Crypto Hacks
Recent crypto hacks and thefts
The latest crypto hacks, exploits and exchange thefts, newest first: who was hit, how much was taken, how it happened and what came back. Every known incident since 2011, searchable by name, chain or attack type.
Last updated · Checked daily
2,404 incidents
LI.FI$11.6M
Attackers exploited a vulnerability in LI.FI’s cross-chain protocol, causing suspicious transactions and more than $10 million in reported user losses.
LiFi/JumperDeFi ProtocolBridgezkSync EraLineaMetis$9.73M
A flaw in LI.FI’s GasZip code let attackers use malicious transaction instructions to take tokens from 153 wallets whose owners had granted the protocol unlimited spending permission. The losses were reported at about $8–11 million across multiple chains.
MinterestDeFi ProtocolMantle$1.4M
An attacker used a flash loan—a temporary loan repaid in one transaction—and a reentrancy flaw to manipulate Minterest’s exchange rates and liquidate users’ mETH and WETH positions. The protocol lost about $1.4 million.
EthenaUndisclosed
Ethena’s Discord server was hacked. The report warned users not to click links posted there; it gave no details about stolen funds.
CoinStatsOther$2.2M
Attackers broke into CoinStats internal services and external integrations, compromising private keys for 1,590 user wallets and stealing about $2.2 million.
Dough FinanceDeFi ProtocolEthereum$1.96M
Attackers exploited unchecked call data in a Dough Finance contract, combining it with a flash loan to transfer WETH. About $1.96 million was taken; some ETH was later returned by a white-hat hacker, while much of the rest was deposited into Tornado Cash.
Unstoppable DomainsUndisclosed
Unstoppable Domains said its website had been attacked and warned users not to visit it or open emails from its domain. The reports did not specify what was taken or how the attack occurred.
OpSecDeFi ProtocolEthereum$100K
An attacker compromised a key controlling OpSec’s staking contract, changed its ownership, and withdrew and sold OPSEC tokens. The attacker converted about 59 ETH; illiquid trading pools limited how much could be cashed out.
Smart Bank Token (SBT)$56K
The Smart Bank Token contract on BNB Chain was attacked, causing a loss of about $56,000. The attack method was not reported.
CompoundUndisclosed
Compound Finance’s official website was compromised and hosted a phishing site. No loss of funds was reported.
Wasabi WalletUndisclosed
A WasabiCoordinator service was reported to be stealing user funds through attacks involving free coordinators, a compromised GitHub supply chain, and attacks targeting users. Wasabi Wallet told users connected to the coordinator to stop CoinJoin operations.
Linking The World (LW)$80K
A contract vulnerability on BNB Chain led to an attack on Linking The World and losses of about $80,000.
Doja CatUndisclosed
Doja Cat’s Twitter account was hacked and used to promote a memecoin. No theft or loss of funds was reported.
InterlayUndisclosed
Attackers took over Interlay’s official Twitter account and used it to post a scam message. No fund loss was reported.
DefiPlazaDeFi ProtocolEthereum$200K
A flaw in DeFiPlaza V2’s swap logic let a carefully crafted transaction drain pool tokens. An MEV bot—software that races to capture profitable transactions—got the funds first and returned them to the team.
AuthyUndisclosed
A vulnerability in Authy exposed the phone numbers of 33 million users. No funds were reported stolen.
BittensorDeFi Protocol$8M
A malicious version of Bittensor’s Python package, distributed through PyPI, stole users’ wallet keys during staking, delegation, or transfer actions. Attackers took about 32,000 TAO, worth roughly $8 million.
MintRisesPricesDeFi ProtocolBSC$59K
A reentrancy flaw let an attacker repeatedly call MintRisesPrices’ mint and burn functions in one transaction, manipulating prices and draining about $59,000 from the protocol.
Sydney SweeneyUndisclosed
Sydney Sweeney’s Twitter account was hacked and used to promote a crypto token bearing her name in what was described as an apparent pump-and-dump scheme. No fund loss was reported.
Particle NetworkUndisclosed
Hackers accessed Particle Network’s email account and used it to send phishing emails promoting a fake PARTl token presale. The report does not say that funds were stolen.
Evolve Bank & TrustUndisclosed
An employee clicked a malicious link, leading to the theft of 33 terabytes of data from Evolve Bank & Trust, affecting data associated with 155,586 accounts. The bank said the attack was stopped within days; no further unauthorized activity was detected.
BorpaTokenUndisclosed
BorpaToken’s official X account was compromised. The team warned users not to click links and contacted X to resolve the issue.
APEMAGADeFi ProtocolEthereum$32K
A flaw in APEMAGA’s contract logic let attackers drain about 9.4 ETH. The report does not describe how the flaw was used in more detail.
CyberUndisclosed
Attackers compromised Cyber’s Discord and posted a phishing link in its announcements channel. No fund loss was reported.
MetallicaUndisclosed
Hackers took over Metallica’s social media accounts and used them to promote fake cryptocurrency tokens, misleading fans and investors into buying worthless tokens.
Sportsbet$3.5M
Sportsbet was suspected of being attacked by the same hacker linked to the BtcTurk incident, with losses reported to exceed $3.5 million.
DeFianceUndisclosed
The official X account of DeFiance Capital was compromised. Its founder warned users not to click links posted by the account; no fund loss was reported.
Ethereum FoundationUndisclosed
Hackers took over an Ethereum Foundation email account and sent phishing messages to 35,794 recipients, falsely promoting a staking offer. The Foundation stopped the emails and secured the account; no victims were reported to have lost funds.
BtcTurkCEX$54M
Attackers compromised private keys to BtcTurk’s hot wallets and stole cryptocurrency, mainly targeting Avalanche holdings. Binance froze $5.3 million in recovered funds, and the exchange halted deposits and withdrawals while investigating.
CoinStats$2M
Malware on an employee’s work computer, after the employee was tricked into downloading it, helped attackers compromise CoinStats’ AWS infrastructure and affect 1,590 CoinStats wallets. Connected wallets and exchange accounts were unaffected.
50 CentUndisclosed
Rapper 50 Cent said hackers took over his Twitter account and website to promote the GUNIT memecoin.
OKX NFT AggregatorCEXBSC$14K
An access-control flaw in OKX’s BSC NFT aggregator let attackers use withdrawal and transfer functions to steal about $14,000 in user funds.
Dyson$31K
Dyson on BNB Chain was attacked, causing a loss of about $31,000. The attack method was not reported.
WIFCOIN_ETHTokenEthereum$16K
WIFCOIN_ETH was reportedly exploited through a business-logic flaw that allowed funds to be taken; the reports did not give further technical details.
AutoChain GlobalDeFi ProtocolBSC$113K
AutoChain Global’s smart contract on BNB Chain was exploited, causing about $113,000 in losses. Public reports did not provide details of the vulnerability.
nftperpUndisclosed
A critical bug was found in nftperp’s clearingHouse contract, and the vulnerable contracts were suspended. The platform later said all funds lost to the bug had been recovered.
UwU LendDeFi ProtocolEthereum$3.7M
After an earlier attack, the same attacker used sUSDe tokens taken in that exploit as collateral to drain several remaining UwU Lend pools. The second attack caused losses of about $3.72 million.
HolographDeFi ProtocolEthereum$1.2M
A former Holograph contractor exploited weak access controls on the token-minting functions to create 1 billion extra HLG tokens, which were then sold. The token’s price fell sharply after the exploit.
YOLO GamesDeFi ProtocolBlast$1.5M
YOLO Games’ Bazaar liquidity pool on Blast lacked an ownership check in its exit function, letting an attacker impersonate liquidity providers and withdraw assets. A white-hat hacker returned 353 ETH, about 90% of the stolen funds.
UwU LendDeFi ProtocolEthereum$20M
An attacker used large trades in Curve pools to distort UwU Lend’s price data, then exploited the false prices to take assets from the lending pools.
