
$1.0B
Stolen funds
19
Linked reports

Source-linked incidents

Balancer V2
arbitrumbaseethereumoptimismpolygonsonicComposable Stable Pools Exploit / Access Control / Rounding Error
Stolen funds
$128.0M
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit document

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Bunni V2
ethereumunichainLiquidity Distribution Function Exploit / Other / Rounding Error
Stolen funds
$8.4M
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit document

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Panoptic V1.1
baseethereumunichainHash Collision
Stolen funds
$0
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit document

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Minterest
mantleReentrancy / Other
Stolen funds
$1.5M
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Yield Protocol
arbitrumBalance Disparity Exploit / Incorrect Share Accounting
Stolen funds
$181K
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Raft
ethereumInfinite Mint and Dump / Other / Infinite Mint
Stolen funds
$3.3M
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Balancer V2
ethereumFrontend Attack / Other / Frontend Compromise
Stolen funds
$238K
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit document

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Balancer V2
ethereumSpot Price Manipulation
Stolen funds
$800K
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit document

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Multichain
bscfantommoonriverPrivate Key Compromised (Unknown Method) / Validator Key Compromised
Stolen funds
$126.0M
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit document

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Multichain
Access Control
Stolen funds
$231.1M
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit document

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Yearn Finance
ethereumFlashloan Misconfiguration Exploit / Flash Loan Attack / Oracle Misconfiguration
Stolen funds
$11.5M
Audit date
Apr 2021
Sources and audit reports
Source types

Named claim · de.fi source record

Audit reports

No public report URL captured.

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Rocket Pool
ethereumPhishing
Stolen funds
$3.8M
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Swerve
ethereumMalicious Proposal
Stolen funds
$1.3M
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit document

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Multichain
ethereumOther / Signature Verification Flaw
Stolen funds
$147K
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit document

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

DFX V2
ethereumReentrancy
Stolen funds
$4.0M
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Beanstalk
ethereumFlashloan Governance Attack / Flash Loan Attack
Stolen funds
$181.0M
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Multichain
ethereumOther / Missing Input Validation
Stolen funds
$2.7M
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit document

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

CREAM Lending
ethereumFlashloan Price Oracle Attack / Spot Price Manipulation
Stolen funds
$130.0M
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit document

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Compound V2
ethereumMath Mistake Exploit / Arithmetic Error
Stolen funds
$147.0M
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit document

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

CREAM Lending
ethereumFlashloan Reentrancy Attack / Reentrancy
Stolen funds
$18.8M
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit document

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Multichain
bscethereumfantomPrivate Key Compromised (Bad ECDSA Implementation) / Weak Key Generation
Stolen funds
$7.9M
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit document

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

88mph
ethereumMissing Input Validation
Stolen funds
$0
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit document

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Uniswap-V3
ethereumHoneypot
Stolen funds
$0
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit document

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Warp Protocol
ethereumFlashloan Price Oracle Attack / Spot Price Manipulation / Flash Loan Attack
Stolen funds
$7.8M
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Balancer
ethereumFlash Loan Attack / Incorrect Share Accounting
Stolen funds
$524K
Audit date
Mar 2020
Sources and audit reports
Source types

Named claim · de.fi source record

Audit reports

No public report URL captured.

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Hegic
Other
Stolen funds
$48K
Audit date
Apr 2020
Sources and audit reports
Source types

Named claim · de.fi source record

Audit reports

No public report URL captured.

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Uniswap V1
ethereumReentrancy
Stolen funds
$220K
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit document

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Chain Fusion
ethereumPrivate Key Compromised
Stolen funds
$6.4M
Audit date
Not recorded
Sources and audit reports
Source types

Report · Protocol audit archive

Audit reports

This record documents a source association. It does not infer scope, deployed-version coverage, causality, or audit quality unless explicitly reviewed.

Bring in Ginger Security before code goes live.

Get a tailored security review estimate for your architecture and release scope.

Estimate your audit