Crypto Hacks
Recent crypto hacks and thefts
The latest crypto hacks, exploits and exchange thefts, newest first: who was hit, how much was taken, how it happened and what came back. Every known incident since 2011, searchable by name, chain or attack type.
Last updated · Checked daily
417 incidents Clear filters
ChainLinkUndisclosed
Chainlink’s official Discord server was reportedly hacked. No further details or stolen funds were reported.
UsualUndisclosed
Usual’s official Discord server was hacked. The protocol warned users not to click links; no fund loss was reported.
PowerledgerUndisclosed
Powerledger’s Telegram channel was hacked, and the company warned users not to engage with it or share information.
Witness ChainUndisclosed
Witness Chain’s official Discord server was hacked. No theft or loss of funds was reported.
Orderly NetworkUndisclosed
Orderly Network’s Discord server was compromised; the team warned users not to click links while it addressed the breach.
io.netUndisclosed
io.net’s official Discord was reportedly hacked. No funds were reported taken.
Kylian MbappeUndisclosed
Kylian Mbappé’s X account was compromised and used to promote a token bearing his name. Its market value briefly surged to tens of millions of dollars before falling to zero.
1inchUndisclosed
1inch’s official Discord appeared to be hacked, and phishing links were posted. No fund loss was reported.
ZkSyncUndisclosed
Hackers took over ZkSync’s official Discord and posted a link to a fake second airdrop, aiming to lure users with a false promise of free ZK tokens.
AvalancheUndisclosed
Avalanche’s Discord server was compromised. No theft or loss of funds was reported.
ArtelaUndisclosed
An attacker took control of Artela’s official Discord and posted fake airdrop messages. The team removed the posts and restored the channel.
PolygonUndisclosed
Attackers compromised Polygon’s community Discord, and users were warned not to click links posted there. No fund loss was reported.
AquariusUndisclosed
An attacker took over Aquarius’s official X account and changed its username, email address, and phone number. The attacker also took control of the account’s former username through a spam account.
HFLHUndisclosed
HFLH, a staking and lending protocol on BNB Chain, was attacked through a contract vulnerability. The report does not say what was taken or what happened to the funds.
McDonaldUndisclosed
McDonald’s Instagram account was allegedly hacked and used to promote the GRIMACE meme token. No theft or loss of funds was reported.
ParclUndisclosed
Attackers compromised Parcl’s website, tricking users into signing transactions that took tokens from their Solana wallets while Phantom displayed fake results. The project’s X account also appeared to be compromised and posted about PARCL rewards.
Sahara AIUndisclosed
Sahara AI’s official Discord was compromised, with users warned not to click links or respond to messages. No fund loss was reported.
Luigi D'Onorio DeMeoUndisclosed
The X account of AvaLabs COO Luigi D’Onorio DeMeo appears to have been compromised. The report warned users not to interact with addresses or links posted from it.
RARI FoundationUndisclosed
Hackers took over RARI Foundation’s official Discord server. The report does not mention stolen funds.
StarknetUndisclosed
Starknet’s Discord server was reportedly compromised, and the team warned users not to click links there. No fund loss was reported.
MetisUndisclosed
Metis’s Discord server was compromised, and the network warned users not to click links, including purported airdrop links. No fund loss was reported.
SAT20 LabsUndisclosed
SAT20 Labs’ official Twitter account was hacked and used to post links to install malware. No theft or loss of funds was reported.
TinTinLandUndisclosed
TinTinLand’s Twitter account was stolen and its pinned post contained a phishing link. The team resolved the account theft and reviewed and strengthened its account security.
Kelp DAOUndisclosed
Attackers took over Kelp’s domain registrar account and changed its nameserver routing, sending visitors to a fake version of the app that tried to trick them into phishing transactions.
RenzoUndisclosed
Attackers compromised Renzo’s Discord server. The report did not specify any stolen funds.
ArbitrumUndisclosed
The Arbitrum website was apparently hacked and redirected to the website of the MOG meme project. The report does not mention stolen funds.
EthenaUndisclosed
Ethena’s Discord server was hacked. The report warned users not to click links posted there; it gave no details about stolen funds.
Unstoppable DomainsUndisclosed
Unstoppable Domains said its website had been attacked and warned users not to visit it or open emails from its domain. The reports did not specify what was taken or how the attack occurred.
CompoundUndisclosed
Compound Finance’s official website was compromised and hosted a phishing site. No loss of funds was reported.
Wasabi WalletUndisclosed
A WasabiCoordinator service was reported to be stealing user funds through attacks involving free coordinators, a compromised GitHub supply chain, and attacks targeting users. Wasabi Wallet told users connected to the coordinator to stop CoinJoin operations.
Doja CatUndisclosed
Doja Cat’s Twitter account was hacked and used to promote a memecoin. No theft or loss of funds was reported.
InterlayUndisclosed
Attackers took over Interlay’s official Twitter account and used it to post a scam message. No fund loss was reported.
AuthyUndisclosed
A vulnerability in Authy exposed the phone numbers of 33 million users. No funds were reported stolen.
Sydney SweeneyUndisclosed
Sydney Sweeney’s Twitter account was hacked and used to promote a crypto token bearing her name in what was described as an apparent pump-and-dump scheme. No fund loss was reported.
Particle NetworkUndisclosed
Hackers accessed Particle Network’s email account and used it to send phishing emails promoting a fake PARTl token presale. The report does not say that funds were stolen.
Evolve Bank & TrustUndisclosed
An employee clicked a malicious link, leading to the theft of 33 terabytes of data from Evolve Bank & Trust, affecting data associated with 155,586 accounts. The bank said the attack was stopped within days; no further unauthorized activity was detected.
BorpaTokenUndisclosed
BorpaToken’s official X account was compromised. The team warned users not to click links and contacted X to resolve the issue.
CyberUndisclosed
Attackers compromised Cyber’s Discord and posted a phishing link in its announcements channel. No fund loss was reported.
MetallicaUndisclosed
Hackers took over Metallica’s social media accounts and used them to promote fake cryptocurrency tokens, misleading fans and investors into buying worthless tokens.
DeFianceUndisclosed
The official X account of DeFiance Capital was compromised. Its founder warned users not to click links posted by the account; no fund loss was reported.
