Crypto Hacks
Top 10 crypto hacks of 2022
In 2022, attackers took $4.39B in 307 crypto hacks and thefts. The biggest was Ronin Network on Mar 23, 2022, at $624M. The 10 largest account for 74% of the year's losses.
Last updated · Data last changed · Checked daily
The 10 biggest crypto hacks of 2022, ranked
1
Ronin Network
Mar 23, 2022DeFi ProtocolBridgeEthereum$624MAttackers obtained enough Ronin validator keys to approve fake bridge withdrawals, taking 173,600 ETH and 25.5 million USDC. The breach was discovered six days later.
Our coverage: Largest-Ever DeFi Hack: $624M Stolen From Ronin NetworkSourceRekt report
2
BNB Bridge
Oct 6, 2022DeFi ProtocolBridgeBSC$570MAn incomplete check of Merkle proofs in BNB Chain’s Token Hub bridge let an attacker forge proofs and mint 2 million BNB. The chain was paused; about $137 million was moved out before the attack was contained, while $433 million remained frozen.
3
Vires Finance
Apr 5, 2022$530MVires Finance suffered reported losses exceeding $530 million, but the description does not establish how the funds left. Its founder denied allegations that his wallet was linked to the outflow.
Our coverage: “Infamous” Vires Finance Governance Vote FailedSource
4
FTX
Nov 12, 2022CEXEthereumSolana$450MFTX’s crypto wallets were compromised during the company’s bankruptcy, and more than $600 million in assets was reported stolen. Reports differed on the amount and how the wallets were accessed.
5
Wormhole
Feb 2, 2022DeFi ProtocolBridgeSolana$326M returned$326MAttackers exploited outdated signature verification on Wormhole to mint 120,000 wrapped ETH on Solana without locking equivalent ETH on Ethereum, then exchanged it for real ETH.
6
Nomad
Aug 1, 2022DeFi ProtocolBridgeEthereum$190MA setup error made Nomad’s bridge accept messages without verifying them, allowing attackers to forge instructions and drain about $190 million. More than $36 million was later returned.
7
Beanstalk
Apr 17, 2022DeFi ProtocolEthereum$181MAn attacker borrowed funds to gain enough temporary voting power to pass malicious Beanstalk proposals, then drained protocol assets. They also sent funds to a Ukraine charity; reports differ on the total stolen and how much the attacker kept.
Our coverage: Can Beanstalk Recover From The Most Recent DeFi Hack?SourceRekt report
8
Wintermute
Sep 20, 2022OtherEthereum$160MAttackers derived Wintermute’s DeFi wallet key by exploiting a weak seed used by the Profanity vanity-address generator, which creates custom wallet addresses. The compromised wallet held funds for DeFi operations; other operations were not affected.
9
Mango
Oct 11, 2022DeFi ProtocolSolana$115MThe attacker used large MNGO purchases to inflate the token’s price reported by price feeds, making their collateral appear far more valuable. They then borrowed and withdrew about $100 million in assets from Mango’s lending pools.
10
Elrond
Jun 5, 2022DeFi ProtocolElrond$113MA newly added blockchain function let an attacker create and take nearly 1.65 million EGLD, converting some into unbacked WEGLD. The team recovered and burned the illegal tokens, and said nearly all stolen funds were recovered.
