Crypto Hacks
Recent crypto hacks and thefts
The latest crypto hacks, exploits and exchange thefts, newest first: who was hit, how much was taken, how it happened and what came back. Every known incident since 2011, searchable by name, chain or attack type.
Last updated · Checked daily
2,404 incidents
JokInTheBoxETHDeFi ProtocolEthereum$34K
A flaw in JokInTheBox’s staking contract let attackers unstake repeatedly from the same balance because the contract did not properly check whether the withdrawal had already occurred. They drained about $34,000.
LoopringDeFi ProtocolLoopring$5M
Attackers compromised Loopring’s two-factor authentication service and used it to impersonate wallet owners, reset ownership, and withdraw assets from Smart Wallets that relied on a single guardian. The reported loss was about $5 million.
Certik/Kraken$3M
Kraken accused security researchers from Certik of extortion after they exploited a bug in Kraken’s systems. The incident became a dispute over the vulnerability disclosure; the report does not describe any loss of funds.
SteamSwap (STM)DeFi ProtocolBSC$105K
SteamSwap on BNB Chain was attacked through price manipulation that let the attacker exploit how the exchange calculated its reserves and drain about $105,000.
TLN ProtocolUndisclosed
TLN Protocol on BNB Chain was attacked through a contract vulnerability. The report cites a loss of about $280,000 in a May 31 attack.
CoinGeckoUndisclosed
A breach at CoinGecko’s third-party email provider exposed some users’ names, email and IP addresses, and email-open location data. CoinGecko accounts and passwords were not affected.
RenzoUndisclosed
Renzo’s official Twitter account was compromised. The team said it was working with Twitter to resolve the issue; the report did not mention stolen funds.
LykkeCEXEthereumBitcoin$22.4M
Lykke’s hot wallet was compromised, and about 158 BTC and 2,161 ETH, along with other assets, were stolen. The exchange halted trading and later declared bankruptcy; the cause of the compromise was not established in the reports.
NCD$20K
NCD on BNB Chain was attacked through a contract vulnerability, resulting in a reported loss of about $20,000.
VelocoreDeFi ProtocolLineazkSync Era$6.8M
Velocore’s pools on Linea and zkSync Era were exploited after faulty fee calculations allowed rates above 100%. The attacker used a flash loan to shrink a pool and create excess liquidity-provider tokens, stealing about $6.8 million.
DMM BitcoinCEXBitcoin$305M returned$305M
Attackers compromised a DMM Bitcoin employee and intercepted legitimate transactions to drain the exchange’s hot wallet, taking about 48.2 billion yen worth of bitcoin.
TLN ProtocolDeFi ProtocolBNB$280K
An undisclosed vulnerability in TLN Protocol’s lending contract let an attacker drain about $280,000 in assets. The funds were subsequently laundered through Tornado Cash.
MixedSwapRouterDeFi ProtocolArbitrum$16K
A flaw in MixedSwapRouter on Arbitrum let attackers trigger unauthorized token transfers from the protocol, taking about 293,000 WINR.
MetaDragonNFTfiBNB$181K
A flaw in MetaDragon’s NFT contract let attackers claim and convert more than 4,000 NFTs belonging to other users into META tokens, which they sold for 321.5 BNB.
Scroll TokenTokenEthereumUndisclosed
An arithmetic error in Scroll Token’s transfer function let attackers create unlimited tokens from addresses with zero balance. The token’s price then fell 99.99%.
Orion ProtocolDeFi ProtocolBNB$645K
Attackers exploited weak access controls in Orion Protocol’s PredyPool trading function, manipulating recorded liabilities and using flash loans to drain trading-pair liquidity. The loss was about $616,000.
EXcommunityDeFi ProtocolBNB$37K
EXcommunity on BNB Chain was attacked through an undisclosed smart-contract vulnerability, causing losses of about $37,000.
RedKeysGame$10.6K
RedKeysGame on BNB Chain was attacked, causing a loss of about $10,000. The attack method was not reported.
Nicola SebastianiUndisclosed
A member of The Sandbox team had their X account hacked and used to send scam posts and direct messages that appeared to be official.
NormieTokenBase$882K
The NORMIE token was exploited using flash loans—temporary borrowed funds—to manipulate its tax and supply mechanics, triggering a price crash. The attacker extracted about 225 ETH and offered to return most of it.
YONTokenBNB$118K
A missing permission check in YON’s transferFrom function let an attacker’s contract take tokens directly from the liquidity pool. The attack resulted in the theft of 190 BNB.
TonUPDeFi ProtocolTON$108K
A staking contract parameter was configured incorrectly, letting users claim staked UP tokens they were not entitled to; 307,264 tokens were taken. TonUP suspended redemptions and bought back the stolen tokens.
Rho MarketsUndisclosed
Hackers took over Rho Markets’ official Twitter account and posted suspicious links. The report does not mention stolen funds.
Gala GamesDeFi ProtocolEthereum$22.3M
Attackers used a compromised Gala Games minting key to create 5 billion GALA tokens and sold 592 million for about $21.8 million in ETH. About 5,913 ETH was later returned to the project.
TCH$19K
The TCH token on BNB Chain was repeatedly exploited through a transaction malleability issue, which can let transaction details be altered. The reported loss was about $19,000.
ALEX LabDeFi ProtocolBridgeStacks$4.3M
A phishing attack compromised the private key for ALEX Lab’s XLink bridge, allowing attackers to transfer BTC, stablecoins, and SKO tokens across the bridge. The stolen assets were worth over $4.3 million.
pump.funDeFi ProtocolSolana$1.9M
A former pump.fun employee retained access to a service account and used that access to obtain withdrawal permissions. The attacker used flash loans—short-term loans repaid within one transaction—to drain about 12,300 SOL in liquidity, then began sending some funds to other wallets.
Sonne FinanceDeFi ProtocolOptimism$20M
An attacker used a donation attack, manipulating a newly created lending market before its safeguards took effect, and stole more than $20 million from Sonne Finance on Optimism.
BlockTower CapitalUndisclosed
Fraudsters compromised and partially drained BlockTower Capital’s main hedge fund. The stolen funds had not been recovered, and the hackers had not been caught, according to the report.
Predy FinanceDeFi ProtocolArbitrum$464K
A lack of access controls in Predy Finance’s take function let attackers manipulate debt records and drain liquidity from trading pairs using flash loans. About $464,000 in crypto assets was lost.
Equalizer ExchangeUndisclosed
Equalizer Exchange in the Fantom ecosystem was suspected of being attacked, and the team advised users not to use its website while investigating. The site’s domain was later restored; no stolen funds were reported.
TsuruDeFi ProtocolBase$410K
A smart-contract validation flaw in Tsuru on Base let an attacker extract funds from the protocol.
Galaxy FoxTokenEthereum$330K
Galaxy Fox’s token contract allowed anyone to change its Merkle root, a data structure used to verify claims. Attackers changed it to falsely claim 108 ETH from the contract.
BloomDeFi ProtocolBlast$540K
A minting vulnerability in Bloom on Blast allowed an attacker to steal about $540,000. After a 10% bounty, the team recovered 90% of the funds for redistribution to liquidity providers.
NEAR ProtocolUndisclosed
NEAR Protocol’s official X account appears to have been compromised; its profile was altered and strange posts were published. No stolen funds were reported.
GPUTokenBNB$32.4K
A flaw in GPU’s transfer code increased a user’s balance when they transferred tokens to themselves. Attackers exploited it, using flash loans to amplify the attack, and took about $32,000.
SaturnTokenBNB$9K
A flaw in Saturn’s token transfer logic let an attacker use flash loans to manipulate the SATURN/WBNB pool’s reserves and drain about 14 BNB.
GNUS$1.27M
An attacker exploited GNUS on Fantom to mint fake tokens, bridge them to Ethereum and Polygon, and sell them into liquidity pools.
Perpy FinanceDeFi ProtocolArbitrum$132K
An uninitialized staking contract proxy let an attacker take control of Perpy Finance’s contract, upgrade it, and withdraw about 58.49 million PRY tokens. The tokens were exchanged for 41.895 ETH.
OSN$110K
An attacker exploited OSN’s LP Dividend Tracker contract, which sells its own tokens as rewards for adding liquidity, and made multiple transactions that caused about $110,000 in losses.
