Crypto Hacks
Recent crypto hacks and thefts
The latest crypto hacks, exploits and exchange thefts, newest first: who was hit, how much was taken, how it happened and what came back. Every known incident since 2011, searchable by name, chain or attack type.
Last updated · Checked daily
2,404 incidents
GMBL COMPUTERDeFi ProtocolArbitrum$770K
A flaw in GMBL.COMPUTER’s referral system let attackers claim rewards without making deposits, draining funds from the contract. The attackers later returned 235 ETH, reported as half the stolen funds.
Big.BUndisclosed
An attacker took over Big.B’s Discord server and posted a phishing link.
Gala GamesUndisclosed
An attacker deposited outdated GALA tokens that CoinHub mistakenly credited as the current token, then withdrew real GALA. The exchange was left with about $168 in GALA, and the attacker gained 2.7 ETH.
BaseUndisclosed
A block-production failure temporarily disrupted the Base network. The team deployed a fix, and block production and network services returned to normal; no funds were at risk.
Floor DaoDeFi ProtocolEthereum$64.2K
A logic flaw in FloorDAO’s staking contract for its rebasing sFLOOR token was discovered and exploited during rebasing operations. The report does not specify the amount taken or what happened to the funds.
Connext$39K
A denial-of-service attack disrupted Tokensoft’s API and crashed Connext’s airdrop claim database and website. Before claims returned to normal, tokens from unrelated wallets were claimed and sold; Connext said its own systems were not compromised.
Cyberport Hong KongUndisclosed
Hackers broke into some Cyberport Hong Kong computer systems and obtained about 436 GB of company and identity documents, including information on startup companies. The stolen data was reportedly offered for sale.
Stake.comOtherEthereumBSCPolygon$41.3M
Stake.com’s hot wallets were drained of about $41 million in cryptocurrency across Ethereum, BSC, and Polygon. The company said the breach targeted services used to authorize blockchain transactions.
SaberDAOUndisclosed
SaberDAO reported that its Discord server had been hacked. The report does not say whether funds were stolen or how the attack happened.
Saber DAOUndisclosed
Saber DAO reported an attack on its Discord server and said it had blocked the attackers.
ParasUndisclosed
Paras said its Discord server was under attack and warned users against clicking links or approving transactions. No losses were reported.
DAppSocialDeFi ProtocolEthereum$16K
A flaw in DAppSocial’s deposit function let an attacker create deposit records without transferring tokens, then withdraw against those false records. The attacker used a helper contract and a zero-day lock period to exploit the broken balance check.
BalthazarUndisclosed
Balthazar reported that his Discord was under attack and warned users not to follow links or approve transactions. The report gives no details of any funds taken.
SharedStakeDeFi ProtocolEthereum$175K
Weak ownership checks let an attacker gain admin access to SharedStake, create a token minter with unlimited permissions, and mint sgETH without collateral. The attacker then withdrew about 105 ETH.
Ivan Bianco$10K
YouTuber Ivan Bianco accidentally exposed his wallet’s recovery phrase during a livestream, letting an unknown person take its crypto and NFTs. Afterward, a wallet that had taken most of the funds returned about $50,000 in crypto.
GitcoinUndisclosed
An attacker took control of Gitcoin’s official X (formerly Twitter) account and posted phishing content. Gitcoin later regained access; no stolen funds were reported.
Lamas FinanceUndisclosed
Lamas Finance warned that its Discord was under attack and that a phishing link was being shared. The report urged users not to click it or approve transactions.
Starkware$550K
Users who did not upgrade their Starkware wallets before a required change were locked out of their accounts and funds. About $550,000 in accounts was affected; Starkware later re-enabled wallet upgrades.
EACTokenBSC$6.38K
An attacker used a flash loan to inflate the price of EAC on BSC, then sold tokens at the artificially high price for a profit.
BalancerDeFi ProtocolEthereum$800K
Attackers manipulated token conversion rates in Balancer V2 boosted pools to drain liquidity. Balancer said it secured most affected funds through emergency measures, but some remained at risk; pools on several networks were affected.
PEPETokenEthereum$15.1M
PEPE’s multisig signature requirement was reduced from five of eight to two of eight, and 16 trillion PEPE tokens were transferred to exchanges and sold. The sources disagree about who was responsible and the circumstances.
Our coverage: Pepecoin Controversy Allegations Of Insider Trading Emerge After Token Theft IncidentSource
SOL Big Brain$1.5M
Attackers took over a portfolio company founder’s Telegram account and used it to trick SOL Big Brain into following instructions that allowed a malicious contract to drain his wallets. He lost stablecoins, ETH, and GEAR tokens worth about $1.5 million.
BitBrowser$520K
An intrusion into BitBrowser’s server may have exposed cached data, including wallet private keys for users who enabled extended data synchronization. The incident reportedly caused at least $520,000 in losses.
SVT$400K
Attackers used flash loans to exploit loopholes in SVT’s token trading contracts, repeatedly buying and selling to make about $400,000. About 1,070 BNB was later sent to Tornado Cash.
Magnate FinanceDeFi ProtocolBase$6.5M
Magnate Finance’s team manipulated the price oracle and drained assets from Base depositors, then deleted the project’s website and Telegram channel.
Kroll & BlockFiUndisclosed
A cybersecurity incident at bankruptcy claims agency Kroll exposed non-sensitive data belonging to some FTX and BlockFi claimants. FTX said its own systems were unaffected and temporarily froze affected accounts in its claims portal.
GSSTokenBSC$25K
An arithmetic flaw in GSS’s transfer logic let an attacker manipulate the BSC liquidity pool using token transfers and its skim function, withdrawing 707,162 GSS twice. The attacker had first borrowed BUSDT through a flash loan to acquire GSS.
Thales$35K
A core contributor’s computer and MetaMask wallet were compromised, along with Thales hot wallets and admin bots on BNB Chain; the reported compromised wallets held about $35,000. Thales said funds on Optimism, Arbitrum, Polygon, and Base were safe.
Harbor ProtocolDeFi ProtocolComdex$250K
An attacker manipulated Harbor Protocol’s oracle prices using low-liquidity cSwap markets, making collateral appear more valuable and borrowing CMST against it. The exploit depleted funds from the stOSMO, LUNA, and WMATIC vaults.
Exactly ProtocolDeFi ProtocolOptimism$7.6M
An unchecked market address in Exactly Protocol’s DebtManager let attackers bypass permission checks and reenter a function to steal users’ deposited collateral. Two attackers took more than 7,160 ETH; the protocol said users of the DebtManager were affected.
Our coverage: DeFi Lender Exactly Protocol Suffers $12 Million ExploitationSourceRekt report
Shibarium Bridge$2.6M
A faulty Shibarium bridge left about $2.6 million in user funds stuck after the network’s launch.
Made by ApesUndisclosed
A flaw in Made by Apes’ SaaSy Labs API exposed personal details submitted with licensing applications. The issue was fixed after being reported to Yuga Labs, which said it was checking whether any data had been misused.
RocketSwapDeFi ProtocolBase$865K
Attackers brute-forced RocketSwap’s server and took control of a proxy contract, whose permissions let them transfer assets from the farm. They drained 471 ETH and moved the stolen assets to Ethereum.
MetisDAOUndisclosed
Attackers took over Metis’s official Twitter account after team members fell victim to a SIM-swap attack, which hijacks a phone number. They controlled the account for about 30 hours; no fund loss was reported.
Sei NetworkUndisclosed
Sei Network’s official Discord server was compromised, and the team warned users not to click links while it worked to regain control. The report does not specify any funds taken.
Zunami ProtocolDeFi ProtocolEthereum$2.1M
An attacker manipulated Zunami Protocol’s pricing and withdrew about $2.1–$2.2 million in value. The stolen ETH was later transferred to Tornado Cash, a service that obscures crypto transactions.
Fetch.aiUndisclosed
An attacker compromised an admin account on Fetch.ai’s Discord server. Fetch.ai warned users not to interact with posts there while the issue was being resolved.
MPC WalletsUndisclosed
Fireblocks disclosed BitForge vulnerabilities in wallets using multi-party computation, a method for splitting control of a wallet among parties. It said the flaws could have let attackers drain funds, but affected companies had worked with Fireblocks to fix them.
Earning.FarmDeFi ProtocolEthereum$540K
A reentrancy flaw in Earning.Farm’s withdrawal function let an attacker repeatedly withdraw funds before the contract correctly updated users’ shares. The attacker drained about 286 ETH from the protocol.
Blockchain CapitalUndisclosed
An attacker took over Blockchain Capital’s Twitter account and posted fake token-claim promotions. The tweets were removed and the account was restored; no funds stolen were reported.
