Web3 Hacks & DeFi Exploit Intelligence

  • $104B+Lost
  • 3836Incidents
  • 124Chains
  • 16Classes
# Project Date Amount Lost Chain Technique Links
91 Levana Perps Oracle Manipulation & Price Manipulation $1.1M osmosis Price Oracle Attack / Stale Oracle Price
92 Venus Protocol Oracle Manipulation & Price Manipulation $274K bsc Oracle Misconfiguration
93 ElephantStatus Oracle Manipulation & Price Manipulation $165K bsc Spot Price Manipulation
94 dYdX V3 Oracle Manipulation & Price Manipulation $9.0M ethereum Price Manipulation Attack / Risk Parameter Abuse
95 MicDao Oracle Manipulation & Price Manipulation $13K bsc Spot Price Manipulation
96 Beluga Oracle Manipulation & Price Manipulation $175K arbitrum Spot Price Manipulation
97 Platypus Finance Oracle Manipulation & Price Manipulation $2.2M avalanche Reentrancy / Spot Price Manipulation
98 BlackHole Token Oracle Manipulation & Price Manipulation $1.3M bsc Spot Price Manipulation
99 EAC Oracle Manipulation & Price Manipulation $6K bsc Spot Price Manipulation
100 Balancer V2 Oracle Manipulation & Price Manipulation $800K ethereum Spot Price Manipulation
101 Harbor Protocol Oracle Manipulation & Price Manipulation $250K comdex Spot Price Manipulation
102 Zunami Protocol Flash Loan Attacks $2.2M ethereum Price Manipulation Attack / Flash Loan Attack / Spot Price Manipulation
103 Cypher Oracle Manipulation & Price Manipulation $1.0M solana Unknown / Spot Price Manipulation
104 Uwerx Flash Loan Attacks $327K ethereum Flashloan Pool Shares Exploit / Flash Loan Attack / Spot Price Manipulation
105 Neutra Finance Oracle Manipulation & Price Manipulation $36K arbitrum Spot Price Manipulation
106 Carson Flash Loan Attacks $150K bsc Flash Loan Attack / Spot Price Manipulation
107 Conic Finance Flash Loan Attacks $300K ethereum Flashloan Price Oracle Attack / Spot Price Manipulation
108 Rodeo Finance Oracle Manipulation & Price Manipulation $1.7M Oracle Issue
109 Themis Protocol Flash Loan Attacks $370K arbitrum Flashloan Price Oracle Attack / Flash Loan Attack / Spot Price Manipulation
110 Hyperliquid Oracle Manipulation & Price Manipulation $37K arbitrum CEX Price Manipulation Attack / Risk Parameter Abuse
111 Sturdy Finance Oracle Manipulation & Price Manipulation $775K Oracle Issue
112 Jimbos Protocol Flash Loan Attacks $7.5M arbitrum Flashloan Slippage Attack / Spot Price Manipulation
113 LW Token Oracle Manipulation & Price Manipulation $50K bsc Spot Price Manipulation
114 0vix Flash Loan Attacks $2.0M polygon Flashloan Donate Function Logic Exploit / Spot Price Manipulation
115 Hundred Finance Flash Loan Attacks $7.4M optimism Flashloan Donate Function Logic Exploit / Oracle Issue / Donation Attack
116 Yearn Finance Flash Loan Attacks $11.5M ethereum Flashloan Misconfiguration Exploit / Flash Loan Attack / Oracle Misconfiguration
117 Allbridge Core Flash Loan Attacks $650K bsc Flashloan Price Oracle Attack / Flash Loan Attack / Swap Logic Flaw
118 ParaSpace Lending V1 Oracle Manipulation & Price Manipulation $5.0M ethereum Borrow Logic Exploit / Spot Price Manipulation
119 DKP Oracle Manipulation & Price Manipulation $80K bsc Spot Price Manipulation
120 Tender Finance Oracle Manipulation & Price Manipulation $1.6M arbitrum Outdated Oracle Exploit / Stale Oracle Price

Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.

Understanding Smart Contract Vulnerabilities

Smart contract vulnerabilities remain the leading cause of DeFi protocol losses, with over $10 billion stolen since 2016. Understanding attack vectors like reentrancy, flash loans, and oracle manipulation is essential for every blockchain developer and security researcher.

Each incident in our database is categorized by attack class and linked to our in-depth vulnerability guides, making this the most educational Web3 hacks tracker available. Want a quick ranking? See the most expensive crypto hacks leaderboard.

Learn how these hacks actually worked

Study the exploit patterns behind the incidents in this database, then practice finding them before attackers do.