Crypto Hacks

Top 10 crypto hacks of 2018

In 2018, attackers took $2.33B in 84 crypto hacks and thefts. The biggest was BeautyChain on Apr 22, 2018, at $1B. The 10 largest account for 98% of the year's losses.

Last updated · Data last changed · Checked daily

$2.33B
stolen in 2018
84 incidents
$1B
biggest hack of 2018
BeautyChain, Apr 22, 2018
98%
of losses from the top 10

The 10 biggest crypto hacks of 2018, ranked

See all 84 incidents of 2018

  1. 1

    BeautyChain

    Apr 22, 2018TokenEthereum
    $1B

    An integer overflow in BeautyChain’s batchTransfer function let attackers create an enormous number of BEC tokens, which they sent to two addresses and sold. Exchanges later halted BEC and SMT trading, limiting the loss.

    How Infinite Mint (Token & Share Accounting)Chains EthereumReported by DefiLlama, SlowMistRecord updated Nov 12, 2026

  2. 2

    Coincheck

    Jan 26, 2018CEXNEM
    $534M

    Attackers stole customers’ NEM coins from Coincheck’s internet-connected hot wallet, which used a single key rather than requiring multiple approvals. The exchange began reimbursing affected customers.

    How Hot Wallet Key Compromised (Key Compromise)Chains NEMReported by DefiLlama, SlowMistRecord updated Nov 12, 2026

  3. 3

    Gate

    Apr 21, 2018CEX
    $235M

    Attackers compromised Gate.io’s private keys and drained Bitcoin, Ethereum, Dogecoin, and other tokens from the exchange. The breach was not publicly revealed until 2024.

    How Private Key Compromised (Key Compromise)Reported by DefiLlamaRecord updated Nov 12, 2026

  4. 4

    BitGrail

    Feb 12, 2018CEXNano
    $170M

    A flaw in BitGrail’s withdrawal system let attackers withdraw the same funds repeatedly, stealing Nano from the exchange’s hot wallets.

    How Improper Access Control (Access Control)Chains NanoReported by DefiLlama, SlowMistRecord updated Nov 12, 2026

  5. 5

    SmartMesh

    Apr 24, 2018TokenEthereum
    $140M

    An integer-overflow flaw in SmartMesh’s transferProxy function let attackers create counterfeit tokens; some were traded on exchanges before trading was halted.

    How Infinite Mint (Token & Share Accounting)Chains EthereumReported by DefiLlama, SlowMistRecord updated Nov 12, 2026

  6. 6

    ZAIF

    Sep 14, 2018CEXBitcoin
    $60M

    Attackers gained access to Zaif’s hot-wallet keys and stole Bitcoin, Bitcoin Cash, and MonaCoin. The Bitcoin Cash amount was not specified.

    How Hot Wallet Key Compromised (Key Compromise)Chains BitcoinReported by DefiLlama, SlowMistRecord updated Nov 12, 2026

  7. 7

    Blockchain.info

    Feb 19, 2018
    $50M

    A hacking group used Google search ads for cryptocurrency-related terms to direct users to fake Blockchain.info websites, stealing more than $50 million in cryptocurrency.

    How Phishing attackReported by SlowMistRecord updated Nov 12, 2026

  8. 8

    Coinrail

    Jun 10, 2018CEXEthereum
    $37.2M

    Attackers broke into Coinrail’s systems and stole more than $40 million in altcoins, including NPXS and Aston X. Partner exchanges helped recover about two-thirds of the stolen assets.

    How Improper Access Control (Access Control)Chains EthereumReported by DefiLlama, SlowMistRecord updated Nov 12, 2026

  9. 9

    Bithumb

    Jun 21, 2018CEXEthereum
    $31M

    Attackers gained access to Bithumb’s online wallet system and stole cryptocurrency, including about 35,000 ETH and other tokens.

    How Key Leaked via Infrastructure (Frontend & Infrastructure)Chains EthereumReported by DefiLlama, SlowMistRecord updated Nov 12, 2026

  10. 10

    Bancor

    Jul 9, 2018DeFi ProtocolEthereum
    $23.5M

    Attackers gained access to a wallet linked to Bancor's BancorConverter contract, apparently using a compromised private key, and drained about $23.5 million in tokens.

    How Hot Wallet Key Compromised (Key Compromise)Chains EthereumReported by DefiLlama, SlowMistRecord updated Nov 12, 2026

Sources, consolidated into one record per incident:

  • DefiLlama checked
  • SlowMist checked
  • Rekt checked

Amounts are US dollar values at the time of each incident; where sources report different figures, the record shows the range. Summaries by CryptoCoin.News. Spotted a mistake? Tell us.