Crypto Hacks
Recent crypto hacks and thefts
The latest crypto hacks, exploits and exchange thefts, newest first: who was hit, how much was taken, how it happened and what came back. Every known incident since 2011, searchable by name, chain or attack type.
Last updated · Checked daily
417 incidents Clear filters
TICKER$900K
A developer hired to run TICKER’s presale sold most of the 15% token supply entrusted to them for an airdrop, taking about $900,000 instead of distributing the tokens.
NormieTokenBase$882K
The NORMIE token was exploited using flash loans—temporary borrowed funds—to manipulate its tax and supply mechanics, triggering a price crash. The attacker extracted about 225 ETH and offered to return most of it.
Orange Finance$844K
Attackers exploited Orange Finance’s single-signature setup, which was described as a multisig, and a private key was reported leaked. The incident resulted in about $843,500 in losses.
X Bridge$824K
X Bridge saw multiple suspicious transactions, including a withdrawal of 482 million STC, worth about $824,000, from its proxy contract. The activity was reported as ongoing.
PolyhedraDeFi ProtocolBSC$760K
After an administrator’s private key was compromised, an attacker maliciously upgraded Polyhedra’s contract and took THENA tokens, swapping them for BNB.
MOBOXDeFi ProtocolOptimism$750K
An attacker repeatedly borrowed and redeemed funds from MOBOX, using referral rewards to inflate each subsequent loan. The process extracted USDT from the protocol.
1inch SwapDeFi ProtocolAvalanche$723K
A malicious update to a third-party animation package injected a fake wallet-connection prompt into 1inch’s website. One user connected an Avalanche wallet and lost 10 wrapped BTC; the app’s web front end was affected.
Chainge FinanceDeFi ProtocolBSC$716K
A flaw in Chainge Finance’s BSC swap function let attackers control external contract calls and use transferFrom to take tokens from accounts that had approved them.
ReHoldDeFi ProtocolEthereum$700K
ReHold’s CEO withdrew more than $700,000 from the protocol’s smart contracts without the co-founder’s approval and then took control of company infrastructure and domain access.
Compound$660K
A sudden rise in UNI’s price left Compound using an outdated price from Uniswap’s time-weighted average, allowing users to borrow UNI against collateral valued too low and leaving the protocol with $660,000 in bad debt.
Orion ProtocolDeFi ProtocolBNB$645K
Attackers exploited weak access controls in Orion Protocol’s PredyPool trading function, manipulating recorded liabilities and using flash loans to drain trading-pair liquidity. The loss was about $616,000.
BLASTOFFDeFi ProtocolBlast$600K
An attacker stole about 150 ETH from BLASTOFF’s Future Yield Minter vault on Blast. The team disabled staking in the affected pool and offered a bounty for recovered funds.
Serenity ShieldTokenEthereum$586K
A phishing attack compromised a Serenity Shield project wallet, giving the attacker access to its keys and enabling the theft of 6.9 million SERSH tokens. Selling the tokens yielded about $586,000.
BloomDeFi ProtocolBlast$540K
A minting vulnerability in Bloom on Blast allowed an attacker to steal about $540,000. After a 10% bounty, the team recovered 90% of the funds for redistribution to liquidity providers.
UPS$521K
UPS on BNB Chain was attacked, losing about $521,000. The attack method was not reported.
UtopiaSphereTokenBSC$521K
An attacker used flash loans to manipulate UPS’s price through its swapBurn() mechanism and drain a PancakeSwap pool, taking about $521,000.
CloberDeFi ProtocolBase$500K
A reentrancy flaw in Clober’s Rebalancer let an attacker repeatedly read contract balances before they were updated, draining 133.7 ETH from its Base liquidity vault. The attacker used a malicious contract and a flash loan.
Vestra DAODeFi ProtocolEthereum$500K
A flaw in Vestra DAO’s staking contract let an attacker repeatedly claim rewards from positions that had already been unstaked. They took 73.72 million VSTR tokens, which were later sold for ETH.
Anzen Finance$500K
A flaw in Anzen Finance’s Blast vault let a white-hat hacker take 500,000 USDz. The hacker returned $450,000 and received the remaining $50,000 as a bounty.
CryptobottleTokenPolygon$490K
A flaw in Cryptobottle’s Polygon swap contract let an attacker bypass a balance check and make arbitrary swaps to acquire NAS tokens. They sold the tokens and drained USDT.
Swarm MarketsDeFi ProtocolEthereum$473K
A flaw in Swarm Markets’ xTokenWrapper contract allowed unauthorized withdrawals. A MEV bot intercepted most attempts, but an attacker took SMT tokens as well as DAI and USDC.
Miner（MINER）TokenEthereum$466K
Attackers exploited a double-transfer flaw in Miner’s token contract, caused by missing validation in its update function, to transfer ETH from the project.
Predy FinanceDeFi ProtocolArbitrum$464K
A lack of access controls in Predy Finance’s take function let attackers manipulate debt records and drain liquidity from trading pairs using flash loans. About $464,000 in crypto assets was lost.
Wise LendingDeFi ProtocolEthereum$464K
A precision flaw in Wise Lending’s share accounting, exploited with a flashloan, let an attacker accumulate extra shares and withdraw more than they deposited. The market lost about 177 ETH.
Clipper DEXDeFi ProtocolOptimismBase$450K
A flaw in Clipper’s single-asset deposit and withdrawal feature let an attacker distort liquidity pools on Optimism and Base, then withdraw more assets than they had deposited. The pools lost about $458,000.
BGMDeFi ProtocolBNB Chain$450K
An attacker manipulated BGM’s spot price on BNB Chain and used the inflated price to extract more than $450,000.
NexeraDeFi ProtocolEthereum$449K
An employee’s computer was infected with BeaverTail malware, exposing credentials used to manage Nexera’s token contracts. The attacker transferred 47.24 million NXRA, but Nexera prevented the remaining tokens from being sold.
vETHDeFi ProtocolEthereum$447K
Attackers exploited vETH’s reliance on a price source they could manipulate to extract value from the Ethereum protocol. Reported losses were about $450,000.
DCF$440K
DCF on BNB Chain was exploited through an error in the token’s transfer logic, causing a loss of about $440,000.
MicroStrategy$440K
MicroStrategy’s X account appears to have been compromised and used to post phishing airdrop links. The incident reportedly led to about $440,000 in stolen assets.
TsuruDeFi ProtocolBase$410K
A smart-contract validation flaw in Tsuru on Base let an attacker extract funds from the protocol.
Cloud AI$360K
Hackers compromised Cloud AI’s deployer and treasury accounts, taking 58,900 CloudAI tokens and some ETH. They exchanged all the tokens for ETH, with total losses estimated at about $360,000.
KalaxDeFi ProtocolBlast$350K
Kalax’s founders drained the protocol’s vaults, then deleted its website and social accounts and abandoned the project.
Sumer MoneyDeFi ProtocolBase$350K
An attacker used a flash loan and a reentrancy flaw—where a contract is called again before its first operation finishes—to manipulate exchange rates and withdraw collateral worth about $310,000.
LavaDeFi ProtocolArbitrum$340K
A calculation flaw in Lava Lending’s liquidation system let an attacker use a flash loan to miscalculate collateral and debt, causing losses of about $340,000. The lending markets were paused.
Galaxy FoxTokenEthereum$330K
Galaxy Fox’s token contract allowed anyone to change its Merkle root, a data structure used to verify claims. Attackers changed it to falsely claim 108 ETH from the contract.
Bullran Index$310K
An MEV bot exploited missing permission checks in Bullran Index’s custom safe contract, burning a user’s deposited BUI tokens and extracting 136 ETH.
ParaSwapDeFi ProtocolEthereum$300K
A flaw in ParaSwap’s Augustus V6 contract exposed wallets that had approved it, allowing funds to be taken. Most of the stolen funds were recovered or secured for return.
TLN ProtocolDeFi ProtocolBNB$280K
An undisclosed vulnerability in TLN Protocol’s lending contract let an attacker drain about $280,000 in assets. The funds were subsequently laundered through Tornado Cash.
DeBox$275K
A private key for a DeBox operational wallet leaked, and attackers stole 31.03 ETH and 4.879 million BOX tokens.
