Crypto Hacks
Top 10 crypto hacks of 2024
In 2024, attackers took $1.95B in 417 crypto hacks and thefts. The biggest was DMM Bitcoin on May 31, 2024, at $305M. The 10 largest account for 64% of the year's losses.
Last updated · Data last changed · Checked daily
The 10 biggest crypto hacks of 2024, ranked
1
DMM Bitcoin
May 31, 2024CEXBitcoin$305M returned$305MAttackers compromised a DMM Bitcoin employee and intercepted legitimate transactions to drain the exchange’s hot wallet, taking about 48.2 billion yen worth of bitcoin.
2
PlayDapp
Feb 9, 2024DeFi ProtocolEthereum$290MAfter PlayDapp’s deployer key was compromised, an attacker added themselves as a PLA token minter and minted large quantities of tokens in two transactions. PlayDapp later paused the token contract.
3
WazirX
Jul 18, 2024CEXEthereum$235MAttackers compromised a WazirX multisignature wallet held with Liminal, causing a loss of more than $230 million in tokens. A multisignature wallet requires approval from multiple signers to move funds.
4
Chris Larsen
Jan 31, 2024$113MUnauthorized access to Chris Larsen’s personal XRP accounts led to the theft of 213 million XRP. Some affected addresses were frozen after exchanges were notified.
5
Munchables
Mar 26, 2024GamingBlast$62.5MA developer used control of Munchables’ upgradeable proxy—a contract that can be updated—to assign themselves funds and drain about $62.5 million. The developer later returned the funds, which were secured in a multisig wallet.
6
BitForex
Feb 23, 2024$56.5MBitForex experienced suspicious fund outflows across multiple blockchains, after which the exchange restricted access and stopped processing withdrawals. The reports describe a suspected exit scam, but do not confirm who took the funds or what happened to them.
7
BtcTurk
Jun 22, 2024CEX$54MAttackers compromised private keys to BtcTurk’s hot wallets and stole cryptocurrency, mainly targeting Avalanche holdings. Binance froze $5.3 million in recovered funds, and the exchange halted deposits and withdrawals while investigating.
8
Radiant Capital
Oct 16, 2024DeFi ProtocolBSCArbitrum$50MAttackers used malware to compromise devices belonging to three Radiant contributors, then deceived multisig signers into approving malicious transactions that gave the attackers control of lending markets on BNB Chain and Arbitrum, which they drained.
9
Hedgey
Apr 19, 2024DeFi ProtocolArbitrumEthereum$44.7MAttackers exploited missing checks in Hedgey’s `createLockedCampaign` function, using flash loans to bypass access controls and create fraudulent approvals. Vault funds were stolen from the Ethereum and Arbitrum networks.
10
BingX
Sep 20, 2024CEXEthereum$43.3MAttackers breached BingX’s hot wallets and drained about $43 million in cryptocurrency. BingX said it would reimburse affected users from its reserves.
Our coverage: BingX Promises User Compensation After $43 Million HackSourceRekt report
