Hacks
Crypto hacks in 2021
Data as of 3 October 2026
127 recorded incidents in 2021 took $2.9B in total. The largest was Poly Network, $611.0M. That is 9.8% of all incidents in DefiLlama's record and 13.6% of the value lost. Amounts are the losses DefiLlama records, and its record does not say whether they are before or after any recovery. Data as of 3 October 2026.
By class of failure, 2021
- Protocol Logic $139.5M lost21 incidents
- Token & Share Accounting $306.6M lost20 incidents
- Oracle Manipulation $375.5M lost17 incidents
- Access Control $770.2M lost16 incidents
- Key Compromise $760.8M lost13 incidents
- Reentrancy $86.3M lost9 incidents
- Rugpull $143.7M lost7 incidents
- Bridge & Cross-Chain $23.7M lost6 incidents
- Social Engineering $124.0M lost6 incidents
- Frontend & Infrastructure $124.6M lost5 incidents
- Input Validation $5.2M lost5 incidents
- Governance $7.1M lost1 incidents
- Market Manipulation $930K lost1 incidents
Incidents in 2021
| Date | Incident | Class | Technique | Chains | Amount |
|---|---|---|---|---|---|
| 2021-12-30 | SashimiSwap | Protocol Logic | Swap Logic Flaw | Ethereum | $210K |
| 2021-12-23 | Monkey Kingdom | Social Engineering | Phishing | Solana | $1.3M |
| 2021-12-21 | Gamma | Reentrancy | Reentrancy | Ethereum | $8.2M |
| 2021-12-21 | Gamma | Token & Share Accounting | Arithmetic Error | Ethereum | $4.5M |
| 2021-12-21 | Bent Finance | Rugpull | Backdoor Contract | Ethereum | $1.8M |
| 2021-12-18 | Grim Finance | Reentrancy | Reentrancy | Fantom | $30.0M |
| 2021-12-14 | NerveBridge | Protocol Logic | Swap Logic Flaw | BSC | $537K |
| 2021-12-13 | Vulcan Forged | Key Compromise | Hot Wallet Key Compromised | Ethereum, Polygon | $140.0M |
| 2021-12-11 | AscenDEX | Key Compromise | Hot Wallet Key Compromised | Ethereum, BSC, Polygon | $77.0M |
| 2021-12-08 | 8ightDAO | Social Engineering | Phishing | Harmony | $1.8M |
| 2021-12-05 | Pizza DeFi | Token & Share Accounting | Arithmetic Error | EOS | $5.0M |
| 2021-12-04 | Bitmart | Key Compromise | Hot Wallet Key Compromised | Ethereum, BSC | $196.0M |
| 2021-12-03 | Polygon | Access Control | Improper Access Control | Polygon | $2.0M |
| 2021-12-02 | Badger DAO | Frontend & Infrastructure | CDN Compromise | Ethereum | $120.0M |
| 2021-11-30 | MonoX | Protocol Logic | Swap Logic Flaw | Ethereum, Polygon | $31.4M |
| 2021-11-28 | Visor Finance | Oracle Manipulation | Spot Price Manipulation | Ethereum | $976K |
| 2021-11-27 | Lever | Protocol Logic | Borrow Logic Flaw | BSC | $652K |
| 2021-11-25 | Snowdog | Rugpull | Liquidity Rug | Avalanche | $18.1M |
| 2021-11-23 | Ploutoz | Oracle Manipulation | Spot Price Manipulation | BSC | $365K |
| 2021-11-19 | Phantom Galaxies | Social Engineering | Malware | Ethereum | $1.1M |
| 2021-11-15 | Nerve | Protocol Logic | Swap Logic Flaw | BSC | $537K |
| 2021-11-07 | ChainSwap | Access Control | Caller Impersonation | Ethereum, BSC | $4.4M |
| 2021-11-05 | Ooki | Social Engineering | Phishing | Polygon, BSC | $55.0M |
| 2021-11-03 | Squid Games | Rugpull | Liquidity Rug | BSC | $3.4M |
| 2021-11-03 | Vesper Finance | Oracle Manipulation | Spot Price Manipulation | Ethereum | $3.4M |
| 2021-10-30 | BXH | Key Compromise | Private Key Compromised | BSC | $139.0M |
| 2021-10-29 | AnubisDAO | Rugpull | Admin Drain | Ethereum | $60.0M |
| 2021-10-29 | AutoShark | Protocol Logic | Reward Logic Flaw | BSC | $580K |
| 2021-10-27 | CREAM Lending | Oracle Manipulation | Spot Price Manipulation | Ethereum | $130.0M |
| 2021-10-23 | Alpha Homora | Oracle Manipulation | Spot Price Manipulation | Ethereum | $147K |
| 2021-10-18 | Glide Finance | Input Validation | Missing Input Validation | Elastos | $300K |
| 2021-10-14 | Indexed Finance | Oracle Manipulation | Spot Price Manipulation | Ethereum | $16.0M |
| 2021-10-08 | Mirror | Access Control | Improper Access Control | Terra Classic | $90.0M |
| 2021-10-04 | pNetwork | Bridge & Cross-Chain | Spoofed Event Log | BSC, Bitcoin | $13.0M |
| 2021-10-01 | Coinbase | Frontend & Infrastructure | Session Key Compromised | — | $0 |
| 2021-09-29 | Compound V2 | Token & Share Accounting | Arithmetic Error | Ethereum | $147.0M |
| 2021-09-21 | Vee Finance | Oracle Manipulation | Spot Price Manipulation | Avalanche | $34.0M |
| 2021-09-17 | JayPegs Automart | Frontend & Infrastructure | Frontend Compromise | Ethereum | $3.1M |
| 2021-09-15 | NowSwap | Token & Share Accounting | Arithmetic Error | Ethereum | $1.1M |
| 2021-09-12 | Zabu Finance | Protocol Logic | Deposit Logic Flaw | Avalanche | $3.2M |
| 2021-09-04 | DAO Maker Vesting | Access Control | Improper Access Control | Ethereum | $4.0M |
| 2021-09-03 | Siren | Reentrancy | Reentrancy | Polygon | $3.5M |
| 2021-08-30 | CREAM Lending | Reentrancy | Reentrancy | Ethereum | $18.8M |
| 2021-08-29 | Bilaxy | Key Compromise | Hot Wallet Key Compromised | Ethereum | $21.7M |
| 2021-08-29 | xToken | Oracle Manipulation | Spot Price Manipulation | Ethereum | $4.5M |
| 2021-08-25 | Dot.Finance | Oracle Manipulation | Spot Price Manipulation | BSC | $430K |
| 2021-08-19 | Liquid Global | Key Compromise | Hot Wallet Key Compromised | Ethereum | $91.3M |
| 2021-08-19 | Pinecone Finance | Token & Share Accounting | Incorrect Share Accounting | BSC | $200K |
| 2021-08-19 | Solend | Access Control | Improper Access Control | Solana | $16K |
| 2021-08-17 | SurgeBNB | Reentrancy | Reentrancy | BSC | $5.0M |
| 2021-08-15 | Ref Finance | Input Validation | Missing Input Validation | NEAR | $3.2M |
| 2021-08-13 | NEKO | Access Control | Improper Access Control | BSC | $2.2M |
| 2021-08-13 | Acala Network | Token & Share Accounting | Infinite Mint | Acala | $1.6M |
| 2021-08-12 | DAO Maker Vesting | Access Control | Improper Access Control | Ethereum | $7.0M |
| 2021-08-10 | Poly Network | Access Control | Improper Access Control | Ethereum, BSC, Polygon | $611.0M |
| 2021-08-10 | Punk Protocol | Access Control | Delegatecall Hijack | Ethereum | $8.9M |
| 2021-08-08 | Zerogoki | Oracle Manipulation | Oracle Misconfiguration | Ethereum | $670K |
| 2021-08-04 | WaultSwap | Market Manipulation | Risk Parameter Abuse | BSC | $930K |
| 2021-08-03 | Popsicle Finance | Protocol Logic | Reward Logic Flaw | Ethereum | $20.7M |
| 2021-07-30 | Levyathan | Frontend & Infrastructure | Key Stored Publicly | BSC | $1.5M |
| 2021-07-28 | PolyYeld Finance | Token & Share Accounting | Infinite Mint | Polygon | $250K |
| 2021-07-22 | THORChain DEX | Protocol Logic | Withdrawal Logic Flaw | Ethereum | $8.0M |
| 2021-07-16 | Bunny | Token & Share Accounting | Unbacked Mint | BSC | $2.4M |
| 2021-07-15 | Bondly | Social Engineering | Phishing | Ethereum | $5.9M |
| 2021-07-15 | THORChain DEX | Bridge & Cross-Chain | Bridge Logic Flaw | Ethereum | $5.0M |
| 2021-07-14 | ApeRocket | Protocol Logic | Reward Logic Flaw | BSC | $1.3M |
| 2021-07-13 | DeFiPie | Reentrancy | Reentrancy | Ethereum, BSC | $125K |
| 2021-07-11 | ChainSwap Bridge | Bridge & Cross-Chain | Bridge Logic Flaw | Ethereum, BSC | $4.4M |
| 2021-07-10 | Multichain | Key Compromise | Weak Key Generation | Ethereum, BSC, Fantom | $7.9M |
| 2021-07-03 | Haven Protocol | Token & Share Accounting | Infinite Mint | Haven | $8.2M |
| 2021-07-02 | ChainSwap | Bridge & Cross-Chain | Bridge Logic Flaw | Ethereum, BSC | $800K |
| 2021-07-02 | XDX Swap | Bridge & Cross-Chain | Bridge Logic Flaw | Heco | $176K |
| 2021-06-29 | THORChain DEX | Bridge & Cross-Chain | Bridge Logic Flaw | Ethereum | $350K |
| 2021-06-29 | Merlin | Token & Share Accounting | Arithmetic Error | BSC | $330K |
| 2021-06-28 | Safe Dollar | Protocol Logic | Reward Logic Flaw | Polygon | $248K |
| 2021-06-25 | xWin Finance | Input Validation | Missing Input Validation | BSC | $270K |
| 2021-06-24 | SharedStake | Access Control | Improper Access Control | Ethereum | $500K |
| 2021-06-23 | StableMagnet | Rugpull | Backdoor Contract | BSC | $27.0M |
| 2021-06-22 | Eleven Finance | Protocol Logic | Withdrawal Logic Flaw | BSC | $4.5M |
| 2021-06-21 | StakeHound / Fireblocks | Key Compromise | Key Brute Forced | Ethereum | $72.0M |
| 2021-06-21 | Impossible Finance | Oracle Manipulation | Spot Price Manipulation | BSC | $500K |
| 2021-06-20 | Polydex | Reentrancy | Reentrancy | Polygon | $500K |
| 2021-06-19 | Visor Finance | Access Control | Improper Access Control | Ethereum | $505K |
| 2021-06-16 | Alchemix V2 | Protocol Logic | Borrow Logic Flaw | Ethereum | $6.5M |
| 2021-06-10 | EvoDefi | Protocol Logic | Reward Logic Flaw | BSC | $1.0M |
| 2021-06-07 | 88mph | Input Validation | Missing Input Validation | Ethereum | $0 |
| 2021-06-06 | Fetch.ai | Key Compromise | Private Key Compromised | Multiple | $2.6M |
| 2021-06-03 | Hunny Finance | Token & Share Accounting | Incorrect Share Accounting | BSC | $0 |
| 2021-05-29 | Belt Finance | Token & Share Accounting | Incorrect Share Accounting | BSC | $6.3M |
| 2021-05-28 | BurgerSwap | Reentrancy | Reentrancy | BSC | $7.2M |
| 2021-05-26 | Merlin | Protocol Logic | Reward Logic Flaw | BSC | $680K |
| 2021-05-26 | Merlin | Token & Share Accounting | Rounding Error | BSC | $550K |
| 2021-05-24 | AutoShark | Protocol Logic | Reward Logic Flaw | BSC | $823K |
| 2021-05-23 | Bogged Finance | Token & Share Accounting | Arithmetic Error | BSC | $3.0M |
| 2021-05-19 | Bunny | Oracle Manipulation | Spot Price Manipulation | BSC | $45.0M |
| 2021-05-18 | Venus Protocol | Oracle Manipulation | Spot Price Manipulation | BSC | $100.0M |
| 2021-05-17 | BearnFi | Protocol Logic | Withdrawal Logic Flaw | BSC | $18.0M |
| 2021-05-17 | FinNexus | Key Compromise | Private Key Compromised | Ethereum, BSC | $7.0M |
| 2021-05-14 | flash.sx / vaults.sx | Reentrancy | Reentrancy | EOS | $13.0M |
| 2021-05-12 | xToken | Oracle Manipulation | Spot Price Manipulation | Ethereum | $24.0M |
| 2021-05-08 | Rari Capital | Access Control | Arbitrary External Call | Ethereum | $10.0M |
| 2021-05-07 | ValueDefi | Token & Share Accounting | Arithmetic Error | BSC | $11.0M |
| 2021-05-05 | ValueDefi | Access Control | Improper Access Control | BSC | $10.0M |
| 2021-05-02 | Spartan | Token & Share Accounting | Incorrect Share Accounting | BSC | $30.5M |
| 2021-04-28 | Uranium Finance | Token & Share Accounting | Arithmetic Error | BSC | $57.2M |
| 2021-04-19 | EasyFi | Social Engineering | Malware | Polygon | $59.0M |
| 2021-04-12 | PancakeSwap | Access Control | Improper Access Control | BSC | $1.8M |
| 2021-04-05 | Polkatrain | Protocol Logic | Reward Logic Flaw | Polkadot | $3.0M |
| 2021-04-04 | Force DAO | Token & Share Accounting | Donation Attack | Ethereum | $367K |
| 2021-03-20 | Turtle Dex | Rugpull | Liquidity Rug | BSC | $2.5M |
| 2021-03-16 | Iron Finance | Token & Share Accounting | Incorrect Share Accounting | Polygon | $170K |
| 2021-03-15 | TSD (True Seigniorage Dollar) | Governance | Malicious Proposal | BSC | $7.1M |
| 2021-03-15 | DEUS Finance | Oracle Manipulation | Spot Price Manipulation | Fantom | $3.0M |
| 2021-03-15 | PancakeSwap / Cream Finance | Frontend & Infrastructure | DNS Hijack | BSC, Ethereum | $0 |
| 2021-03-14 | Roll | Key Compromise | Hot Wallet Key Compromised | Ethereum | $5.7M |
| 2021-03-09 | DODO AMM | Access Control | Improper Access Control | Ethereum | $3.8M |
| 2021-03-05 | Paid Network | Token & Share Accounting | Infinite Mint | Ethereum | $27.0M |
| 2021-03-04 | Meerkat Finance | Rugpull | Admin Drain | BSC | $31.0M |
| 2021-03-01 | Seascape | Key Compromise | Private Key Compromised | Ethereum | $500K |
| 2021-02-27 | Furucombo | Access Control | Delegatecall Hijack | Ethereum | $14.0M |
| 2021-02-13 | Alpha Finance | Protocol Logic | Borrow Logic Flaw | Ethereum | $37.5M |
| 2021-02-12 | BT Finance | Oracle Manipulation | Spot Price Manipulation | Ethereum | $1.5M |
| 2021-02-09 | Growth DeFi | Input Validation | Missing Input Validation | Ethereum | $1.4M |
| 2021-02-05 | Yearn Finance | Oracle Manipulation | Spot Price Manipulation | Ethereum | $11.0M |
| 2021-02-01 | Cryptopia | Key Compromise | Hot Wallet Key Compromised | Multiple | $45K |
| 2021-01-27 | SushiSwap | Protocol Logic | Swap Logic Flaw | Ethereum | $104K |
| 2021-01-25 | Badger DAO | Protocol Logic | Swap Logic Flaw | Ethereum | $104K |
Source: DefiLlama, retrieved 3 October 2026, under its open methodology. Figures are a dated snapshot, not a live feed.