Web3 Security Trends
Updated 31 Oct 2026About these numbers
01 Oct 2025–30 Sep 2026compared with 01 Oct 2024–30 Sep 2025
Attacks and losses over time
Scroll to see every period
View chart as a table
| Period | Reported loss | Attacks | Known amounts |
|---|---|---|---|
| Oct 2025 | $47.9M | 14 | 14 of 14 |
| Nov 2025 | $275.7M | 16 | 16 of 16 |
| Dec 2025 | $75.6M | 19 | 19 of 19 |
| Jan 2026 | $390.2M | 24 | 24 of 24 |
| Feb 2026 | $24.0M | 12 | 12 of 12 |
| Mar 2026 | $42.3M | 26 | 23 of 26 |
| Apr 2026 | $649.6M | 35 | 34 of 35 |
| May 2026 | $79.7M | 44 | 42 of 44 |
| Jun 2026 | $80.4M | 36 | 36 of 36 |
| Jul 2026 | $250.3M | 41 | 40 of 41 |
| Aug 2026 | $260.9M | 47 | 40 of 47 |
| Sep 2026 | $742.6M | 42 | 38 of 42 |
What changed
Compared with the previous period, reported loss fell by $6.09B while incident count rose by 150.
See incidentsBitget drove 13% of known reported loss in this period.
Open incidentSourceSpot Price Manipulation was the most frequently recorded attack method, appearing in 16 incidents.
Open incident
Attack methods
-
Spot Price Manipulation16
-
Incorrect Share Accounting12
-
Improper Access Control11
-
Phishing8
-
Private Key Compromised8
-
Access Control7
-
Arithmetic Error6
-
Swap Logic Flaw6
-
Access Control / Hot Wallet Key Compromised$403.7M
-
Phishing$360.5M
-
Other / Unbacked Cross-Chain Mint$323.1M
-
Access Control / Compromised Admin + Fake Token Price Manipulation / Proxy Upgrade Hijack$295.0M
-
Access Control / Cross-Chain Message Spoofing$293.0M
-
Composable Stable Pools Exploit / Access Control / Rounding Error$128.0M
-
Oracle Issue / Donation Attack$124.5M
-
Other / Weak Key Generation$116.0M
Affected sectors
207 uncategorized incidents excluded
-
DeFi applications112
-
Other17
-
Bridges14
-
Centralized services4
-
Wallets2
-
DeFi applications$714.0M
-
Centralized services$389.0M
-
Other$108.1M
-
Bridges$59.5M
-
Wallets$8.6M
Affected chains
38 unnamed-chain incidents excluded. Multi-chain counts and losses overlap.
-
Ethereum119
-
BNB Chain64
-
Base37
-
Arbitrum29
-
Solana19
-
Polygon17
-
Tron7
-
Bitcoin7
-
Sui6
-
Optimism5
-
Ethereum$1.13B
-
Arbitrum$503.4M
-
Tron$428.0M
-
Solana$424.0M
-
zcash$387.0M
-
XRP$387.0M
-
liquid$320.0M
-
Base$203.0M
-
Bitcoin$144.9M
-
Polygon$136.0M
Incidents behind this view
41 matching records · 2026-07 selected · Clear selection
| Date | Incident and attack method | Chain | Reported loss | Evidence |
|---|---|---|---|---|
| 31 Jul 2026 | ColdcardOther / Weak Key Generation | Bitcoin | $116.0M | Source |
| 30 Jul 2026 | Set ProtocolTOCTOU Valuation / Malicious Hook | Ethereum | $10K | Source |
| 30 Jul 2026 | Swan TreasuryOff-Chain Signer Key Compromise | BNB Chain | $625K | Source |
| 28 Jul 2026 | LULAImproper Access Control / Flash Loan Attack | BNB Chain | $578K | Source |
| 28 Jul 2026 | Crypto DAOMissing Access Control | BNB Chain | $52K | Source |
| 26 Jul 2026 | ChainConnectImproper Access Control | Avalanche, BNB Chain, Ethereum, Polygon | $650K | Source |
| 26 Jul 2026 | Garden FinanceOther / Database Breach | Arbitrum, Base, BNB Chain, Ethereum | $450K | Source |
| 26 Jul 2026 | WEMIXContract Authority Compromise | wemix3 0 | $737K | Source |
| 25 Jul 2026 | BankrSocial Account Takeover | Base | $480K | Source |
| 25 Jul 2026 | Projekt (GREEN/GOLD)Reward Accounting Logic Flaw | Ethereum | $560K | Source |
| 24 Jul 2026 | Triple-AAccess Control / Hot Wallet Key Compromised | Arbitrum, Ethereum, Tron | $9.7M | Source |
| 23 Jul 2026 | Verus-Ethereum BridgeForged Proof / Other | verus | $7.5M | Source |
| 23 Jul 2026 | LienBond Group Validation Flaw | Ethereum | $542K | Source |
| 23 Jul 2026 | Solido CashOracle Issue / Oracle Misconfiguration | supra | $900K | Source |
| 23 Jul 2026 | B² NetworkAccess Control | Not recorded | $3.8M | Source |
| 22 Jul 2026 | ZilliqaBiased Schnorr Nonce / Private Key Recovery | zilliqa | $1.6M | Source |
| 22 Jul 2026 | AFXAccess Control / Validator Key Compromised | Arbitrum | $24.1M | Source |
| 21 Jul 2026 | 42DAOSpot Price / Oracle Manipulation with Instant Liquidation | BNB Chain | $912K | Source |
| 21 Jul 2026 | FlashTradeMissing Input Validation | Solana | $98K | Source |
| 21 Jul 2026 | WanchainOther / Signature Verification Flaw | Cardano | $10.0M | Source |
| 19 Jul 2026 | AllbridgeFlash Loan Attack / Withdrawal Logic Flaw | Solana | $1.6M | Source |
| 17 Jul 2026 | FlyCowIncorrect Share Accounting | BNB Chain | $65K | Source |
| 17 Jul 2026 | AcrossOther / Spoofed Event Log | Solana | $4.5M | Source |
| 16 Jul 2026 | CrowdRingCircleIncorrect Share Accounting | BNB Chain | $209K | Source |
| 16 Jul 2026 | DeFiTunaOther / Swap Logic Flaw | Solana | $580K | Source |
About these numbers
Incident selection
This dashboard covers reported incidents, not every attack or the relative safety of a chain. Each verified canonical incident is counted once. Unverified, rejected, merged duplicate, pending-review, and future-dated records are excluded. Late reports and corrections can change recent periods.
Loss and outliers
Reported loss sums known positive USD amounts. Missing amounts stay unknown, not zero. Median incident loss uses only incidents with a known amount. “Exclude the largest incident” removes the largest known-loss event from both the selected and comparison periods.
Missing classifications
Sector and chain labels come from the incident record. Uncategorized incidents are excluded from sector charts; incidents without a named chain are excluded from chain charts. A multi-chain incident appears under each named chain, so those counts overlap.
Limitations
Reliable malicious-actor attribution is not consistently available, so this page does not rank actor groups. Timing alone cannot show that AI caused an attack, so there is no AI-involvement metric. Confirmed returned funds are too sparsely documented for a recovery trend: 2 of 356 incidents in this view have comparable reviewed accounting, totaling $1.9M.