Crypto Hacks
Recent crypto hacks and thefts
The latest crypto hacks, exploits and exchange thefts, newest first: who was hit, how much was taken, how it happened and what came back. Every known incident since 2011, searchable by name, chain or attack type.
Last updated · Checked daily
417 incidents Clear filters
DrakeUndisclosed
Drake’s X account was allegedly compromised and used to promote a Solana meme coin that was later confirmed to be a scam. The promotional posts were deleted.
Haven ProtocolUndisclosed
A flaw in Haven Protocol’s range-proof checks let attackers mint illicit XHV tokens. Reports indicated the supply exceeded 500 million tokens, and the team advised exchanges to halt trading.
Cardano FoundationUndisclosed
The Cardano Foundation’s X account was reported compromised, and users were advised to ignore its posts temporarily.
ArataUndisclosed
Arata reported that its ecosystem and centralized exchange wallet were exploited, and the hacker sold a significant portion of the project’s tokens.
BrettUndisclosed
Brett’s official X account was reportedly compromised and used to post false information.
Pump ScienceUndisclosed
An oversight left a wallet’s private key—the secret needed to control it—in Pump Science’s website source code. An attacker obtained the key and exploited the wallet.
TectonicDeFi ProtocolCronosUndisclosed
The reported Tectonic hack could not be verified; searches found no credible reports or announcements of an incident on that date.
Giggle AcademyUndisclosed
Binance co-founder CZ confirmed that the official X account of his educational project, Giggle Academy, had been hacked.
GMGNUndisclosed
GMGN reported a malicious attack on its website, suspected to involve automated crawling and traffic-flooding methods. Some site features were temporarily affected and later restored; no stolen funds were reported.
dogwifcoin (WIF)Undisclosed
Dogwifcoin’s X account was suspected of being hacked and used to post messages about token contracts.
Wiz KhalifaUndisclosed
Wiz Khalifa’s X account was hacked and used to post fake announcements about a WIZ token.
Lottie PlayerUndisclosed
Lottie Player suffered a supply-chain attack that affected projects including 1inch and Movement.
KeystoneUndisclosed
Keystone’s official X account was suspected of being hacked; the report warned users about possible risks but did not describe any stolen funds.
Andy AyreyUndisclosed
Truth Terminal founder Andy Ayrey announced a new token on X, but it was suspected that his account may have been hacked.
TransakUndisclosed
A phishing attack gave someone access to a Transak employee’s laptop and credentials for a third-party identity-checking vendor. The attacker then accessed some user information in the vendor’s dashboard.
MuratiAIUndisclosed
MuratiAI’s X account was suspected of being hacked and used to post phishing links.
EigenlayerUndisclosed
EigenLayer’s official X account was suspected of being hacked and used to post a fake phishing link.
KabosumamaUndisclosed
Kabosumama’s Instagram account was reportedly hacked and used to promote a fake update and a new memecoin. The attacker pulled out funds after drawing people into the coin.
LagrangeUndisclosed
Lagrange’s X account was reportedly compromised and used to post a scam link related to its LGR token. No stolen funds were reported.
Ambient FinanceDeFi ProtocolEthereumUndisclosed
Attackers used compromised domain-registrar credentials to redirect Ambient Finance’s website to a fake site, where users were tricked into approving token transfers. Ambient recovered the domain and reimbursed affected users; its smart contracts were not affected.
Zulu NetworkUndisclosed
Zulu Network’s official X account appeared to be compromised and used to post a fake phishing link.
KOR ProtocolUndisclosed
KOR Protocol’s official X account appeared to be compromised and posted a fake phishing link.
SPX6900Undisclosed
SPX6900’s official X account was hacked. Users were warned not to click its links.
Ordinals WalletUndisclosed
Ordinals Wallet’s X account was hacked and used to post a phishing link, which was later deleted.
Spot On ChainUndisclosed
Spot On Chain’s X account was reportedly compromised and used to post a fake EIGEN airdrop link. No stolen funds were reported.
LEGO GroupUndisclosed
Hackers briefly altered LEGO’s homepage to display a fraudulent “LEGO Coin” token promotion, which was removed after about 75 minutes.
SymbioticUndisclosed
Symbiotic’s official X account was suspected of being hacked and posted a fake phishing link.
ether.fiUndisclosed
A security incident involving domain registrar Gandi.net led to the ether.fi domain being compromised.
ImmutableUndisclosed
A community support contractor’s Discord account was compromised, allowing a phishing link to be posted in Immutable’s Discord server. No stolen funds were reported.
MasaUndisclosed
The decentralized AI data network Masa was reportedly hacked, suffering losses exceeding six figures; it did not disclose the incident to its community.
CompoundUndisclosed
Compound’s Discord server was hacked. No theft or loss of funds was reported.
DINUndisclosed
DIN’s official X account was hacked and used to post phishing links.
Ethena LabsUndisclosed
Attackers compromised Ethena Labs’ domain registrar account, prompting the team to disable its website. The protocol was unaffected and its funds remained secure.
DecentralandUndisclosed
Decentraland’s official X account was compromised and used to post a phishing link. No stolen funds were reported.
Rivus DAODeFi ProtocolEthereumUndisclosed
A developer inserted a backdoor into Rivus DAO’s migration contract and drained its liquid-staking protocol. The team recovered the funds using the developer’s identity documents and relaunched the project.
Jules UrbachUndisclosed
The X account of Render Network founder and CEO Jules Urbach was hacked and used to post fake airdrop information. No fund loss was reported.
FuelUndisclosed
Fuel’s official Discord was attacked. The team warned users against suspicious links and requests for personal information.
Jaylen BrownUndisclosed
Jaylen Brown’s X account was hacked and used to post fake token promotions. No theft or loss of funds was reported.
NEAR ProtocolUndisclosed
NEAR Protocol’s official X account was hijacked and used to post messages attacking the crypto ecosystem.
SeiUndisclosed
Sei’s official Discord was reportedly compromised and used to post a fake phishing link; no fund loss was reported.
