Crypto Hacks
Recent crypto hacks and thefts
The latest crypto hacks, exploits and exchange thefts, newest first: who was hit, how much was taken, how it happened and what came back. Every known incident since 2011, searchable by name, chain or attack type.
Last updated · Checked daily
2,404 incidents
friend.tech$385K
A hacker used SIM-swap attacks against four friend.tech users and made a reported 234 ETH in the following 24 hours.
DePay$827
An attacker exploited a security flaw in DePay’s router using a flash loan, a short-term crypto loan, to steal 827 USDC.
Metropolis WorldUndisclosed
Metropolis World said its Discord server was compromised. The report did not describe any stolen funds or further impact.
VendXUndisclosed
VendX’s Discord server was compromised; the report gives no further details about what the attacker did.
GEMIEUndisclosed
Attackers compromised GEMIE’s Discord server and posted phishing links in its announcement channel.
ModeUndisclosed
Mode’s Discord server was hacked, and an attacker posted a phishing link in the announcements channel. The report did not state whether anyone lost funds.
LuckyFactoryNFTUndisclosed
A phishing link was posted in LuckyFactoryNFT’s factory-updates channel. The report warns against interacting with it but does not report any funds stolen.
SpaceChainUndisclosed
SpaceChain’s Discord server was hacked, and an attacker posted a phishing link in its announcements channel.
Venom BearsUndisclosed
Attackers compromised the Venom Bears Discord server. No stolen funds or other losses were reported.
XSDWETHpool$12.1K
An attacker used a flash loan and a malicious contract to exploit XSDWETHpool on BSC, gaining 56.96 WBNB, worth about $12,100.
HTXCEXEthereum$8M
An attacker gained access to an HTX hot wallet by compromising its private key and took 5,000 ETH. The attacker later returned nearly all the funds, about 4,999 ETH.
HTX (Huobi)$7.9M
HTX (formerly Huobi) announced a hack resulting in a reported loss of $7.9 million. The report does not describe how the attack happened or what happened to the funds afterward.
KUB-Split (Split)$78.4K
A flash-loan attack manipulated KUB-Split’s pool, allowing the attacker to take about $78,400.
UpbitUndisclosed
Scammers deposited fake APT tokens into Upbit user accounts, and users sold them. The report said the exchange’s wallet system appeared to process deposits based only on token type and data.
Mixin NetworkOtherMixin$200M
Attackers breached a cloud provider’s database containing Mixin Network hot-wallet credentials and drained wallets holding ETH, BTC, and USDT, with about $200 million involved.
Our coverage: Mixin Network Suspends Withdrawals Following $200 Million Loss In HackSourceRekt report
SynthtopiaUndisclosed
Synthtopia’s Discord server was compromised. The report does not say whether funds were stolen or how the compromise happened.
BEDUUndisclosed
A BEDU team member’s Discord account was compromised.
TimeSoulUndisclosed
A phishing link was posted in the announcements channel of the TimeSoul Discord server. No losses were reported.
Linear FinanceUndisclosed
Linear Finance’s LUSD stablecoin was under exploit attack, prompting the team to pause liquidations while it investigated. The report said users’ accounts were not at risk.
Coinbase WalletUndisclosed
Attackers used Coinbase Wallet’s Web3 messaging feature to send users messages containing phishing links. The reports warn users not to click unfamiliar links but do not report funds taken.
BalancerDeFi ProtocolEthereum$238K
Attackers hijacked Balancer’s DNS and sent visitors to a fake website that stole funds; its smart contracts were not affected. Reports gave different loss estimates.
One MintUndisclosed
An attacker compromised One Mint’s Discord account, posted malicious links, and shut down channels including support. The report did not describe any stolen funds.
ThalaLabsUndisclosed
An attacker took over ThalaLabs’ Twitter account and posted a phishing website linked to a wallet drainer, a tool that tricks visitors into surrendering crypto.
Mark Cuban$870K
Mark Cuban lost about $870,000 across 10 cryptocurrencies in a wallet hack. He moved his remaining funds to Coinbase custody.
uniclyNFTDeFi ProtocolEthereum$2K
An attacker exploited a reentrancy flaw in uniclyNFT’s PointFarm contract, repeatedly calling its deposit function before the contract updated its records. This minted excess rewards and drained uJENNY tokens.
RemitanoCEXEthereumTronBitcoinCash$2.7M
A third-party data breach exposed keys to Remitano’s hot wallets, which an attacker used to steal cryptocurrency across Ethereum, Tron, and Bitcoin Cash. Tether froze an address holding $1.4 million in USDT.
CoinExCEXEthereumBSCBitcoin+9 chains$55M
Attackers accessed CoinEx’s hot-wallet private keys and drained funds across multiple blockchains. Loss estimates ranged from $31 million to $70 million; CoinEx suspended deposits and withdrawals while it investigated.
Our coverage: CoinEx Exchange Suspected Of Being HackedSourceRekt report
OxODexPool$61K
An attacker used a flash loan—borrowed funds repaid within one transaction—to exploit OxODexPool, taking about 40 ETH. The funds remained in the attacker’s wallet.
MiladyDeFi ProtocolEthereum$1M
A developer with access to the Remilia treasury took about $1 million in fees from the Bonkler reserve-backed NFT system and seized project code and social accounts. The project said its core reserves, community vaults, contracts, and NFTs remained safe.
Paxos$500K
A vulnerability in a single Paxos transfer led to nearly 20 BTC being paid as transaction fees. Paxos said customer funds were safe and that it was seeking to recover the fees.
WitnetUndisclosed
Witnet’s Discord server was compromised and temporarily taken offline.
Vitalik Buterin$700K
An attacker used Vitalik Buterin’s compromised X account to post a phishing link posing as an NFT claim. The link led to about $700,000 in reported theft.
BFCToken$38K
An attacker exploited BFCToken’s transfer function to burn tokens from a liquidity pool without paying for them, causing losses of about $38,000.
LDOUndisclosed
The LDO token contract can return “false” when a transfer exceeds a user’s balance instead of reverting the transaction, creating a potential fake-deposit fraud risk. Lido said this behavior was expected and that LDO and stETH were safe; no theft was reported.
ACG WORLDSUndisclosed
A phishing link was posted in the ACG WORLDS Discord announcements channel. No losses were reported.
PEPEUndisclosed
PEPE’s old Telegram account was hacked, and a compromised Twitter account was used to promote scams. The project said the accounts were not under official control.
FortressCEXEthereumBitcoin$12M
A phishing attack on third-party vendor Retool exposed Fortress operator credentials, enabling unauthorized transfers from customer accounts. Fortress later reported losses of $12–15 million, said four customers were affected, and said it made up the loss.
Victory PointUndisclosed
A phishing link was posted in the major announcements channel of Victory Point’s Discord server.
HCT TokenUndisclosed
HCT Token suffered a flash-loan attack that caused a loss of about 30.5 BNB. About 30 BNB was later deposited into Tornado Cash, a service that obscures transaction trails.
Ordinals WalletUndisclosed
An attacker used a SIM-swap attack to take over Ordinals Wallet’s Twitter account and post phishing links. The attacker was identified as PinkDrainer.
