Crypto Hacks
Recent crypto hacks and thefts
The latest crypto hacks, exploits and exchange thefts, newest first: who was hit, how much was taken, how it happened and what came back. Every known incident since 2011, searchable by name, chain or attack type.
Last updated · Checked daily
111 incidents Clear filters
LedgerUndisclosed
An attacker used a misconfigured API key to access part of Ledger’s e-commerce and marketing database, exposing customers’ contact and order information. Ledger disabled the key and fixed the issue.
ETCUndisclosed
An attacker reorganized more than 7,000 Ethereum Classic blocks in another 51% attack, rewriting roughly two days of mining history. The incident caused missing blocks and prompted checks for missing transactions.
Degen.MoneyUndisclosed
A double-approval flaw in Degen.Money’s authorization process could let an attacker transfer users’ funds after they approved the project’s staking contract. Users reportedly lost money through the exploit.
NZXUndisclosed
A distributed denial-of-service attack took the New Zealand Stock Exchange offline for two days. The exchange said the attack came from abroad.
BTC ERAUndisclosed
Criminals impersonated the BTC ERA trading platform in emails that encouraged recipients to invest and pay, using the campaign to spread malware.
FilecoinUndisclosed
An attacker sent large numbers of messages to a Filecoin node, consuming its computing resources and preventing it from completing work, which caused it to lose computing power.
CryptoTrader.TaxUndisclosed
A hacker stole data belonging to more than 1,000 CryptoTrader.Tax users and reportedly tried to sell it on dark web forums.
KuCoinUndisclosed
KuCoin warned that fake websites were impersonating the exchange and offering false rewards to persuade users to deposit cryptocurrency. The report did not specify losses.
LedgerUndisclosed
A trader reported that someone accessed their Ledger crypto wallet and stole more than 100,000 ERC-20 tokens; the report does not explain how the wallet was compromised.
BASEDUndisclosed
An attacker tried to permanently freeze BASED’s Pool1, but the attempt failed. The project said the pool’s funds and BASED tokens remained safe.
Domestic cloud serverUndisclosed
Attackers broke into cloud servers through SSH, a remote login service, and installed malware that used the servers to spread, mine Monero and launch denial-of-service attacks. No stolen funds were reported.
ETCUndisclosed
The Ethereum Classic blockchain reorganized 3,693 blocks, halting block production for nearly six hours before it returned to normal. The report does not describe any funds being taken.
LedgerUndisclosed
Someone used an API key to access Ledger’s database without permission, exposing e-commerce and marketing data. Payment details and crypto assets were not affected, and the key was disabled.
TwitterUndisclosed
Hackers took over prominent Twitter accounts and posted cryptocurrency phishing messages. Scammers received 12.86 BTC before the posts were deleted.
Bitcoin GoldUndisclosed
Bitcoin Gold’s network was hit by 51% attacks lasting nearly 10 days, allowing the chain’s transaction history to be reorganized. The team issued an alert and released an update with block checkpoints to protect the network.
Russian blockchain voting platformUndisclosed
Personal information from people who voted through Russia’s blockchain voting platform was exposed in downloadable files on a government website. The files included identity and passport details, and the report also noted a flaw that could allow some repeat votes.
Atomic LoansUndisclosed
A researcher found two flaws that could have let borrowers unlock some or all of their Bitcoin collateral without repaying loans. Neither flaw was exploited, and no funds were affected; Atomic Loans paused new loans while preparing an update.
DeversiFiUndisclosed
An oversized order repeatedly failed the exchange’s order limit checks, but the system kept resubmitting it. The repeated rejections disrupted the processing of other orders.
FilecoinUndisclosed
A vulnerability in Filecoin’s code allowed extra tokens to be issued; 6Block said it created 1.6 billion FIL to demonstrate the flaw, then reported it to Filecoin’s team for fixing.
LMEXUndisclosed
LMEX said its platform was hacked and 150,000 USDT was stolen. It closed deposits and withdrawals after the theft left it with a debt shortfall.
TBTCUndisclosed
The Keep team found a flaw in TBTC’s Bitcoin redemption process that could put deposits at risk of liquidation. It activated a 10-day deposit pause; the report describes no theft.
LoopringUndisclosed
A flaw in Loopring’s front end limited users’ EdDSA private keys to a small, searchable range, making them vulnerable to discovery by trial and error. The exchange shut down for half a day to upgrade; no theft was reported.
YoubiUndisclosed
Youbi Exchange faced heavy DDoS traffic—an overload of requests that disrupted access to its servers—for three consecutive days. The service was briefly inaccessible.
BitSGUndisclosed
Repeated DDoS attacks—floods of traffic intended to disrupt a service—affected BitSG’s website and app, preventing users from logging in at times.
FelixUndisclosed
An EOS gambling app was hit by an attack involving fake EOS, according to the report; it gives no further details on the method or losses.
Cocos-BCXUndisclosed
Cocos-BCX said someone stole mapping wallet information and used it to take and sell 1,087,522,819.2 COCOS tokens.
Ledger ChromeUndisclosed
Fake Ledger Chrome extensions promoted through Google search ads and other methods tricked users into installing them, allowing attackers to steal cryptocurrency. At least 1.4 million XRP were taken.
Trident Crypto FundUndisclosed
Attackers leaked a database containing data from 266,000 Trident Crypto Fund users, including email addresses, phone numbers, encrypted passwords and IP addresses.
VBITEXUndisclosed
VBITEX was hacked, leading to unauthorized changes to platform data and theft of virtual assets; the report gives no further details.
IOTAUndisclosed
A vulnerability in the official IOTA wallet app was exploited to steal user funds, prompting IOTA to shut down its network. About 850,000 MIOTA were reported stolen.
ElectrumUndisclosed
A fake-update phishing campaign targeted Electrum users with older software versions. The report gives no amount stolen.
