Web3 Hacks & DeFi Exploit Intelligence
- $104B+Lost
- 3836Incidents
- 124Chains
- 16Classes
| # | Project | Date | Amount Lost | Chain | Technique | Links |
|---|---|---|---|---|---|---|
| 211 | Loopring Access Control Attacks | $5.0M | loopring | Guardian 2FA service exploit / Access Control / API Key Compromised | ||
| 212 | DMM Bitcoin Access Control Attacks | $305M | bitcoin | Private Key Compromised (Unknown Method) / Access Control / Phishing | ||
| 213 | MixedSwapRouter Access Control Attacks | $16K | arbitrum | Arbitrary External Call | ||
| 214 | Orion Protocol Access Control Attacks | $645K | bsc | Improper Access Control | ||
| 215 | YON Access Control Attacks | $118K | bsc | Improper Access Control | ||
| 216 | Gala Games Access Control Attacks | $22.3M | — | Access Control | ||
| 217 | pump.fun Access Control Attacks | $2.0M | solana | Private Key Compromised (Unknown Method) / Flash Loan Attack / Private Key Compromised | ||
| 218 | ALEX Access Control Attacks | $4.3M | stacks | Private Key Compromised (Phishing) / Access Control / Phishing | ||
| 219 | Predy finance Access Control Attacks | $464K | arbitrum | Improper Access Control | ||
| 220 | Galaxy Fox Access Control Attacks | $330K | ethereum | Improper Access Control | ||
| 221 | Perpy Access Control Attacks | $132K | arbitrum | Uninitialized Proxy | ||
| 222 | GeniusAI Access Control Attacks | $1.3M | ethereum, fantom | Private Key Compromised (Discord Hack) / Social Account Takeover | ||
| 223 | Pike V1 Access Control Attacks | $1.6M | arbitrum, ethereum… | Storage Misalignment Exploit / Proxy Upgrade Hijack | ||
| 224 | Rain Access Control Attacks | $14.8M | bitcoin, ethereum… | Private Key Compromised | ||
| 225 | XBridge Access Control Attacks | $1.9M | bsc, ethereum | Access Control / Improper Access Control | ||
| 226 | FENGSHOU Token Access Control Attacks | $191K | bsc | Access Control / Improper Access Control | ||
| 227 | Rico Access Control Attacks | — | arbitrum | Arbitrary External Call | ||
| 228 | Wilder Access Control Attacks | $1.4M | — | Access Control | ||
| 229 | Chainge Finance Access Control Attacks | $716K | bsc | Arbitrary External Call | ||
| 230 | Grand Base Access Control Attacks | $1.7M | base | Private Key Compromised (Unknown Method) / Access Control / Phishing | ||
| 231 | ETHFIN Access Control Attacks | $1K | bsc | Improper Access Control | ||
| 232 | Munchables Access Control Attacks | $62.5M | blast | Storage Slot Exploit / Access Control / Proxy Upgrade Hijack | ||
| 233 | Curio Access Control Attacks | $16.0M | ethereum | Voting Power Inflation / Delegatecall Hijack | ||
| 234 | Lucky Star Access Control Attacks | $297K | — | Access Control | ||
| 235 | AirDAO Access Control Attacks | $440K | — | Access Control | ||
| 236 | Dolomite Access Control Attacks | $1.9M | ethereum | Access Control Exploit / Improper Access Control | ||
| 237 | ParaSwap Access Control Attacks | $300K | ethereum | Improper Access Control | ||
| 238 | Remilia Access Control Attacks | $6.0M | ethereum | Access Control / Private Key Compromised | ||
| 239 | Mozaic Access Control Attacks | $2.1M | arbitrum | Access Control / Private Key Compromised | ||
| 240 | NFPrompt Access Control Attacks | $3.0M | ethereum | Private Key Compromised |
Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.
Hack Radar
Fresh DeFi incidents the moment they land in our database. Verified by trusted sources; auto-ingested entries are flagged for review.
Explore by Attack Type
Access Control Attacks
Arithmetic Overflow & Underflow Attacks
Delegatecall & Call Injection Attacks
Flash Loan Attacks
Oracle Manipulation & Price Manipulation
Reentrancy
DAO Governance Attacks
Frontrunning & Sandwich Attacks
Phishing Attacks
DOS Attacks
Replay Attacks
Self-Destruct Attacks
Sensitive On-Chain Data
Weak Randomness Attacks
Unchecked Return Value Attacks
Timestamp Manipulation Attacks
Understanding Smart Contract Vulnerabilities
Smart contract vulnerabilities remain the leading cause of DeFi protocol losses, with over $10 billion stolen since 2016. Understanding attack vectors like reentrancy, flash loans, and oracle manipulation is essential for every blockchain developer and security researcher.
Each incident in our database is categorized by attack class and linked to our in-depth vulnerability guides, making this the most educational Web3 hacks tracker available. Want a quick ranking? See the most expensive crypto hacks leaderboard.
Learn how these hacks actually worked
Study the exploit patterns behind the incidents in this database, then practice finding them before attackers do.