Crypto Hacks
Recent crypto hacks and thefts
The latest crypto hacks, exploits and exchange thefts, newest first: who was hit, how much was taken, how it happened and what came back. Every known incident since 2011, searchable by name, chain or attack type.
Last updated · Checked daily
402 incidents Clear filters
ACG WORLDSUndisclosed
A phishing link was posted in the ACG WORLDS Discord announcements channel. No losses were reported.
PEPEUndisclosed
PEPE’s old Telegram account was hacked, and a compromised Twitter account was used to promote scams. The project said the accounts were not under official control.
Victory PointUndisclosed
A phishing link was posted in the major announcements channel of Victory Point’s Discord server.
HCT TokenUndisclosed
HCT Token suffered a flash-loan attack that caused a loss of about 30.5 BNB. About 30 BNB was later deposited into Tornado Cash, a service that obscures transaction trails.
Ordinals WalletUndisclosed
An attacker used a SIM-swap attack to take over Ordinals Wallet’s Twitter account and post phishing links. The attacker was identified as PinkDrainer.
Big.BUndisclosed
An attacker took over Big.B’s Discord server and posted a phishing link.
Gala GamesUndisclosed
An attacker deposited outdated GALA tokens that CoinHub mistakenly credited as the current token, then withdrew real GALA. The exchange was left with about $168 in GALA, and the attacker gained 2.7 ETH.
BaseUndisclosed
A block-production failure temporarily disrupted the Base network. The team deployed a fix, and block production and network services returned to normal; no funds were at risk.
Cyberport Hong KongUndisclosed
Hackers broke into some Cyberport Hong Kong computer systems and obtained about 436 GB of company and identity documents, including information on startup companies. The stolen data was reportedly offered for sale.
SaberDAOUndisclosed
SaberDAO reported that its Discord server had been hacked. The report does not say whether funds were stolen or how the attack happened.
Saber DAOUndisclosed
Saber DAO reported an attack on its Discord server and said it had blocked the attackers.
ParasUndisclosed
Paras said its Discord server was under attack and warned users against clicking links or approving transactions. No losses were reported.
BalthazarUndisclosed
Balthazar reported that his Discord was under attack and warned users not to follow links or approve transactions. The report gives no details of any funds taken.
GitcoinUndisclosed
An attacker took control of Gitcoin’s official X (formerly Twitter) account and posted phishing content. Gitcoin later regained access; no stolen funds were reported.
Lamas FinanceUndisclosed
Lamas Finance warned that its Discord was under attack and that a phishing link was being shared. The report urged users not to click it or approve transactions.
Kroll & BlockFiUndisclosed
A cybersecurity incident at bankruptcy claims agency Kroll exposed non-sensitive data belonging to some FTX and BlockFi claimants. FTX said its own systems were unaffected and temporarily froze affected accounts in its claims portal.
Made by ApesUndisclosed
A flaw in Made by Apes’ SaaSy Labs API exposed personal details submitted with licensing applications. The issue was fixed after being reported to Yuga Labs, which said it was checking whether any data had been misused.
MetisDAOUndisclosed
Attackers took over Metis’s official Twitter account after team members fell victim to a SIM-swap attack, which hijacks a phone number. They controlled the account for about 30 hours; no fund loss was reported.
Sei NetworkUndisclosed
Sei Network’s official Discord server was compromised, and the team warned users not to click links while it worked to regain control. The report does not specify any funds taken.
Fetch.aiUndisclosed
An attacker compromised an admin account on Fetch.ai’s Discord server. Fetch.ai warned users not to interact with posts there while the issue was being resolved.
MPC WalletsUndisclosed
Fireblocks disclosed BitForge vulnerabilities in wallets using multi-party computation, a method for splitting control of a wallet among parties. It said the flaws could have let attackers drain funds, but affected companies had worked with Fireblocks to fix them.
Blockchain CapitalUndisclosed
An attacker took over Blockchain Capital’s Twitter account and posted fake token-claim promotions. The tweets were removed and the account was restored; no funds stolen were reported.
Tim BeikoUndisclosed
Ethereum developer Tim Beiko’s Twitter account was compromised and used to post fake airdrop offers linking to a phishing site. Users were warned not to click the links; no stolen funds were reported.
InsurAceUndisclosed
An unauthorized user breached InsurAce’s Discord server and promoted a phishing website. SlowMist attributed the site to PinkDrainer; no stolen amount was reported.
VyperUndisclosed
A reentrancy-prevention bug in certain Vyper compiler versions left multiple Curve liquidity pools vulnerable to exploits. The bug affected versions 0.2.15, 0.2.16, and 0.3.0; the report did not specify the total funds taken.
MetaLabzDeFi ProtocolBSCUndisclosed
An unprotected emergency withdrawal function in MetaLabz’s token locker let an attacker bypass stake accounting and withdraw tokens. A subsequent liquidity attack brought the total loss to slightly over 400 BNB.
CoinListUndisclosed
An attacker took over CoinList’s Twitter account and promoted a scam token sale through a malicious website. CoinList shut down the site and investigated the incident; the report does not say that funds were stolen.
Hayden AdamsUndisclosed
Uniswap founder Hayden Adams’ Twitter account was hacked and used to post links to scam websites. The Uniswap Foundation warned users not to open them; no stolen funds were reported.
PleasrDAOUndisclosed
Attackers took over PleasrDAO’s official Twitter account and used it to promote a fake PLEASR token. No stolen funds were reported.
Shell ProtocolUndisclosed
Shell Protocol’s official Twitter account was compromised and used to post false claims about a SHELL token application. Reports linked the takeover to a SIM-card hack affecting the founder’s account as well.
KleverUndisclosed
Wallets imported into Klever K5 were affected because they had been created with an old, weak random-number generator, making their recovery phrases easier to predict. The report did not specify how much, if any, was taken.
Aptos FoundationUndisclosed
Hackers took over the Aptos Foundation’s Twitter account and used it to direct people to a fake airdrop website.
Bryan PellegrinoUndisclosed
LayerZero CEO Bryan Pellegrino’s Twitter account was stolen. No funds taken were reported.
NFT TraderUndisclosed
NFT Trader’s website was reportedly altered with malicious code on its front end, the part users see and interact with. The site was taken offline while the team investigated; no stolen funds were reported.
Manta NetworkUndisclosed
Manta Network’s Twitter account was stolen and used to post fake airdrop offers. The account was later restored.
Entangle ProtocolUndisclosed
Entangle Protocol’s Discord account was hacked.
ZigZagUndisclosed
ZigZag’s Discord account was hacked, and users were warned not to follow fake airdrop links. No stolen funds were reported.
AstariaUndisclosed
A flaw in Astaria’s BeaconProxy code let an attacker point the contract to malicious code that could destroy it. Astaria paused new loans and used a recovery script to move users’ funds and NFTs to multisignature wallets; no assets were reported missing.
SlingshotUndisclosed
Scammers took control of Slingshot’s Twitter account and used it to post links to fake websites promoting a supposed token airdrop. The report did not say that funds were stolen.
Move VMUndisclosed
A stack overflow flaw in Move VM allowed deeply nested recursive calls, which could shut down a network or prevent new validators from joining. The issue was reported as a vulnerability; no attack or stolen funds were described.
