Crypto Hacks
Recent crypto hacks and thefts
The latest crypto hacks, exploits and exchange thefts, newest first: who was hit, how much was taken, how it happened and what came back. Every known incident since 2011, searchable by name, chain or attack type.
Last updated · Checked daily
2,404 incidents
PolygonUndisclosed
Attackers compromised Polygon’s community Discord, and users were warned not to click links posted there. No fund loss was reported.
AquariusUndisclosed
An attacker took over Aquarius’s official X account and changed its username, email address, and phone number. The attacker also took control of the account’s former username through a spam account.
HFLH (HFLH)$5.3K
HFLH on BNB was suspected of being attacked, with an estimated loss of about $5,300. The attack method was not reported.
HFLHUndisclosed
HFLH, a staking and lending protocol on BNB Chain, was attacked through a contract vulnerability. The report does not say what was taken or what happened to the funds.
McDonaldUndisclosed
McDonald’s Instagram account was allegedly hacked and used to promote the GRIMACE meme token. No theft or loss of funds was reported.
ParclUndisclosed
Attackers compromised Parcl’s website, tricking users into signing transactions that took tokens from their Solana wallets while Phantom displayed fake results. The project’s X account also appeared to be compromised and posted about PARCL rewards.
Sahara AIUndisclosed
Sahara AI’s official Discord was compromised, with users warned not to click links or respond to messages. No fund loss was reported.
Luigi D'Onorio DeMeoUndisclosed
The X account of AvaLabs COO Luigi D’Onorio DeMeo appears to have been compromised. The report warned users not to interact with addresses or links posted from it.
ZenterestDeFi ProtocolEthereum$21K
An outdated price feed showed MPH at a vastly inflated price, letting an attacker borrow more from Zenterest than the collateral warranted and profit from the loans. The protocol lost about $21,000.
Vow$1.2M
A vulnerability in Vow’s contract was exploited, causing a loss of about $1.2 million. Further details were not reported.
VowcurrencyDeFi ProtocolEthereum$1.2M
An address able to set Vowcurrency’s exchange rate changed it from 1 to 100 without validation. A bot used the inflated rate to mint vUSD and swap VOW for ETH and USDT, taking about $1.2 million.
PolyNetworkDeFi ProtocolBridgePolyNetwork$5M
An undisclosed vulnerability in Poly Network’s cross-chain management contract was used to drain $4–5 million in wrapped assets on Neo N3, disrupting the value of related Flamingo assets. The bridge was suspended.
iVest DAOTokenBSC$190K
A flaw in iVest’s token-transfer code let attackers manipulate the token’s price and take value through its donation mechanism. The attack caused about $172,000 in losses.
RARI FoundationUndisclosed
Hackers took over RARI Foundation’s official Discord server. The report does not mention stolen funds.
NexeraDeFi ProtocolEthereum$449K
An employee’s computer was infected with BeaverTail malware, exposing credentials used to manage Nexera’s token contracts. The attacker transferred 47.24 million NXRA, but Nexera prevented the remaining tokens from being sold.
RoninDeFi ProtocolBridgeEthereum$12M
An incomplete Ronin Bridge contract upgrade left voting weights unset, allowing withdrawals without the required multisignature checks. About 4,000 ETH and 2 million USDC were taken, then returned by white-hat hackers, who received a bounty.
Our coverage: Ronin Hackers Return $10M ETH To Earn A $500K RewardSourceRekt report
OMPx$107K
OMPx was attacked, causing a loss of about $107,000. The attacker’s initial funds came through Railgun, and the stolen funds were later deposited there.
SATOSHI (SATS)$5K
SATOSHI (SATS) was attacked on Ethereum; the available report did not specify how or what happened to the funds.
StarknetUndisclosed
Starknet’s Discord server was reportedly compromised, and the team warned users not to click links there. No fund loss was reported.
Convergence FinanceDeFi ProtocolEthereum$210K
A missing input check in Convergence Finance’s staking-claim function let an attacker use a malicious contract address to mint 58 million CVG tokens, which were sold for about $210,000. The attacker also took about $2,000 in unclaimed Convex rewards.
TerraDeFi ProtocolTerra2$6.4M
A June upgrade reintroduced a known reentrancy flaw—a bug that lets an attacker repeat an operation before it finishes—in Terra’s IBC hooks module. The attacker minted tokens and swapped them on Astroport for cross-chain assets, including USDC and Astroport tokens, before the chain was halted and patched.
MonoSwapDeFi ProtocolBlast$1.3M
A MonoSwap developer installed a fake video-call app that stole private keys, which an attacker used to withdraw about $1.3 million in staked liquidity and protocol funds.
Astroport$6.4M
A vulnerability in Astroport’s Terra network exchange, previously patched but accidentally restored in a June upgrade, was exploited. The attack caused losses of about $6.4 million.
Anzen Finance$500K
A flaw in Anzen Finance’s Blast vault let a white-hat hacker take 500,000 USDz. The hacker returned $450,000 and received the remaining $50,000 as a bounty.
MetisUndisclosed
Metis’s Discord server was compromised, and the network warned users not to click links, including purported airdrop links. No fund loss was reported.
Casper Network$6.7M
Attackers exploited a flaw in Casper Network’s contract installer to bypass access checks and gain permission to transfer tokens. Thirteen wallets were affected, with illicit transactions estimated at about $6.7 million, and validators paused the network while a patch was prepared.
Solrise FinanceDeFi ProtocolCasper$6.7M
A privilege-escalation flaw on Casper let attackers bypass contract access checks and gain control of 13 accounts, transferring about $6.7 million in tokens. Validators halted consensus to stop further attacks.
SAT20 LabsUndisclosed
SAT20 Labs’ official Twitter account was hacked and used to post links to install malware. No theft or loss of funds was reported.
TinTinLandUndisclosed
TinTinLand’s Twitter account was stolen and its pinned post contained a phishing link. The team resolved the account theft and reviewed and strengthened its account security.
SpectraDeFi ProtocolEthereum$73K
A flaw in Spectra’s router let an attacker make the contract call other functions with chosen parameters, draining tokens approved by users from four wallets. Spectra’s core protocol contracts were unaffected.
DeltaPrimeDeFi ProtocolArbitrum$1M
A misconfiguration let an attacker transfer ownership of 13 DeltaPrime accounts to themselves and withdraw collateral, causing about $1 million in losses. The attacker later returned $900,000.
dYdXDeFi ProtocolEthereum$31K
Attackers took over dYdX’s domain settings and redirected visitors to a fake site that asked wallet users to transfer tokens to the attackers. Two users lost about $31,000 before the site was restored.
ETHTrustFundDeFi ProtocolBase$2.1M
The ETHTrustFund developer transferred the project’s full treasury of 607 ETH to crypto mixers and deleted its websites and social media. The project was described as an exit scam, with investors losing about $2.1 million.
Kelp DAOUndisclosed
Attackers took over Kelp’s domain registrar account and changed its nameserver routing, sending visitors to a fake version of the app that tried to trick them into phishing transactions.
RenzoUndisclosed
Attackers compromised Renzo’s Discord server. The report did not specify any stolen funds.
UPS$521K
UPS on BNB Chain was attacked, losing about $521,000. The attack method was not reported.
UtopiaSphereTokenBSC$521K
An attacker used flash loans to manipulate UPS’s price through its swapBurn() mechanism and drain a PancakeSwap pool, taking about $521,000.
ArbitrumUndisclosed
The Arbitrum website was apparently hacked and redirected to the website of the MOG meme project. The report does not mention stolen funds.
Rho MarketsDeFi ProtocolScroll$7.6M
A misconfigured oracle— a tool that supplies price data—let an MEV bot operator exploit Rho Markets’ lending protocol and take USDT and USDC from users across multiple chains. The operator later returned the funds.
WazirXCEXEthereum$235M
Attackers compromised a WazirX multisignature wallet held with Liminal, causing a loss of more than $230 million in tokens. A multisignature wallet requires approval from multiple signers to move funds.
