Crypto Hacks
Recent crypto hacks and thefts
The latest crypto hacks, exploits and exchange thefts, newest first: who was hit, how much was taken, how it happened and what came back. Every known incident since 2011, searchable by name, chain or attack type.
Last updated · Checked daily
119 incidents Clear filters
Vegas TownUndisclosed
The attacker used failed EOS transfer transactions to trick the Vegas Town game server into issuing repeated rewards, earning thousands of EOS. The funds were then sent to the ZB exchange.
Gamble EOSUndisclosed
An attacker used a false transfer notification to exploit the EOS quiz game Gamble EOS, gaining thousands of EOS and transferring them to Huobi.
Fishing JoyUndisclosed
An attacker crowded transactions on the EOS quiz game Fishing Joy, triggering its refund mechanism and earning hundreds of EOS at a profit.
ExtremeLotoUndisclosed
Attackers exploited a flaw in the xlo*****io EOS quiz game by calling its transfer function directly, with multiple accounts working together. They reportedly made hundreds of EOS.
OnePlayUndisclosed
An attacker repeatedly exploited OnePlay’s game to take nearly all EOS in its contract, then used the same method to win nearly one million ONE game tokens and sell them on Newdex.
EOS 欢乐谷(Happy Pool)Undisclosed
Attackers crowded out transactions on the EOS Happy Valley quiz game and profited hundreds of EOS. The game operator moved the account balance away.
超级节点(BP)games.eosUndisclosed
Accounts associated with a blacklisted account received 2.09 million EOS, then moved some funds through other accounts and sent batches to an exchange account. The report did not identify how the EOS was obtained.
GameboyUndisclosed
An attacker exploited Gameboy’s random-number system, which used a controllable seed, by deploying a contract and calling its launch function.
EOSPlaystationUndisclosed
An attacker targeted the EOS game EOSPlaystation, but the report gives no further details about the method or outcome.
QuadrigaCXUndisclosed
QuadrigaCX sought creditor protection after losing access to about $190 million in cryptocurrency following the sudden death of its founder and CEO.
EOSreelUndisclosed
An attacker used a contract and multiple accounts to target the EOSreel project contract. The report does not state what was taken.
WinDiceUndisclosed
The attacker deployed a contract to attack WinDice’s project contract. The report does not specify what was taken or what happened to the funds.
EOSlotsUndisclosed
An attacker repeatedly targeted the EOSlots game. The report did not specify the method or amount taken.
FASTWINUndisclosed
The attacker deployed multiple contracts to carry out a rollback attack against the FASTWIN game. The reports do not specify what was taken or what happened to the funds.
EOSABCUndisclosed
An attacker targeted the EOSABC contract with a transaction rollback attack, which reverses transactions; the report says this was its third attack.
BETXUndisclosed
An attacker repeatedly targeted TGON; the report gives no details about the method or outcome.
EOSABCUndisclosed
EOSABC was targeted with a transaction congestion attack, which crowds the network with transactions; the report said the issue remained unfixed. It does not specify what was taken.
EOSlotsUndisclosed
An attacker used multiple accounts to repeatedly carry out replay attacks against EOSlots. The report does not say what was taken.
EOSABCUndisclosed
EOSABC was attacked using transaction congestion, a method that crowds the network to interfere with transactions. The report said the technique differed from earlier attacks on similar EOS games, but gave no details on losses.
Crazy DiceUndisclosed
The attacker coordinated multiple accounts to flood the Crazy Dice game with transactions, congesting the network and disrupting its operation. The reports do not specify what was taken or what happened to the funds.
EOSLuckUndisclosed
An attacker exploited EOSLuck’s random-number algorithm, achieving a much higher win rate than ordinary players.
idicefungameUndisclosed
An attacker repeatedly targeted the idicefungame EOS game and made a profit, which was transferred to the Bitfinex exchange. The attack method and amount were not reported.
SuperMonopolyUndisclosed
An attacker used a transaction congestion attack, crowding the network with transactions, against the SuperMonopoly game contract and made a profit.
21DiceUndisclosed
The attacker congested transactions to disrupt the 21Dice game contract and made a profit. The report does not give an amount.
idice(影骰)Undisclosed
An attacker congested transactions to disrupt the idice game contract and made a profit. Transaction congestion means crowding the network to delay or interfere with other transactions.
LuckBetUndisclosed
The attacker crowded the LuckBet game contract with transactions and profited from the attack. The reports do not specify what was taken.
playgamesUndisclosed
A malicious user repeatedly crowded transactions on the EOS game playgames; the game had been attacked 295 times by the time of the report.
FarmEOSUndisclosed
The attacker bet on FarmEOS, then sent many delayed transactions when the attack contract received a transfer notification. This congested transactions and delayed the game's lottery draw.
GameBetUndisclosed
An attacker congested transactions to exploit a vulnerability in an older version of the BP node software; the report does not say what funds, if any, were taken.
FarmEOSUndisclosed
After placing a bet, the attacker’s contract sent many delayed transactions when it received a transfer notification, postponing FarmEOS’s lottery draw. The report does not specify what was taken.
STACK DICEUndisclosed
The attacker used deferBomb, a method targeting an older version of EOS node software, to disrupt STACK DICE. The report did not state how much was taken.
FishingUndisclosed
The attacker congested the network with transactions to exploit a flaw in an older version of the EOS node software. The reports do not specify what was taken or what happened to the funds.
EOS.WINUndisclosed
An attacker targeted EOS.WIN and had already made a profit, though the report does not describe the attack method or amount.
BetDogeUndisclosed
An attacker repeatedly targeted the BetDoge EOS game and reportedly made hundreds of EOS. The attack method was not reported.
uugameUndisclosed
An attacker cracked the game’s random-number generation; the report does not specify what was taken.
ETCUndisclosed
The attacker rented mining power to carry out a 51% attack on ETC, affecting exchanges including Gate.io, Yobit, and Bitrue. The attacker later returned all the ETC.
HotDiceUndisclosed
HotDice was targeted in a transaction congestion attack, while the developers were unable to effectively identify and isolate high-risk or blacklisted accounts. The report did not state the amount taken.
ggeosUndisclosed
The ggeos contract was hit by a transaction rollback attack, which reverses or disrupts transactions. The reports do not specify what was taken or what happened to the funds.
EOS BUFFUndisclosed
EOS BUFF was repeatedly attacked, earning the attacker hundreds of EOS; the attack method was not reported.
