Hacks
Crypto hacks in 2023
Data as of 3 October 2026
197 recorded incidents in 2023 took $1.6B in total. The largest was Mixin Network, $200.0M. That is 15.2% of all incidents in DefiLlama's record and 7.7% of the value lost. Amounts are the losses DefiLlama records, and its record does not say whether they are before or after any recovery. Data as of 3 October 2026.
By class of failure, 2023
- Access Control $43.4M lost37 incidents
- Oracle Manipulation $40.2M lost26 incidents
- Protocol Logic $18.5M lost24 incidents
- Token & Share Accounting $275.6M lost23 incidents
- Frontend & Infrastructure $392.7M lost19 incidents
- Reentrancy $86.3M lost16 incidents
- Key Compromise $435.4M lost15 incidents
- Rugpull $59.2M lost11 incidents
- Input Validation $86.6M lost9 incidents
- Social Engineering $169.6M lost9 incidents
- Bridge & Cross-Chain $6.0M lost3 incidents
- Governance $3.7M lost3 incidents
- Market Manipulation $9.0M lost2 incidents
Incidents in 2023
| Date | Incident | Class | Technique | Chains | Amount |
|---|---|---|---|---|---|
| 2023-12-31 | Orbit Bridge | Input Validation | Signature Verification Flaw | Ethereum | $81.7M |
| 2023-12-30 | Locus Finance | Key Compromise | Private Key Compromised | Ethereum, Arbitrum | $321K |
| 2023-12-30 | Channels Finance | Token & Share Accounting | Infinite Mint | BSC | $320K |
| 2023-12-27 | Levana Perps | Oracle Manipulation | Stale Oracle Price | Osmosis | $1.1M |
| 2023-12-27 | Thunder Terminal | Frontend & Infrastructure | Key Leaked via Infrastructure | Ethereum, Solana | $240K |
| 2023-12-25 | Telcoin | Access Control | Uninitialized Proxy | Polygon | $1.3M |
| 2023-12-22 | Pine Protocol | Protocol Logic | Swap Logic Flaw | Ethereum | $95K |
| 2023-12-20 | INX Digital Company | Frontend & Infrastructure | Key Leaked via Infrastructure | Ethereum | $1.6M |
| 2023-12-20 | Transit Finance | Input Validation | Missing Input Validation | BSC, Ethereum | $110K |
| 2023-12-17 | Flooring Protocol | Access Control | Arbitrary External Call | Ethereum | $1.6M |
| 2023-12-16 | NFT Trader | Reentrancy | Reentrancy | Ethereum | $3.0M |
| 2023-12-16 | GoodDollar | Reentrancy | Reentrancy | Ethereum | $2.0M |
| 2023-12-14 | Ledger Connect Kit | Frontend & Infrastructure | Supply Chain Attack | Ethereum | $484K |
| 2023-12-13 | OKX DEX | Key Compromise | Private Key Compromised | Ethereum | $2.7M |
| 2023-12-13 | Peapods Finance | Reentrancy | Reentrancy | Ethereum | $231K |
| 2023-12-11 | Venus Protocol | Oracle Manipulation | Oracle Misconfiguration | BSC | $274K |
| 2023-12-07 | Xai | Social Engineering | Impersonation Scam | Ethereum | $846K |
| 2023-12-06 | TIME | Input Validation | Missing Input Validation | Ethereum | $190K |
| 2023-12-06 | ElephantStatus | Oracle Manipulation | Spot Price Manipulation | BSC | $165K |
| 2023-12-04 | Stargate Finance | Social Engineering | Phishing | Ethereum | $43K |
| 2023-11-30 | Florence Finance | Social Engineering | Address Poisoning | Ethereum | $1.4M |
| 2023-11-29 | Velodrome | Frontend & Infrastructure | DNS Hijack | Optimism | $250K |
| 2023-11-25 | TheNFTV2 | Protocol Logic | Withdrawal Logic Flaw | Ethereum | $19K |
| 2023-11-22 | Heco Bridge | Key Compromise | Hot Wallet Key Compromised | Ethereum | $86.6M |
| 2023-11-22 | KyberSwap Elastic | Token & Share Accounting | Rounding Error | Ethereum, Base, Polygon, Optimism, Arbitrum | $48.0M |
| 2023-11-22 | Huobi | Key Compromise | Hot Wallet Key Compromised | Ethereum | $13.6M |
| 2023-11-18 | Kronos Research | Frontend & Infrastructure | API Key Compromised | Ethereum | $26.0M |
| 2023-11-18 | dYdX V3 | Market Manipulation | Risk Parameter Abuse | Ethereum | $9.0M |
| 2023-11-18 | SpookySwap | Frontend & Infrastructure | Frontend Compromise | Fantom | $5K |
| 2023-11-11 | Samudai | Key Compromise | Hot Wallet Key Compromised | Ethereum | $1.3M |
| 2023-11-10 | Poloniex | Social Engineering | Malware | Tron, Ethereum, Bitcoin | $126.0M |
| 2023-11-10 | Raft | Token & Share Accounting | Infinite Mint | Ethereum | $3.3M |
| 2023-11-09 | CoinSpot | Key Compromise | Hot Wallet Key Compromised | Ethereum | $2.4M |
| 2023-11-07 | Curve Finance MEV Bot | Access Control | Improper Access Control | Ethereum | $2.0M |
| 2023-11-06 | TheStandard.io | Protocol Logic | Swap Logic Flaw | Arbitrum | $290K |
| 2023-11-06 | TrustPad | Access Control | Improper Access Control | BSC | $155K |
| 2023-11-01 | Onyx Protocol | Token & Share Accounting | Donation Attack | Ethereum | $2.1M |
| 2023-10-31 | Unibot | Access Control | Token Approval Abuse | Ethereum | $640K |
| 2023-10-29 | Astrid Finance | Input Validation | Missing Input Validation | Ethereum | $228K |
| 2023-10-23 | Maestro | Access Control | Arbitrary External Call | Ethereum | $500K |
| 2023-10-19 | Synthetify | Governance | Malicious Proposal | Solana | $230K |
| 2023-10-18 | HOPE Lend | Token & Share Accounting | Arithmetic Error | Ethereum | $825K |
| 2023-10-18 | MicDao | Oracle Manipulation | Spot Price Manipulation | BSC | $13K |
| 2023-10-13 | Platypus Finance | Oracle Manipulation | Spot Price Manipulation | Avalanche | $2.2M |
| 2023-10-13 | WiseLending | Token & Share Accounting | Rounding Error | Ethereum | $260K |
| 2023-10-13 | Beluga | Oracle Manipulation | Spot Price Manipulation | Arbitrum | $175K |
| 2023-10-12 | BlackHole Token | Oracle Manipulation | Spot Price Manipulation | BSC | $1.3M |
| 2023-10-07 | Arena SocialFi | Reentrancy | Reentrancy | Avalanche | $3.0M |
| 2023-10-06 | Galxe | Frontend & Infrastructure | DNS Hijack | Ethereum | $270K |
| 2023-09-25 | HTX | Key Compromise | Hot Wallet Key Compromised | Ethereum | $8.0M |
| 2023-09-23 | Mixin Network | Frontend & Infrastructure | Database Breach | Mixin | $200.0M |
| 2023-09-19 | Balancer V2 | Frontend & Infrastructure | Frontend Compromise | Ethereum | $238K |
| 2023-09-16 | uniclyNFT | Reentrancy | Reentrancy | Ethereum | $2K |
| 2023-09-15 | Remitano | Frontend & Infrastructure | Key Leaked via Infrastructure | Ethereum, Tron, BitcoinCash | $2.7M |
| 2023-09-12 | CoinEx | Key Compromise | Hot Wallet Key Compromised | Ethereum, BSC, Bitcoin, Tron, Kadena, Solana, Dagger, XRPL, BitcoinCash, Polygon, Stellar, Arbitrum | $55.0M |
| 2023-09-11 | Milady Maker | Rugpull | Admin Drain | Ethereum | $1.0M |
| 2023-09-07 | Fortress Trust | Frontend & Infrastructure | Key Leaked via Infrastructure | Ethereum, Bitcoin | $12.0M |
| 2023-09-06 | GMBL.COMPUTER | Input Validation | Signature Verification Flaw | Arbitrum | $770K |
| 2023-09-05 | Floor Dao | Protocol Logic | Reward Logic Flaw | Ethereum | $64K |
| 2023-09-04 | Stake.com | Key Compromise | Hot Wallet Key Compromised | Ethereum, BSC, Polygon | $41.3M |
| 2023-09-02 | DAppSocial | Access Control | Improper Access Control | Ethereum | $16K |
| 2023-09-01 | SharedStake | Access Control | Ownership Takeover | Ethereum | $175K |
| 2023-08-29 | EAC | Oracle Manipulation | Spot Price Manipulation | BSC | $6K |
| 2023-08-27 | Balancer V2 | Oracle Manipulation | Spot Price Manipulation | Ethereum | $800K |
| 2023-08-26 | PEPE | Rugpull | Admin Drain | Ethereum | $15.1M |
| 2023-08-25 | Magnate Finance | Rugpull | Treasury Misappropriation | Base | $6.5M |
| 2023-08-24 | GSS | Token & Share Accounting | Arithmetic Error | BSC | $25K |
| 2023-08-19 | Harbor Protocol | Oracle Manipulation | Spot Price Manipulation | Comdex | $250K |
| 2023-08-18 | Exactly | Access Control | Improper Access Control | Optimism | $7.6M |
| 2023-08-15 | RocketSwap Base | Frontend & Infrastructure | Key Leaked via Infrastructure | Base | $865K |
| 2023-08-13 | Zunami Protocol | Oracle Manipulation | Spot Price Manipulation | Ethereum | $2.1M |
| 2023-08-09 | Earning.Farm | Reentrancy | Reentrancy | Ethereum | $540K |
| 2023-08-08 | Steadefi | Key Compromise | Deployer Key Compromised | Ethereum | $1.2M |
| 2023-08-07 | Cypher | Oracle Manipulation | Spot Price Manipulation | Solana | $1.0M |
| 2023-08-02 | Bald | Rugpull | Liquidity Rug | Base | $23.0M |
| 2023-08-02 | Uwerx | Oracle Manipulation | Spot Price Manipulation | Ethereum | $327K |
| 2023-08-01 | LeetSwap | Access Control | Improper Access Control | Base | $620K |
| 2023-08-01 | Neutra Finance | Oracle Manipulation | Spot Price Manipulation | Arbitrum | $36K |
| 2023-07-31 | GYM Network | Access Control | Improper Access Control | BSC | $1K |
| 2023-07-30 | Curve DEX | Reentrancy | Vyper Compiler Bug | Ethereum | $61.7M |
| 2023-07-30 | Kannagi | Rugpull | Admin Drain | zkSync Era, Ethereum | $2.1M |
| 2023-07-28 | Pond0x | Access Control | Arbitrary External Call | Ethereum | $2.2M |
| 2023-07-26 | AlphaPo | Key Compromise | Hot Wallet Key Compromised | Ethereum, Tron | $60.0M |
| 2023-07-26 | Carson DeFi | Oracle Manipulation | Spot Price Manipulation | BSC | $150K |
| 2023-07-25 | EraLend | Reentrancy | Read-Only Reentrancy | zkSync Era | $3.4M |
| 2023-07-25 | MetaLabz | Access Control | Improper Access Control | BSC | $0 |
| 2023-07-24 | Palmswap | Token & Share Accounting | Incorrect Share Accounting | BSC | $900K |
| 2023-07-22 | CoinsPaid | Social Engineering | Impersonation Scam | — | $37.3M |
| 2023-07-22 | Conic Finance | Oracle Manipulation | Spot Price Manipulation | Ethereum | $300K |
| 2023-07-21 | Conic Finance | Reentrancy | Read-Only Reentrancy | Ethereum | $3.3M |
| 2023-07-20 | Utopia | Protocol Logic | Swap Logic Flaw | BSC | $119K |
| 2023-07-20 | FFIST | Protocol Logic | Reward Logic Flaw | BSC | $110K |
| 2023-07-18 | BNO | Access Control | Improper Access Control | BSC | $500K |
| 2023-07-13 | Ethscriptions | Access Control | Improper Access Control | Ethereum | $3K |
| 2023-07-12 | Platypus Finance | Protocol Logic | Withdrawal Logic Flaw | Avalanche | $50K |
| 2023-07-11 | Libertify | Reentrancy | Reentrancy | Ethereum, Polygon | $230 |
| 2023-07-10 | Arcadia V1 | Access Control | Improper Access Control | Ethereum, Optimism | $455K |
| 2023-07-09 | CivFund | Access Control | Token Approval Abuse | Ethereum | $180K |
| 2023-07-08 | CIVNFT | Access Control | Improper Access Control | Ethereum | $180K |
| 2023-07-07 | Multichain | Key Compromise | Validator Key Compromised | Moonriver, BSC, Fantom | $126.0M |
| 2023-07-04 | Rodeo | Protocol Logic | Unknown | Arbitrum | $90K |
| 2023-07-03 | AzukiDAO | Input Validation | Signature Replay | Ethereum | $68K |
| 2023-07-02 | Poly Network | Bridge & Cross-Chain | Forged Proof | Ethereum, BSC, Polygon | $5.0M |
| 2023-06-30 | Biswap | Access Control | Improper Access Control | BSC | $72K |
| 2023-06-27 | Themis Protocol | Oracle Manipulation | Spot Price Manipulation | Arbitrum | $370K |
| 2023-06-23 | Shido | Protocol Logic | Unknown | BSC | $239K |
| 2023-06-19 | Ara Finance | Access Control | Token Approval Abuse | BSC | $125K |
| 2023-06-17 | Pawnfi | Token & Share Accounting | Incorrect Share Accounting | Ethereum | $820K |
| 2023-06-17 | Midas Capital | Token & Share Accounting | Rounding Error | BSC | $340K |
| 2023-06-15 | Hashflow | Access Control | Token Approval Abuse | Ethereum, Arbitrum, Avalanche, BSC, Polygon | $605K |
| 2023-06-15 | Hyperliquid | Market Manipulation | Risk Parameter Abuse | Arbitrum | $37K |
| 2023-06-15 | CFC | Token & Share Accounting | Donation Attack | BSC | $16K |
| 2023-06-14 | Tropykus RSK | Token & Share Accounting | Rounding Error | Rootstock | $150K |
| 2023-06-12 | Sturdy V1 | Reentrancy | Read-Only Reentrancy | Ethereum | $775K |
| 2023-06-12 | Keep3r Network | Key Compromise | Weak Key Generation | Ethereum | $200K |
| 2023-06-11 | Floating Point Group | Frontend & Infrastructure | Key Leaked via Infrastructure | — | $15.0M |
| 2023-06-10 | Atlantis Loans | Access Control | Improper Access Control | BSC | $2.5M |
| 2023-06-03 | Atomic Wallet | Frontend & Infrastructure | Supply Chain Attack | Ethereum, Tron, BSC, Bitcoin, Polkadot, Avalanche | $100.0M |
| 2023-06-02 | Hector Lending | Access Control | Token Approval Abuse | Fantom | $653K |
| 2023-06-01 | Cellframe | Protocol Logic | Swap Logic Flaw | BSC | $76K |
| 2023-05-31 | unshETH | Frontend & Infrastructure | Key Stored Publicly | Ethereum | $375K |
| 2023-05-30 | El Dorado Exchange | Protocol Logic | Swap Logic Flaw | Arbitrum | $120K |
| 2023-05-28 | Jimbos Protocol | Oracle Manipulation | Spot Price Manipulation | Arbitrum | $7.5M |
| 2023-05-26 | Patricia | Frontend & Infrastructure | Database Breach | — | $2.0M |
| 2023-05-24 | Local Traders | Access Control | Improper Access Control | BSC | $118K |
| 2023-05-23 | LunaFi | Protocol Logic | Reward Logic Flaw | Polygon | $35K |
| 2023-05-20 | Tornado Cash | Governance | Malicious Proposal | Ethereum | $2.2M |
| 2023-05-20 | Swap-LP | Protocol Logic | Swap Logic Flaw | BSC | $1.1M |
| 2023-05-19 | Swaprum | Rugpull | Backdoor Contract | Arbitrum | $3.0M |
| 2023-05-19 | WDZD Swap | Protocol Logic | Swap Logic Flaw | BSC | $1.0M |
| 2023-05-12 | LW Token | Oracle Manipulation | Spot Price Manipulation | BSC | $50K |
| 2023-05-10 | SNK (Snooker) | Access Control | Improper Access Control | BSC | $198K |
| 2023-05-07 | Art Coin | Protocol Logic | Deposit Logic Flaw | Ethereum | $331K |
| 2023-05-06 | Melo | Access Control | Improper Access Control | BSC | $90K |
| 2023-05-05 | DEUS Finance | Token & Share Accounting | Arithmetic Error | Arbitrum, BSC, Ethereum | $6.5M |
| 2023-05-01 | pcash | Protocol Logic | Unknown | EOS | $2.0M |
| 2023-05-01 | Level Perps | Protocol Logic | Reward Logic Flaw | BSC | $1.1M |
| 2023-04-28 | 0vix | Oracle Manipulation | Spot Price Manipulation | Polygon | $2.0M |
| 2023-04-25 | MERLIN DEX | Rugpull | Admin Drain | zkSync Era | $1.8M |
| 2023-04-24 | KuCoin | Social Engineering | Social Account Takeover | — | $23K |
| 2023-04-23 | FilDA | Bridge & Cross-Chain | Bridge Logic Flaw | Elastos, REI Network | $700K |
| 2023-04-20 | Tales of Elleria | Bridge & Cross-Chain | Forged Proof | Arbitrum | $280K |
| 2023-04-16 | Swapos V2 | Protocol Logic | Swap Logic Flaw | Ethereum | $468K |
| 2023-04-15 | Hundred Finance | Token & Share Accounting | Donation Attack | Optimism | $7.4M |
| 2023-04-14 | Bitrue | Key Compromise | Hot Wallet Key Compromised | — | $23.0M |
| 2023-04-13 | Yearn Finance | Oracle Manipulation | Oracle Misconfiguration | Ethereum | $11.5M |
| 2023-04-12 | MetaPoint | Access Control | Token Approval Abuse | BSC | $820K |
| 2023-04-11 | Paribus | Reentrancy | Reentrancy | Arbitrum | $68K |
| 2023-04-10 | Terraport | Access Control | Improper Access Control | Terra Classic | $4.0M |
| 2023-04-10 | SushiSwap | Input Validation | Missing Input Validation | Ethereum, Arbitrum, Optimism, BSC | $3.3M |
| 2023-04-08 | GDAC | Key Compromise | Hot Wallet Key Compromised | — | $13.9M |
| 2023-04-04 | Sentiment | Reentrancy | Reentrancy | Arbitrum | $1.0M |
| 2023-04-03 | MEV-Boost Relay | Frontend & Infrastructure | Key Leaked via Infrastructure | Ethereum | $20.0M |
| 2023-04-02 | Allbridge Core | Protocol Logic | Swap Logic Flaw | BSC | $573K |
| 2023-03-30 | Rocket Pool | Social Engineering | Phishing | Ethereum | $3.8M |
| 2023-03-28 | Safemoon | Access Control | Improper Access Control | BSC | $8.9M |
| 2023-03-27 | Kokomo Finance | Rugpull | Admin Drain | Optimism | $4.0M |
| 2023-03-25 | Swerve | Governance | Malicious Proposal | Ethereum | $1.3M |
| 2023-03-21 | Indexed Finance | Protocol Logic | Swap Logic Flaw | Ethereum | $10K |
| 2023-03-19 | Harvest Keeper | Rugpull | Admin Drain | Ethereum | $933K |
| 2023-03-18 | Zircon Gamma | Token & Share Accounting | Incorrect Share Accounting | BSC, Moonriver | $350K |
| 2023-03-17 | ParaSpace Lending V1 | Oracle Manipulation | Spot Price Manipulation | Ethereum | $5.0M |
| 2023-03-17 | General Bytes | Frontend & Infrastructure | Key Leaked via Infrastructure | Ethereum | $1.5M |
| 2023-03-15 | Poolz Network | Token & Share Accounting | Arithmetic Error | BSC | $390K |
| 2023-03-13 | Euler V1 | Token & Share Accounting | Donation Attack | Ethereum | $197.0M |
| 2023-03-10 | Hedera | Access Control | Improper Access Control | Hedera | $600K |
| 2023-03-08 | PeopleDAO | Social Engineering | Signer Phishing | Ethereum | $120K |
| 2023-03-08 | DKP | Oracle Manipulation | Spot Price Manipulation | BSC | $80K |
| 2023-03-07 | Tender Finance | Oracle Manipulation | Stale Oracle Price | Arbitrum | $1.6M |
| 2023-03-02 | ArbiSwap | Rugpull | Liquidity Rug | Arbitrum | $100K |
| 2023-02-27 | MyAlgo | Frontend & Infrastructure | CDN Compromise | Algorand | $9.2M |
| 2023-02-27 | swapX | Access Control | Improper Access Control | BSC | $1.0M |
| 2023-02-27 | DungeonSwap | Access Control | Improper Access Control | BSC | $728K |
| 2023-02-27 | LaunchZone | Access Control | Improper Access Control | BSC | $700K |
| 2023-02-20 | Dexible V2 | Access Control | Arbitrary External Call | Ethereum, Arbitrum | $2.0M |
| 2023-02-20 | Hope Finance | Access Control | Arbitrary External Call | Arbitrum | $2.0M |
| 2023-02-20 | Revert Finance | Access Control | Arbitrary External Call | Ethereum | $29K |
| 2023-02-16 | Platypus Finance | Protocol Logic | Unknown | Avalanche | $8.5M |
| 2023-02-15 | Multichain | Input Validation | Signature Verification Flaw | Ethereum | $130K |
| 2023-02-11 | fcdep | Token & Share Accounting | Infinite Mint | BSC | $350K |
| 2023-02-10 | dForce Lending | Reentrancy | Read-Only Reentrancy | Arbitrum, Optimism | $3.6M |
| 2023-02-10 | Sheep | Token & Share Accounting | Incorrect Share Accounting | BSC | $3K |
| 2023-02-07 | LianGoPay | Rugpull | Admin Drain | BSC | $1.6M |
| 2023-02-07 | CoWSwap | Access Control | Arbitrary External Call | Ethereum | $180K |
| 2023-02-04 | Sperax USD | Token & Share Accounting | Unbacked Mint | Arbitrum | $250K |
| 2023-02-02 | Orion Pools | Reentrancy | Reentrancy | BSC | $3.0M |
| 2023-02-01 | BonqDAO | Oracle Manipulation | Oracle Misconfiguration | Polygon | $1.8M |
| 2023-01-30 | BEVO | Token & Share Accounting | Incorrect Share Accounting | BSC | $45K |
| 2023-01-26 | Robinhood | Social Engineering | Social Account Takeover | BSC | $8K |
| 2023-01-21 | Omm | Protocol Logic | Redeem Logic Flaw | Icon | $1.9M |
| 2023-01-19 | Thoreum Finance | Protocol Logic | Swap Logic Flaw | BSC | $66K |
| 2023-01-17 | Midas Capital | Reentrancy | Reentrancy | Polygon | $660K |
| 2023-01-17 | OmniEstate | Input Validation | Missing Input Validation | BSC | $71K |
| 2023-01-16 | LendHub | Token & Share Accounting | Incorrect Share Accounting | Heco | $6.0M |
| 2023-01-11 | Roe Finance | Oracle Manipulation | Spot Price Manipulation | Ethereum, Polygon | $80K |
| 2023-01-10 | BRA | Token & Share Accounting | Incorrect Share Accounting | BSC | $225K |
| 2023-01-03 | GDS | Protocol Logic | Reward Logic Flaw | BSC | $187K |
Source: DefiLlama, retrieved 3 October 2026, under its open methodology. Figures are a dated snapshot, not a live feed.