Crypto Hacks
Recent crypto hacks and thefts
The latest crypto hacks, exploits and exchange thefts, newest first: who was hit, how much was taken, how it happened and what came back. Every known incident since 2011, searchable by name, chain or attack type.
Last updated · Checked daily
252 incidents Clear filters
Puffer FinanceUndisclosed
Puffer Finance’s website and official X account were reported compromised.
LevelUndisclosed
Attackers took over Level’s official X account and posted a fraudulent airdrop link. The report did not specify any stolen funds.
SwarmsUndisclosed
An attacker took over a Swarms team member’s Discord account through a malicious direct message, then deleted channels and removed more than 300 community members.
PlasmaUndisclosed
An attacker compromised Plasma’s official X account and posted links that appeared legitimate but redirected users to a phishing site.
SynthetixUndisclosed
Attackers took control of Synthetix’s main X account. Users were warned not to interact with links posted from it while the team worked to regain control.
PANewsUndisclosed
Attackers compromised the PANewsCN X account. The report warned users against clicking links or interacting with recent posts; it did not report stolen funds.
CoinTelegraphUndisclosed
Attackers altered CoinTelegraph’s website to show a pop-up with fake airdrop information. No financial losses were reported.
Abstract ChainUndisclosed
Abstract Chain’s official X account was reportedly compromised and used to promote a fake “official token” scam. The report did not say that funds were stolen in a protocol exploit.
Mehdi FarooqUndisclosed
A fake Zoom meeting invitation led Mehdi Farooq to download a malicious software update, which was used to drain six of his crypto wallets.
a16zUndisclosed
Attackers briefly took over a16z’s X account and posted a token promotion and other fake content. The firm said those posts did not come from it.
Echo ProtocolUndisclosed
Echo Protocol’s official X account was compromised. Users were warned not to interact with its recent posts or links.
ether.fiUndisclosed
Hackers took over ether.fi’s official Discord and posted scam links in fraudulent messages.
MegaETHUndisclosed
MegaETH’s X account was compromised. The team warned users not to click links or view recent posts from the account.
ZKsyncUndisclosed
The official X accounts of ZKsync and Matter Labs were compromised, and users were warned not to interact with them or click their links.
Sheffield UnitedUndisclosed
An attacker took over Sheffield United’s official X account and posted a Solana token address.
CointelegraphUndisclosed
Cointelegraph’s official X account was reportedly compromised and used to send contributors phishing links that led to a fake login page on a misspelled domain. Reports also said the account posted an on-chain token contract; that post was later deleted.
Curve FinanceUndisclosed
Attackers took over Curve Finance’s X account to promote a fake airdrop, then hijacked its website frontend. Users were warned about the compromised site.
TRON DAOUndisclosed
An unauthorized party gained access to TRON DAO’s X account and used it to publish a post with a contract address, send private messages, and follow unknown accounts.
HyperliquidUndisclosed
Hyperliquid’s X account was suspected of being compromised; the report did not confirm any theft or losses.
GrafanaUndisclosed
An attacker injected malicious code into a fork of Grafana’s repository and stole access tokens, then used them to access four private repositories. The breach was limited to automation systems and did not affect production systems or released software.
DINUndisclosed
Hackers took over the X accounts of DIN, its founder, and the DIN Foundation. Posts from those accounts were not from the official team.
AergoUndisclosed
A DDoS attack made Aergo’s official website unavailable. The report described a service disruption, not a loss of funds.
Watcher.GuruUndisclosed
Watcher.Guru’s X account was hacked. The platform said it was investigating how the breach happened.
Kaito AIUndisclosed
Kaito AI’s founder and official X account were compromised, but no KAITO wallets were affected.
MeowUndisclosed
Jupiter co-founder Meow’s X account was reportedly hacked and used to post token contract-address content; the posts were later deleted.
PumpfunUndisclosed
An attacker took over Pumpfun’s X account and used it to promote fake tokens.
ShawUndisclosed
Community reports said the X account of ai16z founder Shaw had been compromised. No stolen funds were reported.
JupiterUndisclosed
JupiterDAO confirmed that its official X account was compromised; the notice warned users not to click links or copy contract addresses from it.
Mohammed Dewji MOUndisclosed
An attacker took over businessman Mohammed Dewji’s X account, falsely announced a TANZANIA token launch, and sold the token to investors.
Dr Mahathir MohamadUndisclosed
The X account of former Malaysian Prime Minister Dr Mahathir Mohamad was compromised and used to promote a fake token.
The Tor ProjectUndisclosed
Hackers took over The Tor Project’s X account and used it to promote a fake token. No stolen funds were reported.
TIMEUndisclosed
TIME Magazine’s X account was allegedly compromised and used to post about the TIME token.
Dean NorrisUndisclosed
Hackers used Dean Norris’s compromised X account to promote a purported cryptocurrency launch, including a contract address and manipulated photo. After Norris confirmed the scam, the token’s value fell sharply.
Jair Messias BolsonaroUndisclosed
The X account of former Brazilian President Jair Bolsonaro was hacked and used to promote a token; the post was later deleted.
NasdaqUndisclosed
Attackers reportedly compromised Nasdaq’s official X account and used it to promote fraudulent meme coins. No stolen funds were reported.
Dan FinlayUndisclosed
Dan Finlay’s Farcaster account was compromised and used to promote a memecoin.
ZKsync IgniteUndisclosed
The ZKsync Ignite X account was compromised. The team warned users not to interact with it or click its links while recovery was pending.
Stability AIUndisclosed
Stability AI’s official X account posted information about a STAI token contract that appeared to be part of a compromise and scam.
CAT ProtocolUndisclosed
CAT Protocol detected and stopped an attempted attack, with no user funds lost. The incident was later classified as a white-hat action.
DAWNUndisclosed
Hackers took over DAWN’s X account and used it to post phishing tweets. No stolen funds were reported.
