Crypto Hacks
Recent crypto hacks and thefts
The latest crypto hacks, exploits and exchange thefts, newest first: who was hit, how much was taken, how it happened and what came back. Every known incident since 2011, searchable by name, chain or attack type.
Last updated · Checked daily
119 incidents Clear filters
UpbitCEXEthereum$49.3M
Attackers compromised Upbit’s Ethereum hot wallet and stole 342,000 ETH. The exchange froze deposits and withdrawals, moved its remaining hot-wallet funds to cold storage, and said it would cover the loss.
Our coverage: Hackers Steal Almost 50 Million Dollars From UpBitSource
BinanceCEXBitcoin$40M
Attackers obtained Binance user credentials and other information through methods including phishing and malware, then withdrew 7,000 BTC. Binance reimbursed affected customers from its insurance fund.
Our coverage: Binance Hack: What Went Wrong And Where They Stand?Source
CoinBeneCEXEthereum$40M
Coinbene’s hot wallet was compromised, and ERC-20 tokens were drained to unknown addresses. Reports described large amounts of Coinbene and Maximine tokens being stolen and sold.
BitPointCEXBitcoinEthereumLitecoin+1 chains$27.6M
Attackers breached BitPoint’s hot wallets and stole several cryptocurrencies, including BTC, BCH, ETH and LTC. The exchange later recovered some funds from overseas platforms and reimbursed customers.
CoinbinCEXEthereum$26M
Coinbin’s former CEO stole more than 100 ETH from an Ethereum wallet, claiming the key had been lost. Employee embezzlement and growing debts left the exchange filing for bankruptcy.
BithumbCEXEthereumRipple$19M
Bithumb’s internet-connected wallet was accessed using private keys, and EOS and XRP were stolen; reports differed on the amount of EOS taken. The exchange suspected insider involvement, and said customer funds were in cold storage.
Our coverage: Bithumb Experienced Major Hack Costing Over $19M Worth In CryptosSource
CryptopiaCEXEthereum$16M
Attackers compromised Cryptopia’s hot-wallet keys and made unauthorized transfers, stealing cryptocurrency from customer holdings. The exchange later reported another breach and theft before entering liquidation.
KrakenCEXBitcoin$10.5M
A hacker took control of a large Kraken account, then sold 1,200 BTC into a thinly traded BTC/CAD market, driving down the price and triggering liquidations of other users’ positions. The hacker reportedly gained about $10.45 million from those liquidations.
GateHubCEXRipple$9.5M
Attackers gained access to GateHub API permissions and stole 23.2 million XRP from about 100 user accounts; users’ private keys were reported secure. About 13.1 million XRP was laundered through exchanges before recovery efforts.
CoinTigerCEXEthereum$9.2M
Attackers breached CoinTiger’s cold wallet, which lacked multi-signature protection, and stole PTT tokens. Some entered markets and drove the price down, while the Proton Chain project froze others.
DragonExCEXBitcoinEthereumEOS+3 chains$7M
Attackers used phishing and fake Worldbit-bot trading software to breach DragonEx’s systems and obtain private keys and API access. They drained 20 cryptocurrency wallets, including wallets holding Bitcoin and Ether.
VeChainLayer 1VeChain$6.5M
VeChain’s buyback wallet was compromised after its private key was exposed, and 1.1 billion VET was stolen. The network froze the funds; the community later voted to permanently destroy 727 million of the frozen tokens.
FusionDeFi ProtocolEthereum$6.4M
Attackers stole Fusion’s transaction wallet private key and used it to take 10 million native FSN and 3.5 million ERC20 FSN tokens. Some tokens were traded before being frozen, and Fusion moved its remaining funds to cold storage.
BitrueCEXRippleCardano$4.7M
Attackers exploited a flaw in Bitrue’s withdrawal review process to bypass security checks and access user funds. They then stole XRP and ADA from the exchange’s hot wallet.
TronBankDeFi ProtocolTron$4.27M
A flaw in TronBank’s deployed contract let someone withdraw 26.73 million TRX, emptying the contract. The person who took the funds said they would return them to investors, but the report does not confirm that they did.
VinDAXCEXEthereumMultiple$500K
Attackers stole assets from VinDAX’s hot wallets across 23 small cryptocurrencies. The exchange coordinated with the affected projects to freeze or recover the assets and later said it had recovered the stolen value.
NULSLayer 1NULS$480K
Attackers exploited a flaw in NULS’s transaction-signature checks to transfer tokens from a team account. Some tokens reached markets; the project froze others and scheduled a hard fork to destroy them.
Ethereum ClassicChainEthereum Classic$220K
Attackers took control of most of Ethereum Classic’s mining power, reorganized its transaction history and double-spent ETC on two occasions.
EtboxCEXBitcoinEthereum$132K
Attackers targeted Etbox’s infrastructure to obtain exchange wallet private keys and API credentials, then stole cryptocurrency from the platform’s wallet.
Coinbase$100K
An attacker used a SIM swap—redirecting a victim’s phone number to a device they controlled—to access a Coinbase account and steal more than $100,000 in Bitcoin.
LocalBitcoinsCEXBitcoin$27K
Attackers compromised a third-party discussion forum used by LocalBitcoins to phish login details, including two-factor authentication codes. They accessed six user accounts and transferred 7.9 BTC before the forum was disabled.
VertcoinLayer 1Vertcoin$29
An attacker reorganized Vertcoin’s blockchain in a 51% attack, replacing blocks and redirecting outputs in an attempted double-spend. Bittrex suspended withdrawals during the attack.
Tron LoungeUndisclosed
An attacker used a self-made contract to roll back transactions against the Tron Lounge app contract, earning 54,653 TRX.
DiceUndisclosed
Using contracts they created, attackers exploited a transaction rollback flaw in TRON’s Dice contracts and gained 18,808 TRX.
GateHubUndisclosed
A GateHub data breach exposed passwords belonging to 1.4 million users.
BetHashUndisclosed
A BetHash attacker hijacked the smart contract’s bet-result notification and inserted extra operations into the process, exploiting the game’s betting rules to profit.
BitMEXUndisclosed
BitMEX exposed user data through an email error.
BitDiceUndisclosed
Attackers used a fake-EOS exploit against the BitDice game and gained more than 4,000 EOS, which they transferred to cryptocurrency exchanges.
SafuwalletUndisclosed
The SAFU Wallet browser extension injected hidden code into loaded webpages, including MEW, Index and Binance, and sent information to endpoints controlled through its domain. The code exposed users’ wallet information, which could let the operators access their wallets; the extension was later removed from the Chrome store.
CoinhouseUndisclosed
A phishing attack exposed Coinhouse users’ names and email addresses.
skreosladderUndisclosed
A hacker repeatedly exploited the EOS game to win thousands of EOS, using alternate accounts to get around the project’s blacklist.
BitstampUndisclosed
A vulnerability in Bitstamp exposed sensitive user information, including user IDs and bank card details. The report did not specify any funds taken.
SKR EOSUndisclosed
Attackers used transaction congestion—crowding the network with transactions—to exploit SKR EOS games and earn about 4,000 EOS.
SKReosUndisclosed
Attackers congested the game’s transactions by placing bets from many accounts at once, using multiple accounts to push blocks. They gained thousands of EOS.
RoyaleUndisclosed
Hackers attacked EOS Royale and took about 18,000 EOS. The attack method was not reported.
UnicornBetUndisclosed
Several hackers attacked the EOS game UnicornBet and gained thousands of EOS.
LuckyCloverUndisclosed
Multiple hackers repeatedly attacked the EOS game LuckyClover and won thousands of EOS.
MULTI.TODAYUndisclosed
An attacker exploited MULTI.TODAY’s betting-round mechanics by deploying a contract at the start of each round and using rollback betting to maximize returns, making 102,652 TRX.
7TronUndisclosed
Attackers used a rollback attack, which reverses or disrupts contract transactions, to take 67,695 TRX from 7Tron contracts.
7TronUndisclosed
Attackers used transaction rollbacks against the contracts, gaining 113,913 TRX.
