Embed retired Dashboard still available

Hack Radar embed retired

The public feed endpoint is no longer exposed. For current incident data, send readers to the SCH-hosted Hack Radar dashboard instead of embedding reusable raw data on third-party sites.

No cookies No tracking SDKs No raw JSON feed Server-rendered dashboard
1

Use a dashboard link

The reusable embed is retired. Link to the SCH-hosted dashboard when you need current incident data.

link.html 
<a href="https://smartcontractshacking.com/tools/web3-hacks-dashboard" rel="noopener">View recent Web3 hacks on Smart Contract Hacking</a>
2

Data policy

Current hack data stays on the SCH-hosted page instead of a reusable public feed.

  • /tools/web3-hacks-dashboard Server-rendered, crawlable, and rate-limited as a normal page.
  • /api/public/hacks/recent Removed. Third-party sites cannot fetch raw incident JSON.
  • Existing installs of the legacy script now render a dashboard link instead of live data.
  • No cookies, no tracking SDKs, and no reusable data endpoint for third-party scraping.
3

Attribution

If you reference SCH incident data, link back to the dashboard as the source.

4

No raw feed endpoint

The public JSON feed has been removed. Use the SCH-hosted dashboard for current incident data.

Use cases

Built for security teams & builders

  • Audit firm landing pages

    Show prospects the threat landscape in real time. Anchor your "why audits matter" pitch with live incidents instead of stale screenshots.

  • Protocol status / risk pages

    Display recent ecosystem incidents next to your bug-bounty page so users can self-assess the threat surface before depositing.

  • Security newsletters & blogs

    A sidebar feed your readers will check on every page load. Pulls double-duty as social proof for your security coverage.

  • Dev tool dashboards

    Wallets, indexers, devtools — surface real-time risk context where users already are. Single tag, no SDK to maintain.

FAQ

Questions we get a lot

Is it really free?

Yes. The widget and the JSON API are free for any site as long as the "Powered by SmartContractsHacking.com" link stays intact. Need a white-label version? Get in touch.

How fast does it update?

Our ingestion runs every 30 minutes for rekt.news, every 6 hours for de.fi and DefiLlama. The widget itself caches API responses for 5 minutes, so a refresh shows the latest verified incident within ~5 min of confirmation.

Will it slow down my page?

The script tag uses async so it never blocks page render. The widget is ~3KB gzipped with no dependencies. The single API call is cacheable at the edge.

What about unverified hacks?

Auto-ingested entries that haven't been confirmed by a trusted source (de.fi / DefiLlama) or an admin reviewer are flagged unverified and are not exposed on the public embed API. Your visitors only see verified incidents.

Can I see install metrics?

Yes — the widget reports an anonymous embed view event keyed by the embedding domain. Reach out and we'll send your install count and view metrics. No cookies, no fingerprinting.

Ready to install?

Ship it in under a minute.

Copy the snippet, paste it into your template, push. Your visitors get a live security feed; you get an attribution backlink and free install metrics.

Back to dashboard