Crypto Hacks

Top 10 crypto hacks of 2016

In 2016, attackers took $136M in 5 crypto hacks and thefts. The biggest was Bitfinex on Aug 2, 2016, at $72M. The 5 largest account for 100% of the year's losses.

Last updated · Data last changed · Checked daily

$136M
stolen in 2016
5 incidents
$72M
biggest hack of 2016
Bitfinex, Aug 2, 2016
100%
of losses from the top 5

The 5 biggest crypto hacks of 2016, ranked

See all 5 incidents of 2016

  1. 1

    Bitfinex

    Aug 2, 2016CEXBitcoin
    $72M

    An attacker compromised Bitfinex’s hot-wallet keys and used them to transfer about 119,755 BTC without authorization. Bitfinex halted trading and withdrawals while investigating.

    How Hot Wallet Key Compromised (Key Compromise)Chains BitcoinReported loss $72M to $900MReported by DefiLlama, SlowMistRecord updated Nov 12, 2026

  2. 2

    The DAO

    Jun 17, 2016DeFi ProtocolEthereum
    $60M

    The attacker repeatedly called a withdrawal function before the DAO contract updated the account balance, taking 3.6 million ETH.

    How Reentrancy (Reentrancy)Chains EthereumReported by DefiLlama, SlowMistRecord updated Nov 12, 2026

  3. 3

    Gatecoin

    May 14, 2016CEXEthereum
    $2M

    Attackers exploited a disruption during a server reboot to redirect deposits from cold storage—offline wallets—to a vulnerable hot wallet. Gatecoin lost approximately 250 BTC and 185,000 ETH.

    How Improper Access Control (Access Control)Chains EthereumReported by DefiLlama, SlowMistRecord updated Nov 12, 2026

  4. 4

    Bitcurex

    Oct 13, 2016CEXBitcoin
    $1.5M

    Attackers stole 2,300 BTC from Bitcurex, which shut down after the loss. The exchange later tried to restart but closed permanently weeks afterward.

    How Hot Wallet Key Compromised (Key Compromise)Chains BitcoinReported by DefiLlamaRecord updated Nov 12, 2026

  5. 5

    ShapeShift

    Apr 7, 2016CEXBitcoin
    $230K

    An employee stole funds from ShapeShift, then sold security credentials to outside attackers who made further thefts. The report says customers lost no funds because the exchange did not hold customer assets.

    How Private Key Compromised (Key Compromise)Chains BitcoinReported by DefiLlamaRecord updated Nov 12, 2026

Sources, consolidated into one record per incident:

  • DefiLlama checked
  • SlowMist checked
  • Rekt checked

Amounts are US dollar values at the time of each incident; where sources report different figures, the record shows the range. Summaries by CryptoCoin.News. Spotted a mistake? Tell us.