Crypto Hacks
Recent crypto hacks and thefts
The latest crypto hacks, exploits and exchange thefts, newest first: who was hit, how much was taken, how it happened and what came back. Every known incident since 2011, searchable by name, chain or attack type.
Last updated · Checked daily
2,404 incidents
VergeUndisclosed
An attacker used forged timestamps to exploit Verge's block mining and add blocks rapidly, reportedly mining 250,000 XVG.
ElectroneumUndisclosed
An attacker used a large amount of computing power to carry out a 51% attack on Electroneum. The report does not specify what happened to funds.
BinanceUndisclosed
A phishing campaign targeted Binance users. The incident report does not say what funds, if any, were stolen.
Blockchain.info$50M
A hacking group used Google search ads for cryptocurrency-related terms to direct users to fake Blockchain.info websites, stealing more than $50 million in cryptocurrency.
BitGrailCEXNano$170M
A flaw in BitGrail’s withdrawal system let attackers withdraw the same funds repeatedly, stealing Nano from the exchange’s hot wallets.
CoincheckCEXNEM$534M
Attackers stole customers’ NEM coins from Coincheck’s internet-connected hot wallet, which used a single key rather than requiring multiple approvals. The exchange began reimbursing affected customers.
Our coverage: CoinCheck Hacking Brings Consumer Protection To The ForeSource
BlackWallet$400K
An attacker accessed BlackWallet’s hosting account and changed its DNS settings, redirecting users to a version of the wallet hosted by the attacker. Cryptocurrency was collected in the attacker’s wallet.
EtherDeltaCEXEthereum$1.4M
Attackers hijacked EtherDelta’s website address and redirected users to a phishing site that captured their login details, leading to theft from users.
YOUBITCEXBitcoinUndisclosed
Attackers compromised Youbit’s hot wallet and took 17% of the exchange’s funds; its cold storage was not affected. Youbit closed after the breach.
NicehashCEXBitcoin$64M
Attackers obtained NiceHash employee credentials through phishing and accessed the company’s payment wallet, stealing more than 4,700 BTC. NiceHash later repaid affected users.
Our coverage: NiceHash CEO Confirms Theft Of More Than 4,700 BitcoinsSource
TetherTokenBitcoin$31M
An external attacker took USDT from Tether’s Treasury wallet and sent it to an unauthorized address. Tether blocked the tokens from circulating or being redeemed and worked with the Omni Foundation on changes to reclaim them.
Our coverage: Under-pressure Tether Alleges $30 Million Loss To HackSource
Parity MultisigDeFi ProtocolEthereum$150M
A user reinitialized Parity’s shared wallet library and then destroyed it, permanently disabling more than 500 multisig wallets containing about 500,000 ETH.
BTC-eUndisclosed
Online reports suspected that hackers stole Bitcoin from BTC-e; a transaction moving about 66,163 BTC was cited, but the theft was unconfirmed.
ParityUndisclosed
A hacker exploited a vulnerability in Parity’s multi-signature wallet software, draining funds from three Ethereum projects: Swarm City, Edgeless, and Aeternity. A total of 153,037 ETH was stolen.
CoindashICOEthereum$7.7M
An attacker compromised CoinDash’s ICO website and replaced its deposit address with one they controlled. Investors sent ETH to that address before the sale was stopped; the attacker retained some of the funds.
ParityWalletEthereum$30M
A flaw in Parity’s multisignature-wallet library let an attacker take ownership of wallets and drain them. A white-hat group used the same flaw to rescue funds from other vulnerable wallets.
BithumbUndisclosed
Attackers obtained personal information for 31,800 Bithumb users from an employee’s computer and used or sought to use it for phone scams posing as exchange representatives. The report says exchange wallets were not affected.
YapizonCEXBitcoin$4.8M
Attackers breached Yapizon’s system and stole bitcoin from four hot wallets. The exchange replaced users’ lost balances with Fei tokens, which represented IOUs.
StellarUndisclosed
An inflation flaw in Stellar’s protocol let an attacker create 2.25 million XLM. The Stellar Development Foundation discovered and patched the bug.
BitcurexCEXBitcoin$1.5M
Attackers stole 2,300 BTC from Bitcurex, which shut down after the loss. The exchange later tried to restart but closed permanently weeks afterward.
BitfinexCEXBitcoin$72M
An attacker compromised Bitfinex’s hot-wallet keys and used them to transfer about 119,755 BTC without authorization. Bitfinex halted trading and withdrawals while investigating.
The DAODeFi ProtocolEthereum$60M
The attacker repeatedly called a withdrawal function before the DAO contract updated the account balance, taking 3.6 million ETH.
GatecoinCEXEthereum$2M
Attackers exploited a disruption during a server reboot to redirect deposits from cold storage—offline wallets—to a vulnerable hot wallet. Gatecoin lost approximately 250 BTC and 185,000 ETH.
ShapeShiftCEXBitcoin$230K
An employee stole funds from ShapeShift, then sold security credentials to outside attackers who made further thefts. The report says customers lost no funds because the exchange did not hold customer assets.
BTERCEXBitcoin$1.65M
Attackers compromised BTER’s servers and stole 50 million NXT from its hot wallets. The exchange suspended operations afterward.
BitfinexCEXBitcoin$329K
Attackers compromised Bitfinex’s hot wallets, the exchange’s online storage, and stole about 1,460 BTC.
KipCoinCEXBitcoin$728K
Attackers accessed KipCoin’s server and copied its wallet.dat file, which holds wallet keys. Months later, they began moving more than 3,000 BTC.
BTERCEXBitcoin$1.75M
BTER’s cold wallet was breached and 7,170 BTC was stolen; the exchange suspended operations.
796CEXBitcoin$270K
A flaw in 796’s withdrawal system let an attacker change a withdrawal address, and exchange staff failed to catch the change. As a result, 1,000 BTC went to the attacker instead of the customer.
BitstampCEXBitcoin$5.2M
Phishing emails led an employee to install malware, giving attackers access to Bitstamp’s hot-wallet systems and wallet files. The attackers stole 19,000 bitcoins from its operating wallets.
CryptsyCEXBitcoinLitecoin$9.58M
Cryptsy reported that Trojan code planted in its systems led to the theft of bitcoin and litecoin. Later evidence suggested the CEO may have carried out an internal theft instead.
MintPalCEXBitcoin$2M
Attackers bypassed MintPal’s security controls and withdrew 8 million VeriCoin from its hot wallet. VeriCoin developers rolled back the blockchain, restoring the stolen tokens to the exchange.
PoloniexCEXBitcoin$50K
A flaw in Poloniex’s withdrawal processing let an attacker submit simultaneous requests and withdraw 97 BTC despite lacking the balance. The requests processed before the system updated account balances.
FlexcoinCEXBitcoin$600K
A flaw in Flexcoin’s transfer system let an attacker send simultaneous requests and move more BTC than the account held, stealing 896 BTC.
PicostocksCEXBitcoin$4.43M
Picostocks lost 5,896 BTC from its hot and cold wallets. The offline storage was accessed, but the description does not establish whether this resulted from an insider or compromised key storage.
MtGoxCEXBitcoin$470M
Attackers gained access to Mt. Gox’s hot wallet and siphoned bitcoins over several years. About 850,000 BTC belonging to customers and the company went missing.
BitcashCEXBitcoin$100K
Attackers used compromised Bitcash staff email accounts to send phishing messages that persuaded customers to send bitcoin for supposed recovery. Bitcoins were stolen from customer wallets.
Inputs.ioCEXBitcoin$1.2M
Attackers compromised email accounts used for password resets and bypassed two-factor authentication through a flaw in the hosting server, stealing more than 4,100 BTC across two hacks.
Feathercoin$63.8K
An attacker used a 51% attack—controlling most of the network’s mining power—to double-spend Feathercoin on an exchange, taking 580,000 coins.
BitfloorCEXBitcoin$250K
An attacker obtained an unencrypted backup of Bitfloor’s Bitcoin wallet keys and used them to transfer coins. The breach forced the exchange to suspend operations.
