Crypto Hacks
Recent crypto hacks and thefts
The latest crypto hacks, exploits and exchange thefts, newest first: who was hit, how much was taken, how it happened and what came back. Every known incident since 2011, searchable by name, chain or attack type.
Last updated · Checked daily
417 incidents Clear filters
Andrei GrachevUndisclosed
DWF Labs said its managing partner Andrei Grachev’s Twitter account had been compromised.
Wall Street MemesUndisclosed
Attackers exploited a vulnerability in Wall Street Memes’ staking provider to access the $WSM staking contract.
AltLayerUndisclosed
AltLayer’s Twitter account experienced a disruption, with past tweets disappearing from its timeline; the account was restored after about three hours. The cause was described as possibly an organized attack.
Staci WardenUndisclosed
The Twitter account of Algorand Foundation CEO Staci Warden was compromised. The reports did not specify any resulting theft.
HTXUndisclosed
HTX and HTX_DAO reported denial-of-service attacks, which overload systems and can disrupt access. HTX’s app experienced interruptions while its technical team worked to resolve the issue.
Miguel MorelUndisclosed
A SIM-swap attack took over Arkham CEO Miguel Morel’s Twitter account.
Manta PacificUndisclosed
Manta Pacific faced a distributed denial-of-service (DDoS) attack, which overwhelmed its RPC nodes with more than 135 million requests. The reports did not specify any funds lost.
TrezorUndisclosed
An intruder accessed Trezor’s third-party support portal and may have exposed the names or nicknames and email addresses of some customers. Trezor reported no loss of customer assets.
ZKFairUndisclosed
ZKFair’s official Discord server was hacked. The report warned users not to click links posted there until the team regained control.
CoinGeckoUndisclosed
A team member clicked a fake Calendly link, giving a hacker unauthorized access to an app; the hacker then took over CoinGecko’s and GeckoTerminal’s Twitter accounts and posted from them.
SECUndisclosed
An attacker took control of the phone number linked to the SEC’s Twitter account through a SIM-swap attack, then reset its password and gained access. The phone number was accessed through the telecommunications provider, not the SEC’s systems.
OlafUndisclosed
Hackers took over Polychain Capital CEO Olaf Carlson-Wee’s Twitter account and posted fake airdrop links to phish users. Polychain warned people not to interact with the account.
CertiKUndisclosed
Attackers took over CertiK’s Twitter account and posted false claims about a Uniswap vulnerability alongside phishing links. The report says the attackers had first phished a CertiK employee; it does not report stolen funds.
Atomicals MarketUndisclosed
Atomicals Market reported that it was under a denial-of-service attack, in which systems are overloaded to disrupt access.
Wizz WalletUndisclosed
Wizz Wallet and other builders in the Atomicals ecosystem reported distributed denial-of-service attacks, which overwhelm a service with traffic.
Wabalaba LandUndisclosed
Wabalaba Land’s Discord server was compromised. The team warned users not to click links while it worked to regain control.
NFPromptUndisclosed
NFPrompt reported problems with its Web2 wallet service and said users’ funds were secure. The reports did not describe a confirmed theft.
