Web3 Hacks & DeFi Exploit Intelligence
- $104B+Lost
- 3836Incidents
- 124Chains
- 16Classes
Search
Chain
0g
abstract
acala
aeternity
algorand
aptos
arbitrum
aurumcoin
avalanche
base
berachain
binance
bitcoin
bitcoin gold
bitcoincash
blast
bob
bsc
cardano
casper
celo
chia
comdex
conflux
core
coreum
cronos
dagger
dango
doge
elastos
elrond
eos
etc
ethereum
ethereum classic
fantom
flow
fuse
gnosis chain
grin
harmony
haven
heco
hedera
huobi eco chain
hyperliquid l1
icon
icp
iota
kadena
klaytn
linea
litecoin
loopring
mantle
mayachain
megaeth
metis
mezo
mixin
mode
monacoin
monad
monero
moonriver
multi chain
multiple
namada
nano
near
nem
nervos
neutron
nuls
optimism
oraichain
osmosis
polkadot
polygon
polygon zkevm
polynetwork
pulsechain
quicksilver
ravencoin
rei network
ripple
rise
rootstock
rsk
saga
scroll
secret
sei
shibarium
solana
sonic
stacks
starknet
stellar
story
sui
supra
syscoin
tac
taiko
terra
terra classic
terra2
tezos
ton
tron
unichain
vechain
verge
vertcoin
verus
wemix
wemix3 0
xrp
xrpl
zencash
zilliqa
zksync era
Technique
"CPIMP" proxy front-run / Proxy Upgrade Hijack
API Key Compromised
API Key unauthorized access / API Key Compromised
API Signature Exploit / Deposit Logic Flaw
Abandoned
Abandoned / Arbitrary External Call
Acces Control Exploit / Access Control / Improper Access Control
Acces Control Exploit / Improper Access Control
Acces Control Exploit / Other / Improper Access Control
Access Control
Access Control / Admin Drain
Access Control / Bridge Logic Flaw
Access Control / Caller Impersonation
Access Control / Cross-Chain Message Spoofing
Access Control / DNS Hijack
Access Control / Deployer Key Compromised
Access Control / Forged Proof
Access Control / Frontend Compromise
Access Control / Hot Wallet Key Compromised
Access Control / Improper Access Control
Access Control / Incomplete Signature Coverage
Access Control / Key Leaked via Infrastructure
Access Control / Key Stored Publicly
Access Control / Malicious Proposal
Access Control / Missing Input Validation
Access Control / Phishing
Access Control / Private Key Compromised
Access Control / PurchaseBundler Exploit / Token Approval Abuse
Access Control / Supply Chain Attack
Access Control / Swap Logic Flaw
Access Control / Token Approval Abuse
Access Control / Uninitialized Proxy
Access Control / Unknown
Access Control / Validator Key Compromised
Access Control / Weak Key Generation
Access Control Exploit / Access Control / Improper Access Control
Access Control Exploit / Arithmetic Error / Reentrancy
Access Control Exploit / Blind Signing
Access Control Exploit / Caller Impersonation
Access Control Exploit / Hot Wallet Key Compromised
Access Control Exploit / Improper Access Control
Access Control Exploit / Other / Improper Access Control
Access Control Exploit / Other / Key Leaked via Infrastructure
Access Control Exploit / Other / Math Mistake Exploit / Other / Arithmetic Error / Improper Access Control
Access Control Exploit / Token Approval Abuse
Access Control Exploit / Uninitialized Proxy
Access control bypass via hook / Other / Improper Access Control
Address Poisoning / Phishing
Admin Drain
Advanced Persistent Threat (APT) attack / Access Control / Private Key Compromised
Arbitrary External Call
Arbitrary External Call / Missing Input Validation
Arbitration Exploit / Other / Missing Input Validation
Arithmetic Error
Atomic Sandwich Attack / Improper Access Control
Backdoor Contract
Balance Disparity Exploit / Incorrect Share Accounting
Bonding Curve Exploit / Other / Arithmetic Error
Bonding Curve Exploit / Other / Token Approval Abuse
Borrow Logic Exploit / Other / Borrow Logic Flaw
Borrow Logic Exploit / Rounding Error
Borrow Logic Exploit / Spot Price Manipulation
Borrow Logic Flaw
Bridge Logic Flaw
Burn Function Mistake / Other / Arithmetic Error
BurnAddress Accounting Exploit / Incorrect Share Accounting
Buy Function Exploit / Missing Input Validation
CAPO Oracle Misconfiguration / Oracle Misconfiguration
CEX Price Manipulation Attack / Risk Parameter Abuse
CTX Exploit / Other / Missing Input Validation
Calculation Error in Liquidation Engine / Flash Loan Attack / Liquidation Logic Flaw
Calldata underflow and resolver hijack / Arbitrary External Call
Claim Contract Flashloan Exploit / Flash Loan Attack / Missing Input Validation
Cloudflare Key Compromised / CDN Compromise
Cloudflare Key Compromised / Other / CDN Compromise
Collateral Offboarding Mistake / Incorrect Share Accounting
Collateral Validation Exploit / Other / Missing Input Validation
Composable Stable Pools Exploit / Access Control / Rounding Error
Compromised Admin + Fake Token Price Manipulation / Proxy Upgrade Hijack
Contract not initialized / Uninitialized Proxy
Controlled Rebalance Manipulation / Improper Access Control
Cross Chain Multisig Deployment Exploit / Improper Access Control
Cross-Chain Message Spoofing
DNS Hijack
DNS Hijacking Attack / DNS Hijack
DNS Spoofing / DNS Hijack
Database Attack / Other / Database Breach
Database Breach
Debt Swap Exploit / Other / Missing Input Validation
DebtManager Exploit / Improper Access Control
Decimal Miscalculation
Decimal Miscalculation Exploit / Other / Decimal Miscalculation
Delegatecall Exploit / Access Control / Delegatecall Hijack
Delegatecall Exploit / Other / Delegatecall Hijack
Deployer Key Compromised
Deployer Wallet Compromised / Deployer Key Compromised
Deposit Function Exploit / Missing Input Validation
Deposit Function Exploit / Other / Improper Access Control
Deposit Logic Flaw
Dev Privilege Oversight Exploit / Access Control / Private Key Compromised
Domain Hijack / DNS Hijack
Donate Negative Amounts Hack / Missing Input Validation
Donation Attack
Drain Vaults / Admin Drain
Drain Vaults / Rugpull / Admin Drain
Drained Contracts / Access Control / Admin Drain
Drained Contracts / Admin Drain
Drained Contracts / Exit Scam
Drained Contracts / Liquidity Rug
Drained Contracts / Rugpull / Admin Drain
Drained Contracts / Rugpull / Backdoor Contract
Drained Contracts / Rugpull / Liquidity Rug
Drained Contracts / Rugpull / Treasury Misappropriation
Drained Contracts and User Wallets / Rugpull / Backdoor Contract
Drained Liquidity Pool / Liquidity Rug
Drained Liquidity Pool / Missing Input Validation
Drained Liquidity Pool / Rugpull / Liquidity Rug
EIP-7702 Delegation Exploit / Access Control
EIP-7702 Delegation Exploit / Arbitrary External Call
ERC1967Proxy Backdoor Hijack / Uninitialized Proxy
Empty Market Exploit / Other / First Depositor Attack
Exploit Lack of Input Authentication / Other / Improper Access Control
Exploit Weak Authentication Check / Caller Impersonation
External Call Vulnerability / Other / Arbitrary External Call
Fake Collateral Exploit / Impersonation Scam
Fake Proof Spam / Forged Proof
Fake State Proof / Other / Forged Proof
False Peer Exploit / Access Control / Cross-Chain Message Spoofing
Fee Overflow Exploit / Other / Incorrect Fee Accounting
First Depositor Attack
Flash Loan Attack
Flash Loan Attack / Arithmetic Error
Flash Loan Attack / Deposit Inflation Attack / First Depositor Attack
Flash Loan Attack / Improper Access Control
Flash Loan Attack / Incorrect Share Accounting
Flash Loan Attack / Infinite Mint
Flash Loan Attack / Missing Input Validation
Flash Loan Attack / Reentrancy
Flash Loan Attack / Reward Logic Flaw
Flash Loan Attack / Rounding Error
Flash Loan Attack / Spot Price Manipulation
Flash Loan Attack / Swap Logic Flaw
Flash Loan Attack / Withdrawal Logic Flaw
Flashloan Burn Function Exploit / Other / Withdrawal Logic Flaw
Flashloan Donate Function Logic Exploit / Donation Attack
Flashloan Donate Function Logic Exploit / Flash Loan Attack / Donation Attack
Flashloan Donate Function Logic Exploit / Oracle Issue / Donation Attack
Flashloan Donate Function Logic Exploit / Spot Price Manipulation
Flashloan Exploit
Flashloan Exploit / Improper Access Control
Flashloan Exploit / Other / Deposit Logic Flaw
Flashloan Exploit / Other / Incorrect Fee Accounting
Flashloan Exploit / Spot Price Manipulation
Flashloan Governance Attack
Flashloan Governance Attack / Flash Loan Attack
Flashloan Incentive Rewards Exploit / Flash Loan Attack / Reward Logic Flaw
Flashloan Incentive Rewards Exploit / Other / Reward Logic Flaw
Flashloan Incentive Rewards Exploit / Unbacked Mint
Flashloan Misconfiguration Exploit / Flash Loan Attack / Oracle Misconfiguration
Flashloan New Market Exploit / Rounding Error
Flashloan New Market Exploit / Unknown
Flashloan Pool Shares Exploit / Flash Loan Attack / Borrow Logic Flaw
Flashloan Pool Shares Exploit / Flash Loan Attack / Spot Price Manipulation
Flashloan Pool Shares Exploit / Incorrect Share Accounting
Flashloan Pool Shares Exploit / Oracle Issue / Spot Price Manipulation
Flashloan Pool Shares Exploit / Spot Price Manipulation
Flashloan Price Oracle Attack / Flash Loan Attack / Incorrect Share Accounting
Flashloan Price Oracle Attack / Flash Loan Attack / Spot Price Manipulation
Flashloan Price Oracle Attack / Flash Loan Attack / Swap Logic Flaw
Flashloan Price Oracle Attack / Oracle Issue / Spot Price Manipulation
Flashloan Price Oracle Attack / Other / Spot Price Manipulation
Flashloan Price Oracle Attack / Rugpull / Missing Input Validation
Flashloan Price Oracle Attack / Spot Price Manipulation
Flashloan Reentrancy Attack / Flash Loan Attack / Reentrancy
Flashloan Reentrancy Attack / Flash Loan Attack / Unknown
Flashloan Reentrancy Attack / Improper Access Control
Flashloan Reentrancy Attack / Other / Reentrancy
Flashloan Reentrancy Attack / Read-Only Reentrancy
Flashloan Reentrancy Attack / Reentrancy
Flashloan Reentrancy Attack / Reentrancy / Read-Only Reentrancy
Flashloan Slippage Attack / Other / Spot Price Manipulation
Flashloan Slippage Attack / Spot Price Manipulation
Flashloan Swap Logic Exploit / Flash Loan Attack / Rounding Error
Flashloan Swap Logic Exploit / Other / Swap Logic Flaw
Flashloan Trove Manipulation / Missing Input Validation
Flashloan Withdraw Logic Exploit / Withdrawal Logic Flaw
Forged Proof
Front-end vulnerability / Other / Frontend Compromise
Frontend Attack / Admin Drain
Frontend Attack / Frontend Compromise
Frontend Attack / Other / Frontend Compromise
Frontend Compromise
Governance and Oracle Exploit / Other / Malicious Proposal
Guardian 2FA service exploit / Access Control / API Key Compromised
Hash Collision
Honeypot
Hot Wallet Compromise via Social Engineering / Phishing
Hot Wallet Key Compromised
Hot wallet hack / Access Control / Hot Wallet Key Compromised
Hot wallet hack / Access Control / Malware
Hot wallet hack / Other / Hot Wallet Key Compromised
HyperEVM Delta Neutral Exploit / Unknown
IBC hooks exploit / Reentrancy
Impersonation Scam
Improper Access Control
Incentive Rewards Exploit / Other / Arithmetic Error
Incentive Rewards Exploit / Other / Reward Logic Flaw
Incentives Function Mistake / Infinite Mint
Incentives Function Mistake / Other / Arithmetic Error
Inconsistent Value in Code / Arithmetic Error
Incorrect Fee Accounting
Incorrect Share Accounting
Infinite Mint
Infinite Mint and Dump / Access Control / Private Key Compromised
Infinite Mint and Dump / Infinite Mint
Infinite Mint and Dump / Other / Infinite Mint
Infinite Mint and Dump / Other / Reward Logic Flaw
Infinite Mint and Dump / Rugpull / Liquidity Rug
Inflationary Accounting Manipulation / Incorrect Share Accounting
Insufficient Sender Verification Exploit / Missing Input Validation
Key Brute Forced
Key Leaked via Infrastructure
Liquidation Logic Exploit / Liquidation Logic Flaw
Liquidity Distribution Function Exploit / Other / Rounding Error
Liquidity Manipulation Exploit / Oracle Issue / Spot Price Manipulation
Liquidity Pool Exploit / Other / Swap Logic Flaw
Liquidity Pools Compromised / Other / Improper Access Control
Liquidity Rug
Log Spoofing / Spoofed Event Log
MEV bot manipulation exploit / Uninitialized Proxy
MEV composability attack / Token Approval Abuse
Malicious Governance Proposal / Malicious Proposal
Malicious Proposal
Malware
Market-Making Bot Exploit / Market Maker Bot Exploited
Math Mistake Exploit / Arithmetic Error
Math Mistake Exploit / Other / Arithmetic Error
Migrate Function Mistake Exploit / Other / Missing Input Validation
Mint & Stake Loop Exploit / Arithmetic Error
Mint Reserves Logic Exploit / Infinite Mint
Mint Reserves Logic Exploit / Unknown
Minting Logic Exploit / Malware
Misconfiguration / Key Leaked via Infrastructure
Misconfigured Oracle Exploit / Oracle Misconfiguration
Mispricing arbitrage / Swap Logic Flaw
Missing Access Control / Cross-Chain Message Spoofing
Missing Condition Check / Other / Missing Input Validation
Missing Input Validation
Missing Input Validation / Other
Multisig Governance Hack / Access Control / Private Key Compromised
Multisig wallet Social Engineering Exploit / Access Control / Signer Phishing
NumaVault Exploit / Incorrect Share Accounting
Oracle Issue
Oracle Issue / Improper Access Control
Oracle Issue / Oracle Misconfiguration
Oracle Issue / Private Key Compromised
Oracle Issue / Spot Price Manipulation
Oracle Manipulation / Other / Spot Price Manipulation
Oracle Manipulation / Private Key Compromised
Oracle Message Spoofing / Caller Impersonation
Oracle Misconfiguration
Oracle Misconfiguration Exploit / Oracle Misconfiguration
Oracle Misconfiguration Exploit / Unknown
Oracle Price Feed Manipulation / Flash Loan Attack / Incorrect Share Accounting
Oracle Price Feed Manipulation / Spot Price Manipulation
Oracle manipulation in user-created Pods / Other / Oracle Misconfiguration
Other
Other / API Key Compromised
Other / Arbitrary External Call
Other / Arithmetic Error
Other / Borrow Logic Flaw
Other / Bridge Logic Flaw
Other / Caller Impersonation
Other / DNS Hijack
Other / Database Breach
Other / Deposit Logic Flaw
Other / Donation Attack
Other / Flash Loan Attack / Improper Access Control
Other / Forged Proof
Other / Hot Wallet Key Compromised
Other / Improper Access Control
Other / Incorrect Share Accounting
Other / Infinite Mint
Other / Key Leaked via Infrastructure
Other / Key Stored Publicly
Other / Liquidation Logic Flaw
Other / MEV Bot Drained
Other / Malicious Proposal
Other / Math Mistake Exploit / Flashloan Incentive Rewards Exploit / Reward Logic Flaw / Rounding Error
Other / Missing Input Validation
Other / Oracle Misconfiguration
Other / Phishing
Other / Private Key Compromised
Other / Reentrancy
Other / Reward Logic Flaw
Other / Signature Verification Flaw
Other / Spoofed Event Log
Other / Spot Price Manipulation
Other / Swap Logic Flaw
Other / Token Approval Abuse
Other / Unbacked Mint
Other / Uninitialized Proxy
Other / Unknown
Other / Weak Key Generation
Other / Withdrawal Logic Flaw
Outdated Oracle Exploit / Duplicate Call Exploit / Improper Access Control
Outdated Oracle Exploit / Stale Oracle Price
Over-ride Logic Exploit / Other / Bridge Logic Flaw
Ownership Override Attack / Access Control / Malware
Ownership Override Attack / Ownership Takeover
Ownership Takeover
Phishing
Phishing / DNS Hijack
Phishing / Token Approval Abuse
Predictable Oracle Update
Price Manipulation Attack / Flash Loan Attack / Spot Price Manipulation
Price Manipulation Attack / Other / Swap Logic Flaw
Price Manipulation Attack / Risk Parameter Abuse
Price Manipulation Attack / Spot Price Manipulation
Price Manipulation Attack / Stale Oracle Price
Price Oracle Attack / Flash Loan Attack / Arbitrary External Call
Price Oracle Attack / Oracle Issue / Spot Price Manipulation
Price Oracle Attack / Oracle Misconfiguration
Price Oracle Attack / Other / Spot Price Manipulation
Price Oracle Attack / Spot Price Manipulation
Price Oracle Attack / Spot Price Manipulation / Risk Parameter Abuse
Price Oracle Attack / Stale Oracle Price
Price Oracle Attack / Stale Price Arbitrage
Price Oracle Attack / Unknown
Price Oracle Manipulation / Access Control / Spot Price Manipulation
Price Oracle Manipulation / Flash Loan Attack / Spot Price Manipulation
Price Oracle Manipulation / Improper Access Control
Price Oracle Manipulation / Oracle Issue / Spot Price Manipulation
Price Oracle Manipulation / Other / Donation Attack
Price Oracle Manipulation / Other / Spot Price Manipulation
Price Oracle Manipulation / Spot Price Manipulation
Private Key Compromised
Private Key Compromised (Bad ECDSA Implementation) / Weak Key Generation
Private Key Compromised (Brute Force) / Access Control / Key Leaked via Infrastructure
Private Key Compromised (Brute Force) / Access Control / Phishing
Private Key Compromised (Brute Force) / Weak Key Generation
Private Key Compromised (Discord Hack) / Social Account Takeover
Private Key Compromised (Malware) / Key Stored Publicly
Private Key Compromised (Malware) / Malware
Private Key Compromised (Phishing) / Access Control / Phishing
Private Key Compromised (Phishing) / Phishing
Private Key Compromised (Session signer) / Signature Verification Flaw
Private Key Compromised (Social Engineering) / Access Control / Impersonation Scam
Private Key Compromised (Social Engineering) / Access Control / Phishing
Private Key Compromised (Social Engineering) / Social Account Takeover
Private Key Compromised (Social Engineering) / Validator Key Compromised
Private Key Compromised (Stored Publicly) / Access Control / Key Stored Publicly
Private Key Compromised (Stored Publicly) / Other / Key Stored Publicly
Private Key Compromised (Stored Publicly) / Other / Private Key Compromised
Private Key Compromised (Supply Chain Attack) / Access Control / Malware
Private Key Compromised (Supply Chain Attack) / Access Control / Supply Chain Attack
Private Key Compromised (Supply Chain Attack) / Supply Chain Attack
Private Key Compromised (Unknown Method) / Access Control / Deployer Key Compromised
Private Key Compromised (Unknown Method) / Access Control / Hot Wallet Key Compromised
Private Key Compromised (Unknown Method) / Access Control / Key Leaked via Infrastructure
Private Key Compromised (Unknown Method) / Access Control / Malware
Private Key Compromised (Unknown Method) / Access Control / Phishing
Private Key Compromised (Unknown Method) / Access Control / Private Key Compromised
Private Key Compromised (Unknown Method) / Access Control / Session Key Compromised
Private Key Compromised (Unknown Method) / Access Control / Supply Chain Attack
Private Key Compromised (Unknown Method) / Deployer Key Compromised
Private Key Compromised (Unknown Method) / Flash Loan Attack / Private Key Compromised
Private Key Compromised (Unknown Method) / Forged Proof
Private Key Compromised (Unknown Method) / Hot Wallet Key Compromised
Private Key Compromised (Unknown Method) / Key Brute Forced
Private Key Compromised (Unknown Method) / Key Leaked via Infrastructure
Private Key Compromised (Unknown Method) / Other / Hot Wallet Key Compromised
Private Key Compromised (Unknown Method) / Other / Improper Access Control
Private Key Compromised (Unknown Method) / Phishing
Private Key Compromised (Unknown Method) / Private Key Compromised
Private Key Compromised (Unknown Method) / Validator Key Compromised
Private Key Compromised (Vanity Address) / Weak Key Generation
Private Key Compromised / Access Control
Private Key Compromised / Access Control / Deployer Key Compromised
Private Key Compromised / Access Control / Hot Wallet Key Compromised
Private Key Compromised / Access Control / Key Leaked via Infrastructure
Private Key Compromised / Access Control / Malware
Private Key Compromised / Access Control / Validator Key Compromised
Private Key Compromised / Improper Access Control
Private Key Compromised / Key Leaked via Infrastructure
Private Key Compromised / Other / Malware
Private Key Compromised / Other / Phishing
Proof Verifier Bug
Proxy Upgrade Skim / Unknown
Re-entrancy Exploit / Reentrancy
Rebalancer contract reentrancy hack / Reentrancy
Redeem Function Exploit / Redeem Logic Flaw
Redeem Logic Flaw
Redeem Process Exploit / Other / Redeem Logic Flaw
Redeem Rounding Error Exploit / Other / Rounding Error
Redeem Rounding Error Exploit / Rounding Error
Redirected Deposits / Frontend Compromise
Reentrancy
Reentrancy / Other
Reentrancy / Other / Missing Input Validation
Reentrancy / Read-Only Reentrancy
Reentrancy / Spot Price Manipulation
Reentrancy / Unknown
Reentrancy / Withdrawal Logic Flaw
Referral Claims Logic Exploit / Other / Signature Verification Flaw
Referral Claims Logic Exploit / Reward Logic Flaw
Refund Logic Exploit / Other / Withdrawal Logic Flaw
Replay Attack / Signature Replay
Reserve Manipulation Attack / Improper Access Control
Reward Logic Flaw
Risk Parameter Abuse
Rounding Donation Attack / Other / Donation Attack
Rounding Error
Router Exploit / Missing Input Validation
Router Exploit / Other / Arbitrary External Call
Router Exploit / Rugpull / Arbitrary External Call
Router Exploit via Infinite Approvals / Token Approval Abuse
Rugpull
Rugpull / API Key Compromised
Rugpull / Admin Drain
Rugpull / Exit Scam
Rugpull / Improper Access Control
Rugpull / Key Leaked via Infrastructure
Rugpull / Oracle Misconfiguration Exploit / Misconfigured Oracle Exploit / Oracle Misconfiguration
Safe Multisig wallet Phishing Exploit / Access Control / Signer Phishing
Sequential State Manipulation Exploit / Other / Improper Access Control
Session Key Compromised
Share Accounting Flaw / Incorrect Share Accounting
Signature Exploit / Signature Verification Flaw
Signature Replay
Signature Verification Flaw
Signer Phishing
Slippage Exploit / Missing Slippage Check
Social Account Takeover
Social Engineering / Other / Impersonation Scam
Social Engineering / Phishing
Social Engineering / Signer Phishing
Spoof Token Exploit / Other / Arithmetic Error
Spoofed Cross-Chain Messages / Other / Cross-Chain Message Spoofing
Spot Price Manipulation
Staked Collateral Exploit / Other / Staking Logic Flaw
Staking Logic Exploit / Other / Staking Logic Flaw
Stale Oracle Price
Storage Misalignment Exploit / Proxy Upgrade Hijack
Storage Slot Exploit / Access Control / Proxy Upgrade Hijack
Supply Chain Attack
Swap Function Exploit / Other / Swap Logic Flaw
Swap Logic Flaw
Sybil Attack with CREATE2 Addresses / Staking Logic Flaw
TLP Contract Exploit / Oracle Misconfiguration
Thin-Market Skew Exploit / Funding Rate Arbitrage
Third-party API compromise / Other / API Key Compromised
Third-party Dev Backdoor Exploit / Backdoor Contract
Token Approval Abuse
Token approval exploit / Access Control / Token Approval Abuse
Token approval exploit / Other / Token Approval Abuse
Transfer Logic Exploit / Missing Input Validation
Transferred Treasury to Mixers / Treasury Misappropriation
Transient storage collision / Other / Proxy Upgrade Hijack
Trusted Root Exploit / Other / Forged Proof
Unbacked Cross-Chain Mint
Unbacked Mint
Unchecked FlashLoan Approve Exploit / Token Approval Abuse
Uninitialized Proxy
Uninitialized Proxy Hijack / Uninitialized Proxy
Unknown
Unknown / Improper Access Control
Unknown / Spot Price Manipulation
Unknown / Token Approval Abuse
Unlimited Approval Exploit / Frontend Compromise
Unlimited Approval Exploit / Other
Unlimited repeated withdrawal exploit / Withdrawal Logic Flaw
Unvalidated call data exploit / Access Control / Arbitrary External Call
Upgraded ProxyAdmin + withdrawByAdmin Hack / Access Control / Proxy Upgrade Hijack
User Balances Manually Updated / Other / Backdoor Contract
Validator Key Compromised
Validator Stake Manipulation by Flashloan / Validator Key Compromised
Vault Swap Exploit / Missing Input Validation
Voting Power Inflation / Delegatecall Hijack
Vyper Compiler Bug
Weak Key Generation
Withdraw Function Argument Manipulation / Missing Input Validation
Withdrawal Logic Flaw
Zero-Rate Hack / Other / Liquidation Logic Flaw
cbETH Collateral Exploit / Oracle Issue / Oracle Misconfiguration
emergencyWithdraw Function Exploit / Withdrawal Logic Flaw
fillQuote silo.borrow() Exploit / Missing Input Validation
malicious transfer() method / Caller Impersonation
mint-and-dump Hack / Infinite Mint
misconfigured Fulcrum sUSD strategy / Flash Loan Attack / Donation Attack
misconfigured Groth16 verifier / Proof Verifier Bug
onlySpawnerToken Modifier Hack / Improper Access Control
overPaper Function Exploit / Improper Access Control
realized PnL withdrawal bug / Risk Parameter Abuse
swap() Function Flaw / Swap Logic Flaw
updateMerkleRoot Access Control Exploit / Access Control / Merkle Proof Forgery
withdrawStuckToken() exploit / Private Key Compromised
yETH stablepool Exploit / Incorrect Share Accounting
Attack Class
Access Control Attacks
Arithmetic Overflow & Underflow Attacks
Delegatecall & Call Injection Attacks
Flash Loan Attacks
Oracle Manipulation & Price Manipulation
Reentrancy
DAO Governance Attacks
Frontrunning & Sandwich Attacks
Phishing Attacks
DOS Attacks
Replay Attacks
Self-Destruct Attacks
Sensitive On-Chain Data
Weak Randomness Attacks
Unchecked Return Value Attacks
Timestamp Manipulation Attacks
Unclassified
Showing 541-542 of 542 incidents
| # | Project | Date | Amount Lost | Chain | Technique | Links |
|---|---|---|---|---|---|---|
| 541 | Bitomat Access Control Attacks | $236K | — | Access Control | ||
| 542 | Mt. Gox Access Control Attacks | $8.8M | bitcoin | Improper Access Control |
Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.
Hack Radar
Fresh DeFi incidents the moment they land in our database. Verified by trusted sources; auto-ingested entries are flagged for review.
-
today VerifiedLULA Token$578K lostFlash Loan AttackRead full incident
-
1d ago VerifiedSteakhouse Financial$920K lostethereum Risk Parameter AbuseRead full incident
-
3d ago Verifiedwarp.green$93K lostchia Bridge Logic FlawRead full incident
-
3d ago VerifiedTerm Labs$8.5M lostOtherRead full incident
-
3d ago VerifiedArrakis V1$7K lostethereum Spot Price ManipulationRead full incident
Explore by Attack Type
Access Control Attacks
$16,585M stolen
Last: Aug 2026
Arithmetic Overflow & Underflow Attacks
$231M stolen
Last: May 2025
Delegatecall & Call Injection Attacks
$112M stolen
Last: Aug 2026
Flash Loan Attacks
$1,869M stolen
Last: Aug 2026
Oracle Manipulation & Price Manipulation
$1,482M stolen
Last: Aug 2026
Reentrancy
$660M stolen
Last: Jul 2026
DAO Governance Attacks
$204M stolen
Last: Dec 2025
Frontrunning & Sandwich Attacks
$12M stolen
Last: Dec 2025
Phishing Attacks
$4,728M stolen
Last: Aug 2026
DOS Attacks
Replay Attacks
$0M stolen
Last: Jul 2023
Self-Destruct Attacks
Sensitive On-Chain Data
Weak Randomness Attacks
Unchecked Return Value Attacks
Timestamp Manipulation Attacks
Understanding Smart Contract Vulnerabilities
Smart contract vulnerabilities remain the leading cause of DeFi protocol losses, with over $10 billion stolen since 2016. Understanding attack vectors like reentrancy, flash loans, and oracle manipulation is essential for every blockchain developer and security researcher.
Each incident in our database is categorized by attack class and linked to our in-depth vulnerability guides, making this the most educational Web3 hacks tracker available. Want a quick ranking? See the most expensive crypto hacks leaderboard.
Learn how these hacks actually worked
Study the exploit patterns behind the incidents in this database, then practice finding them before attackers do.
Learn How These Hacks Actually Happened
Every exploit in this dashboard has a technical root cause. Master how to find them before attackers do.
Claim Your Free Trial
Access Request Received
Thanks for signing up. We'll email your trial onboarding details within 2-3 business days.
By submitting, you agree to our Privacy Policy.