Crypto Hacks
Top 10 crypto hacks of 2020
In 2020, attackers took $4.42B in 111 crypto hacks and thefts. The biggest was LuBian on Dec 28, 2020, at $3.5B. The 10 largest account for 96% of the year's losses.
Last updated · Data last changed · Checked daily
The 10 biggest crypto hacks of 2020, ranked
1
LuBian
Dec 28, 2020OtherBitcoin$3.5BAn attacker exploited weak key generation in LuBian’s infrastructure to guess private keys and steal 127,426 BTC from its mining pool.
2
KuCoin
Sep 29, 2020CEXEthereum$281MAttackers obtained the keys to KuCoin’s hot wallets and stole cryptocurrency, including Bitcoin and tokens. KuCoin recovered most of the funds through tracking, contract changes, and law enforcement cooperation, and said it would cover users’ losses.
3
YFValue
Aug 24, 2020$170MA flaw in YFValue’s staking pool let malicious users reset the pool’s timer. The team said funds worth about $170 million were at risk of being locked, and an attacker tried to use the flaw to blackmail it; no funds were reported stolen.
4
Compounder.Finance
Dec 1, 2020$80MCompounder.Finance project owners transferred large amounts of tokens to their own accounts, causing the project to lose tokens worth about 80 million yuan.
5
Saffron Finance
Nov 30, 2020$50MA flaw in Saffron Finance’s redemption contracts left deposits from its first cycle locked for eight weeks. The team was working on a fix and a transition to the next cycle.
6
Josh Jones
Feb 22, 2020$45MJosh Jones had about $45 million in digital currency stolen after his SIM card was hacked.
7
Ravencoin
Jul 3, 2020$40MA vulnerability in Ravencoin allowed unknown parties to create extra RVN, amounting to 1.5% of the planned total supply. The tokens may have been sold, but the report does not give a confirmed loss amount.
8
Lendf.Me
Apr 19, 2020DeFi ProtocolEthereum$25MAn attacker exploited a reentrancy flaw in Lendf.Me, repeatedly moving tokens before the protocol updated its balances, and stole funds. Law enforcement and exchanges helped recover the funds within days.
9
Harvest Finance
Oct 26, 2020DeFi ProtocolEthereum$24MAn attacker used a flash loan to manipulate prices in Curve’s stablecoin pool, repeatedly minting and redeeming Harvest Finance tokens to drain funds. The attacker later returned about $2.5 million, reducing users’ losses.
10
Electrum
Oct 12, 2020$22MHackers stole Bitcoin from Electrum wallet users by tricking them into installing fake software updates. Older versions of the app remained vulnerable.
