Hacks
Crypto hacks in 2022
Data as of 3 October 2026
184 recorded incidents in 2022 took $3.6B in total. The largest was Ronin Bridge, $624.0M. That is 14.2% of all incidents in DefiLlama's record and 17.2% of the value lost. Amounts are the losses DefiLlama records, and its record does not say whether they are before or after any recovery. Data as of 3 October 2026.
By class of failure, 2022
- Access Control $56.3M lost32 incidents
- Oracle Manipulation $240.6M lost27 incidents
- Frontend & Infrastructure $122.1M lost19 incidents
- Key Compromise $815.7M lost18 incidents
- Input Validation $531.0M lost17 incidents
- Protocol Logic $24.5M lost17 incidents
- Social Engineering $630.0M lost13 incidents
- Reentrancy $107.6M lost12 incidents
- Token & Share Accounting $117.6M lost10 incidents
- Rugpull $20.8M lost7 incidents
- Governance $191.3M lost6 incidents
- Bridge & Cross-Chain $760.0M lost3 incidents
- Market Manipulation $16.1M lost3 incidents
Incidents in 2022
| Date | Incident | Class | Technique | Chains | Amount |
|---|---|---|---|---|---|
| 2022-12-29 | Jaypeggers | Reentrancy | Reentrancy | Ethereum | $19K |
| 2022-12-26 | Amun | Access Control | Improper Access Control | Polygon | $300K |
| 2022-12-25 | Rubic | Access Control | Arbitrary External Call | Ethereum | $1.4M |
| 2022-12-24 | Defrost | Key Compromise | Private Key Compromised | Avalanche | $12.0M |
| 2022-12-16 | Raydium AMM | Social Engineering | Malware | Solana | $4.4M |
| 2022-12-14 | Nimbus | Protocol Logic | Reward Logic Flaw | BSC | $76K |
| 2022-12-14 | FPR | Access Control | Improper Access Control | BSC | $29K |
| 2022-12-13 | ElasticSwap | Oracle Manipulation | Spot Price Manipulation | Avalanche, Ethereum | $850K |
| 2022-12-12 | BGLD | Oracle Manipulation | Spot Price Manipulation | BSC | $18K |
| 2022-12-11 | 3Commas | Frontend & Infrastructure | Database Breach | Multi-Chain | $20.0M |
| 2022-12-10 | Lodestar V0 | Oracle Manipulation | Spot Price Manipulation | Arbitrum | $6.9M |
| 2022-12-10 | MU&MUG | Oracle Manipulation | Spot Price Manipulation | Avalanche | $57K |
| 2022-12-10 | TiFi | Oracle Manipulation | Spot Price Manipulation | BSC | $44K |
| 2022-12-09 | NOVAToken | Rugpull | Admin Drain | BSC | $0 |
| 2022-12-07 | AES | Token & Share Accounting | Rounding Error | BSC | $62K |
| 2022-12-05 | BBOX | Oracle Manipulation | Spot Price Manipulation | BSC | $0 |
| 2022-12-05 | RFB | Input Validation | Missing Input Validation | BSC | $0 |
| 2022-12-03 | BTC.com | Frontend & Infrastructure | Key Leaked via Infrastructure | Bitcoin, Ethereum | $3.0M |
| 2022-12-03 | Ratio Finance | Key Compromise | Key Brute Forced | Solana | $0 |
| 2022-12-02 | Ankr | Access Control | Improper Access Control | BSC | $5.0M |
| 2022-12-02 | Overnight Finance | Protocol Logic | Unknown | Avalanche | $0 |
| 2022-12-01 | APC | Oracle Manipulation | Spot Price Manipulation | BSC | $6K |
| 2022-11-29 | SEAMAN | Protocol Logic | Unknown | BSC | $7K |
| 2022-11-29 | MBC & ZZSH | Access Control | Improper Access Control | BSC | $6K |
| 2022-11-23 | Numbers Protocol | Bridge & Cross-Chain | Bridge Logic Flaw | Ethereum | $14K |
| 2022-11-22 | AUR Protocol | Access Control | Improper Access Control | BSC | $13K |
| 2022-11-21 | sDAO | Protocol Logic | Unknown | BSC | $13K |
| 2022-11-18 | Polynomial | Input Validation | Missing Input Validation | Optimism | $7K |
| 2022-11-17 | UEarnPool | Protocol Logic | Reward Logic Flaw | BSC | $16K |
| 2022-11-16 | SheepFarm | Input Validation | Missing Input Validation | BSC | $72K |
| 2022-11-12 | FTX | Social Engineering | Phishing | Ethereum, Solana | $450.0M |
| 2022-11-10 | DFX V2 | Reentrancy | Reentrancy | Ethereum | $4.0M |
| 2022-11-09 | Brahma Finance | Access Control | Arbitrary External Call | Ethereum | $89K |
| 2022-11-07 | MooCAKECTX | Token & Share Accounting | Incorrect Share Accounting | BSC | $140K |
| 2022-11-06 | Pando Rings | Oracle Manipulation | Spot Price Manipulation | Mixin | $22.0M |
| 2022-11-03 | pNetwork | Frontend & Infrastructure | Key Leaked via Infrastructure | BSC | $4.3M |
| 2022-11-02 | Skyward Finance | Input Validation | Missing Input Validation | NEAR | $3.0M |
| 2022-11-02 | Save | Oracle Manipulation | Spot Price Manipulation | Solana | $1.3M |
| 2022-11-02 | Rubic | Key Compromise | Private Key Compromised | Ethereum | $1.2M |
| 2022-11-01 | Deribit | Key Compromise | Hot Wallet Key Compromised | — | $28.0M |
| 2022-11-01 | Save | Market Manipulation | Risk Parameter Abuse | Solana | $1.0M |
| 2022-10-28 | FriesDAO | Key Compromise | Weak Key Generation | Ethereum | $2.3M |
| 2022-10-27 | Team Finance | Input Validation | Missing Input Validation | Ethereum | $15.8M |
| 2022-10-27 | UvToken | Access Control | Improper Access Control | BSC | $1.5M |
| 2022-10-26 | N00dleSwap | Reentrancy | Reentrancy | Ethereum | $29K |
| 2022-10-25 | ULME | Access Control | Improper Access Control | BSC | $250K |
| 2022-10-24 | QuickSwap Market | Oracle Manipulation | Spot Price Manipulation | Polygon | $220K |
| 2022-10-23 | Layer2DAO | Social Engineering | Phishing | Optimism | $190K |
| 2022-10-21 | Bond Protocol | Input Validation | Missing Input Validation | Ethereum | $300K |
| 2022-10-20 | Ethereum Alarm Clock | Protocol Logic | Reward Logic Flaw | Ethereum | $260K |
| 2022-10-18 | Moola Market | Oracle Manipulation | Spot Price Manipulation | Celo | $8.4M |
| 2022-10-17 | MTDAO | Protocol Logic | Deposit Logic Flaw | BSC | $702K |
| 2022-10-17 | LiveArtX | Key Compromise | Hot Wallet Key Compromised | Ethereum | $39K |
| 2022-10-15 | Earning.Farm | Protocol Logic | Withdrawal Logic Flaw | Ethereum | $1.2M |
| 2022-10-13 | FTX | Frontend & Infrastructure | API Key Compromised | Ethereum | $70K |
| 2022-10-11 | Mango Markets V3 | Oracle Manipulation | Spot Price Manipulation | Solana | $115.0M |
| 2022-10-11 | TempleDAO | Access Control | Improper Access Control | Ethereum | $2.3M |
| 2022-10-11 | QANplatform | Key Compromise | Weak Key Generation | Ethereum | $2.0M |
| 2022-10-09 | Xave Finance | Governance | Malicious Proposal | Ethereum | $0 |
| 2022-10-06 | Binance Bridge | Bridge & Cross-Chain | Proof Verifier Bug | BSC | $570.0M |
| 2022-10-06 | RES Token | Oracle Manipulation | Spot Price Manipulation | BSC | $290K |
| 2022-10-04 | Sovryn | Reentrancy | Reentrancy | Rootstock | $1.1M |
| 2022-10-02 | Transit Swap | Input Validation | Missing Input Validation | Ethereum, BSC | $28.9M |
| 2022-09-20 | Wintermute | Social Engineering | Phishing | Ethereum | $160.0M |
| 2022-09-18 | GMX V1 Perps | Market Manipulation | Stale Price Arbitrage | Arbitrum | $565K |
| 2022-09-08 | New Free DAO | Protocol Logic | Reward Logic Flaw | BSC | $1.3M |
| 2022-09-08 | Ragnarok Online Invasion | Access Control | Improper Access Control | BSC | $44K |
| 2022-09-07 | GERA | Key Compromise | Deployer Key Compromised | Ethereum | $1.5M |
| 2022-09-06 | Nereus Finance | Oracle Manipulation | Spot Price Manipulation | Avalanche | $371K |
| 2022-09-05 | DAO Swap | Access Control | Improper Access Control | BSC | $580K |
| 2022-09-02 | ShadowFi | Access Control | Improper Access Control | BSC | $301K |
| 2022-09-02 | Bad Guys by RPF | Token & Share Accounting | Incorrect Share Accounting | Ethereum | $0 |
| 2022-09-01 | KyberSwap Classic | Frontend & Infrastructure | CDN Compromise | Polygon | $265K |
| 2022-08-24 | KaoyaSwap | Protocol Logic | Swap Logic Flaw | BSC | $118K |
| 2022-08-23 | SudoRare | Rugpull | Liquidity Rug | Ethereum | $800K |
| 2022-08-18 | Celer cBridge | Frontend & Infrastructure | DNS Hijack | Multi-Chain | $240K |
| 2022-08-14 | Acala | Token & Share Accounting | Infinite Mint | Acala | $0 |
| 2022-08-10 | Blur Finance | Rugpull | Exit Scam | BSC, Polygon | $600K |
| 2022-08-10 | XSTABLE Protocol | Protocol Logic | Unknown | Ethereum | $0 |
| 2022-08-09 | Curve DEX | Frontend & Infrastructure | DNS Hijack | Ethereum | $575K |
| 2022-08-08 | Dragoma | Rugpull | Admin Drain | Polygon | $3.5M |
| 2022-08-07 | EGD Finance | Oracle Manipulation | Spot Price Manipulation | BSC | $36K |
| 2022-08-02 | Slope Wallet | Frontend & Infrastructure | Key Stored Publicly | Solana | $4.1M |
| 2022-08-01 | Nomad | Bridge & Cross-Chain | Forged Proof | Ethereum | $190.0M |
| 2022-08-01 | ZB Exchange | Key Compromise | Hot Wallet Key Compromised | Multi-Chain | $4.8M |
| 2022-08-01 | Reaper Farm | Access Control | Improper Access Control | Fantom | $1.7M |
| 2022-07-28 | Nirvana V1 | Oracle Manipulation | Spot Price Manipulation | Solana | $3.5M |
| 2022-07-25 | Audius | Governance | Malicious Proposal | Ethereum | $6.0M |
| 2022-07-25 | LPC | Token & Share Accounting | Arithmetic Error | BSC | $45K |
| 2022-07-17 | Premint | Frontend & Infrastructure | Frontend Compromise | Ethereum | $375K |
| 2022-07-16 | Impermax | Key Compromise | Private Key Compromised | Ethereum, Polygon | $9.0M |
| 2022-07-13 | SpaceGodzilla | Oracle Manipulation | Spot Price Manipulation | BSC | $25K |
| 2022-07-12 | Citizen Finance | Key Compromise | Private Key Compromised | BSC, Polygon | $94K |
| 2022-07-11 | Uniswap (Phishing Attack) | Social Engineering | Phishing | Ethereum | $8.0M |
| 2022-07-10 | Omni | Reentrancy | Reentrancy | Ethereum | $1.4M |
| 2022-07-02 | Crema Finance | Access Control | Improper Access Control | Solana | $8.8M |
| 2022-07-01 | Quixotic | Input Validation | Signature Verification Flaw | Optimism | $100K |
| 2022-06-26 | XCarnival | Protocol Logic | Deposit Logic Flaw | Ethereum | $3.8M |
| 2022-06-24 | Convex Finance | Frontend & Infrastructure | DNS Hijack | Ethereum | $14K |
| 2022-06-24 | Ribbon | Frontend & Infrastructure | DNS Hijack | Ethereum | $12K |
| 2022-06-23 | Harmony Bridge | Key Compromise | Validator Key Compromised | Ethereum, BSC | $100.0M |
| 2022-06-22 | pandorachainDAO | Oracle Manipulation | Spot Price Manipulation | BSC | $128K |
| 2022-06-16 | Inverse Finance Frontier | Oracle Manipulation | Spot Price Manipulation | Ethereum | $5.8M |
| 2022-06-08 | Osmosis | Protocol Logic | Withdrawal Logic Flaw | Osmosis | $5.0M |
| 2022-06-08 | ApolloX | Input Validation | Signature Verification Flaw | BSC | $2.1M |
| 2022-06-08 | Gym Network | Access Control | Improper Access Control | BSC | $2.1M |
| 2022-06-07 | Equalizer Exchange | Protocol Logic | Withdrawal Logic Flaw | Ethereum, BSC, Polygon, Optimism | $50K |
| 2022-06-05 | Elrond | Token & Share Accounting | Infinite Mint | MultiversX | $113.0M |
| 2022-06-05 | Wintermute | Access Control | Improper Access Control | Optimism | $17.6M |
| 2022-06-04 | BAYC/Otherside | Social Engineering | Phishing | Ethereum | $257K |
| 2022-05-30 | Mirror | Access Control | Improper Access Control | Terra Classic | $2.0M |
| 2022-05-29 | Anchor | Oracle Manipulation | Stale Oracle Price | Terra Classic | $800K |
| 2022-05-24 | HackDao | Access Control | Improper Access Control | BSC | $65K |
| 2022-05-20 | Llamascape | Social Engineering | Signer Phishing | Ethereum | $70K |
| 2022-05-18 | QANX Bridge | Key Compromise | Private Key Compromised | Ethereum | $707K |
| 2022-05-18 | Feminist Metaverse | Access Control | Improper Access Control | BSC | $540K |
| 2022-05-18 | Seth Green NFTs | Social Engineering | Phishing | Ethereum | $300K |
| 2022-05-17 | FEG Token | Access Control | Improper Access Control | BSC, Ethereum | $1.9M |
| 2022-05-14 | Quickswap V3 | Frontend & Infrastructure | DNS Hijack | Polygon | $108K |
| 2022-05-14 | SpiritSwap V3 | Frontend & Infrastructure | DNS Hijack | Fantom | $18K |
| 2022-05-13 | Blizz Finance | Oracle Manipulation | Stale Oracle Price | Avalanche | $8.3M |
| 2022-05-12 | Venus Protocol | Oracle Manipulation | Stale Oracle Price | BSC | $11.2M |
| 2022-05-11 | Drift Trade | Market Manipulation | Risk Parameter Abuse | Solana | $14.5M |
| 2022-05-11 | X2Y2 | Social Engineering | Phishing | Ethereum | $200K |
| 2022-05-10 | OWNLY | Protocol Logic | Withdrawal Logic Flaw | BSC | $37K |
| 2022-05-08 | Fortress Loans | Governance | Malicious Proposal | BSC | $3.0M |
| 2022-05-04 | MM Finance Cronos | Frontend & Infrastructure | DNS Hijack | Cronos | $2.0M |
| 2022-05-01 | Rari Capital | Reentrancy | Reentrancy | Ethereum, Arbitrum | $80.0M |
| 2022-04-30 | Saddle Finance | Protocol Logic | Swap Logic Flaw | Ethereum | $11.0M |
| 2022-04-28 | DEUS Finance | Oracle Manipulation | Spot Price Manipulation | Fantom | $13.4M |
| 2022-04-24 | Wiener DOGE | Token & Share Accounting | Rounding Error | BSC | $30K |
| 2022-04-21 | Terra (LUNA) | Social Engineering | Phishing | Terra Classic | $4.3M |
| 2022-04-21 | Zeed Finance | Token & Share Accounting | Arithmetic Error | BSC | $1.0M |
| 2022-04-17 | Beanstalk | Governance | Flashloan Governance Attack | Ethereum | $181.0M |
| 2022-04-15 | Rikkei Finance | Access Control | Improper Access Control | BSC | $1.1M |
| 2022-04-12 | Elephant Money | Oracle Manipulation | Spot Price Manipulation | BSC | $22.2M |
| 2022-04-11 | CF Token | Access Control | Improper Access Control | BSC | $1.9M |
| 2022-04-07 | Starstream Finance | Rugpull | Admin Drain | Ethereum | $4.0M |
| 2022-04-07 | WonderHero | Key Compromise | Hot Wallet Key Compromised | BSC | $320K |
| 2022-04-02 | Inverse Finance Frontier | Oracle Manipulation | Spot Price Manipulation | Ethereum | $15.6M |
| 2022-03-31 | Ola Finance | Reentrancy | Reentrancy | Fuse | $4.7M |
| 2022-03-30 | BasketDAO | Access Control | Arbitrary External Call | Ethereum | $1.2M |
| 2022-03-28 | Cryptovoxels | Social Engineering | Phishing | Ethereum | $171K |
| 2022-03-27 | Revest Finance | Reentrancy | Reentrancy | Ethereum | $2.0M |
| 2022-03-26 | Auctus | Access Control | Arbitrary External Call | Ethereum | $726K |
| 2022-03-23 | Ronin Bridge | Key Compromise | Validator Key Compromised | Ethereum | $624.0M |
| 2022-03-23 | Cashio | Input Validation | Missing Input Validation | Solana | $52.8M |
| 2022-03-21 | One Ring Finance | Access Control | Improper Access Control | Ethereum | $1.4M |
| 2022-03-21 | LI.FI | Access Control | Token Approval Abuse | Ethereum | $600K |
| 2022-03-20 | Umbrella Network | Access Control | Improper Access Control | Ethereum, BSC | $700K |
| 2022-03-17 | ApeCoin | Governance | Flashloan Governance Attack | Ethereum | $820K |
| 2022-03-15 | Hundred Finance | Reentrancy | Reentrancy | Gnosis Chain | $6.2M |
| 2022-03-15 | Agave | Reentrancy | Reentrancy | Gnosis Chain | $5.5M |
| 2022-03-15 | DEUS Finance | Oracle Manipulation | Spot Price Manipulation | Fantom | $3.0M |
| 2022-03-13 | Paraluni Masterchef | Reentrancy | Reentrancy | BSC | $1.7M |
| 2022-03-09 | Fantasm Finance | Input Validation | Missing Input Validation | Fantom | $2.6M |
| 2022-03-09 | Pirate X | Access Control | Improper Access Control | BSC | $78K |
| 2022-03-05 | Bacon Protocol | Reentrancy | Reentrancy | Ethereum | $1.0M |
| 2022-03-03 | Treasure | Input Validation | Missing Input Validation | Arbitrum | $1.4M |
| 2022-02-23 | Flurry Finance | Token & Share Accounting | Incorrect Share Accounting | BSC | $293K |
| 2022-02-20 | OpenSea | Social Engineering | Phishing | Ethereum | $2.0M |
| 2022-02-18 | Rigoblock | Access Control | Improper Access Control | Ethereum | $464K |
| 2022-02-17 | TopGoal | Key Compromise | Hot Wallet Key Compromised | BSC | $1.1M |
| 2022-02-15 | Build Finance | Governance | Malicious Proposal | Ethereum | $470K |
| 2022-02-14 | Titano Finance | Rugpull | Backdoor Contract | BSC | $1.9M |
| 2022-02-12 | IRA Financial / Gemini | Frontend & Infrastructure | API Key Compromised | Ethereum | $36.0M |
| 2022-02-10 | Dego Finance | Key Compromise | Deployer Key Compromised | Ethereum, BSC, Cronos | $10.0M |
| 2022-02-08 | Superfluid | Input Validation | Missing Input Validation | Polygon | $8.7M |
| 2022-02-06 | Meter | Input Validation | Missing Input Validation | Ethereum | $7.7M |
| 2022-02-03 | KlaySwap | Frontend & Infrastructure | Frontend Compromise | Klaytn | $1.9M |
| 2022-02-02 | Portal | Input Validation | Signature Verification Flaw | Solana | $326.0M |
| 2022-02-01 | BNS | Frontend & Infrastructure | Key Leaked via Infrastructure | — | $7.5M |
| 2022-01-28 | Qubit | Input Validation | Missing Input Validation | BSC | $80.0M |
| 2022-01-25 | OpenSea | Protocol Logic | Withdrawal Logic Flaw | Ethereum | $1.0M |
| 2022-01-18 | Crypto.com | Frontend & Infrastructure | Session Key Compromised | Ethereum, Bitcoin | $33.7M |
| 2022-01-18 | Multichain | Input Validation | Missing Input Validation | Ethereum | $1.4M |
| 2022-01-18 | Crosswise | Access Control | Improper Access Control | BSC | $879K |
| 2022-01-17 | Crypto Burger | Access Control | Improper Access Control | BSC | $770K |
| 2022-01-15 | Float Protocol | Oracle Manipulation | Spot Price Manipulation | Ethereum | $1.2M |
| 2022-01-15 | CityDAO | Social Engineering | Phishing | Ethereum | $95K |
| 2022-01-10 | Lympo | Key Compromise | Hot Wallet Key Compromised | Ethereum | $18.7M |
| 2022-01-08 | LCX | Frontend & Infrastructure | Key Leaked via Infrastructure | Ethereum | $7.9M |
| 2022-01-04 | Arbix Finance | Rugpull | Admin Drain | BSC | $10.0M |
| 2022-01-01 | Tinyman | Token & Share Accounting | Incorrect Share Accounting | Algorand | $3.0M |
Source: DefiLlama, retrieved 3 October 2026, under its open methodology. Figures are a dated snapshot, not a live feed.