Crypto Hacks

Top 10 crypto hacks of 2015

In 2015, attackers took $9.93M in 6 crypto hacks and thefts. The biggest was Bitstamp on Jan 5, 2015, at $5.2M. The 6 largest account for 100% of the year's losses.

Last updated · Data last changed · Checked daily

$9.93M
stolen in 2015
6 incidents
$5.2M
biggest hack of 2015
Bitstamp, Jan 5, 2015
100%
of losses from the top 6

The 6 biggest crypto hacks of 2015, ranked

See all 6 incidents of 2015

  1. 1

    Bitstamp

    Jan 5, 2015CEXBitcoin
    $5.2M

    Phishing emails led an employee to install malware, giving attackers access to Bitstamp’s hot-wallet systems and wallet files. The attackers stole 19,000 bitcoins from its operating wallets.

    How Phishing (Social Engineering)Chains BitcoinReported by DefiLlama, SlowMistRecord updated Nov 12, 2026

  2. 2

    BTER

    Feb 17, 2015CEXBitcoin
    $1.75M

    BTER’s cold wallet was breached and 7,170 BTC was stolen; the exchange suspended operations.

    How Private Key Compromised (Key Compromise)Chains BitcoinReported by DefiLlama, SlowMistRecord updated Nov 12, 2026

  3. 3

    BTER

    Aug 15, 2015CEXBitcoin
    $1.65M

    Attackers compromised BTER’s servers and stole 50 million NXT from its hot wallets. The exchange suspended operations afterward.

    How Private Key Compromised (Key Compromise)Chains BitcoinReported by DefiLlamaRecord updated Nov 12, 2026

  4. 4

    KipCoin

    Feb 18, 2015CEXBitcoin
    $728K

    Attackers accessed KipCoin’s server and copied its wallet.dat file, which holds wallet keys. Months later, they began moving more than 3,000 BTC.

    How Private Key Compromised (Key Compromise)Chains BitcoinReported by DefiLlama, SlowMistRecord updated Nov 12, 2026

  5. 5

    Bitfinex

    May 22, 2015CEXBitcoin
    $329K

    Attackers compromised Bitfinex’s hot wallets, the exchange’s online storage, and stole about 1,460 BTC.

    How Hot Wallet Key Compromised (Key Compromise)Chains BitcoinReported by DefiLlamaRecord updated Nov 12, 2026

  6. 6

    796

    Jan 27, 2015CEXBitcoin
    $270K

    A flaw in 796’s withdrawal system let an attacker change a withdrawal address, and exchange staff failed to catch the change. As a result, 1,000 BTC went to the attacker instead of the customer.

    How Improper Access Control (Access Control)Chains BitcoinReported by DefiLlamaRecord updated Nov 12, 2026

Sources, consolidated into one record per incident:

  • DefiLlama checked
  • SlowMist checked
  • Rekt checked

Amounts are US dollar values at the time of each incident; where sources report different figures, the record shows the range. Summaries by CryptoCoin.News. Spotted a mistake? Tell us.