Hacks
Crypto hacks in 2024
Data as of 3 October 2026
217 recorded incidents in 2024 took $1.7B in total. The largest was DMM Bitcoin, $305.0M. That is 16.8% of all incidents in DefiLlama's record and 7.9% of the value lost. Amounts are the losses DefiLlama records, and its record does not say whether they are before or after any recovery. Data as of 3 October 2026.
By class of failure, 2024
- Access Control $134.3M lost43 incidents
- Protocol Logic $18.6M lost38 incidents
- Token & Share Accounting $89.7M lost25 incidents
- Oracle Manipulation $63.1M lost23 incidents
- Key Compromise $516.4M lost22 incidents
- Social Engineering $636.1M lost19 incidents
- Input Validation $91.3M lost13 incidents
- Reentrancy $37.9M lost13 incidents
- Frontend & Infrastructure $74.6M lost11 incidents
- Rugpull $6.6M lost8 incidents
- Bridge & Cross-Chain $1.1M lost1 incidents
- Governance $41K lost1 incidents
Incidents in 2024
| Date | Incident | Class | Technique | Chains | Amount |
|---|---|---|---|---|---|
| 2024-12-29 | Fegex | Bridge & Cross-Chain | Cross-Chain Message Spoofing | Ethereum, BSC, Base | $1.1M |
| 2024-12-27 | Bizness | Reentrancy | Reentrancy | Base | $16K |
| 2024-12-18 | HarryPotterObamaSonic10Inu | Oracle Manipulation | Spot Price Manipulation | Ethereum | $243K |
| 2024-12-17 | GemPad | Reentrancy | Reentrancy | Ethereum, Base, BSC | $1.9M |
| 2024-12-16 | BTC24H | Access Control | Improper Access Control | Polygon | $86K |
| 2024-12-14 | JHY Token | Token & Share Accounting | Incorrect Share Accounting | BSC | $12K |
| 2024-12-12 | BNBS | Reentrancy | Reentrancy | BSC | $20K |
| 2024-12-10 | Clober Liquidity Vault | Reentrancy | Reentrancy | Base | $500K |
| 2024-12-10 | LABUBU Token | Token & Share Accounting | Donation Attack | BSC | $12K |
| 2024-12-07 | MAAT Protocol | Protocol Logic | Withdrawal Logic Flaw | BSC | $168K |
| 2024-12-04 | Vestra DAO | Protocol Logic | Staking Logic Flaw | Ethereum | $500K |
| 2024-12-03 | BYC Token | Token & Share Accounting | Incorrect Fee Accounting | BSC | $100K |
| 2024-12-01 | Clipper | Protocol Logic | Deposit Logic Flaw | Optimism, Base | $450K |
| 2024-12-01 | Spectral Labs | Access Control | Token Approval Abuse | Ethereum | $250K |
| 2024-11-28 | XT Exchange | Key Compromise | Hot Wallet Key Compromised | Ethereum | $1.7M |
| 2024-11-26 | NFTG | Access Control | Improper Access Control | BSC | $10K |
| 2024-11-23 | AK1111 | Access Control | Improper Access Control | BSC | $32K |
| 2024-11-21 | Matez | Token & Share Accounting | Arithmetic Error | BSC | $80K |
| 2024-11-20 | MainnetSettler | Access Control | Token Approval Abuse | Ethereum | $66K |
| 2024-11-17 | MFT | Protocol Logic | Unknown | BSC | $34K |
| 2024-11-16 | DEXX | Key Compromise | Private Key Compromised | Solana | $21.0M |
| 2024-11-16 | Polter Finance | Oracle Manipulation | Spot Price Manipulation | Fantom | $8.7M |
| 2024-11-15 | ThalaSwap | Input Validation | Missing Input Validation | Aptos | $25.5M |
| 2024-11-14 | vETH | Oracle Manipulation | Spot Price Manipulation | Ethereum | $447K |
| 2024-11-11 | DeltaPrime | Input Validation | Missing Input Validation | Arbitrum, Avalanche | $4.8M |
| 2024-11-11 | zkFinance | Protocol Logic | Unknown | zkSync Era | $200K |
| 2024-11-10 | BGM | Oracle Manipulation | Spot Price Manipulation | BSC | $450K |
| 2024-11-09 | X319 | Access Control | Improper Access Control | BSC | $13K |
| 2024-11-08 | CoinPoker | Key Compromise | Hot Wallet Key Compromised | Ethereum | $2.0M |
| 2024-11-07 | CoW | Access Control | Improper Access Control | Ethereum | $59K |
| 2024-11-07 | ChiSale | Protocol Logic | Unknown | Ethereum | $16K |
| 2024-11-05 | RPP | Protocol Logic | Unknown | BSC | $14K |
| 2024-11-04 | MetaWin | Frontend & Infrastructure | Key Leaked via Infrastructure | Ethereum, Solana | $4.4M |
| 2024-10-31 | M2 Exchange | Key Compromise | Hot Wallet Key Compromised | Ethereum, Solana, Bitcoin | $13.7M |
| 2024-10-31 | 1inch Swap | Frontend & Infrastructure | Supply Chain Attack | Avalanche | $723K |
| 2024-10-30 | SUNRAY·FINANCE | Key Compromise | Private Key Compromised | Arbitrum | $2.9M |
| 2024-10-30 | Shoebill Finance | Oracle Manipulation | Oracle Misconfiguration | BOB | $1.5M |
| 2024-10-29 | BUBAI | Rugpull | Liquidity Rug | Ethereum | $131K |
| 2024-10-25 | AARK (Aark Digital) | Token & Share Accounting | Decimal Miscalculation | Arbitrum | $1.9M |
| 2024-10-25 | Base Lending | Protocol Logic | Deposit Logic Flaw | Base | $1.0M |
| 2024-10-24 | US Government Crypto Wallet | Key Compromise | Private Key Compromised | Ethereum | $20.0M |
| 2024-10-24 | Cryptobottle | Oracle Manipulation | Spot Price Manipulation | Polygon | $490K |
| 2024-10-24 | Ramses Exchange | Protocol Logic | Reward Logic Flaw | Arbitrum | $93K |
| 2024-10-22 | Vista Finance | Token & Share Accounting | Incorrect Share Accounting | BSC | $28K |
| 2024-10-22 | Erc20transfer | Access Control | Improper Access Control | Ethereum | $15K |
| 2024-10-18 | Tapioca DAO | Social Engineering | Impersonation Scam | Arbitrum | $4.7M |
| 2024-10-16 | Radiant V2 | Social Engineering | Blind Signing | BSC, Arbitrum | $50.0M |
| 2024-10-14 | Kalax | Rugpull | Admin Drain | Blast | $350K |
| 2024-10-14 | LeadBlock's Morpho Blue Market | Oracle Manipulation | Oracle Misconfiguration | Ethereum | $250K |
| 2024-10-05 | EigenLayer | Social Engineering | Impersonation Scam | Ethereum | $5.7M |
| 2024-10-01 | FireToken | Oracle Manipulation | Spot Price Manipulation | Ethereum | $20K |
| 2024-09-26 | Onyx V2 | Protocol Logic | Liquidation Logic Flaw | Ethereum | $3.8M |
| 2024-09-26 | uniBTC | Social Engineering | Malware | Ethereum | $2.0M |
| 2024-09-26 | ReHold | Rugpull | Admin Drain | Ethereum | $700K |
| 2024-09-25 | Truflation | Social Engineering | Malware | — | $5.2M |
| 2024-09-23 | Bankroll Network | Input Validation | Missing Input Validation | BSC | $235K |
| 2024-09-20 | BingX | Key Compromise | Hot Wallet Key Compromised | Ethereum | $43.3M |
| 2024-09-20 | OcelotDex | Token & Share Accounting | Infinite Mint | Ethereum | $4.9M |
| 2024-09-20 | OcelotDex | Token & Share Accounting | Infinite Mint | Ethereum | $980K |
| 2024-09-19 | Banana Gun | Frontend & Infrastructure | Frontend Compromise | Ethereum | $3.0M |
| 2024-09-16 | DeltaPrime | Key Compromise | Private Key Compromised | Arbitrum | $6.0M |
| 2024-09-16 | WXETA | Access Control | Uninitialized Proxy | Ethereum, BSC | $110K |
| 2024-09-13 | OTSea | Protocol Logic | Reward Logic Flaw | Ethereum | $26K |
| 2024-09-11 | Omnipus | Input Validation | Missing Input Validation | Ethereum | $30K |
| 2024-09-10 | Indodax | Frontend & Infrastructure | Key Leaked via Infrastructure | Ethereum, Polygon, Optimism | $25.2M |
| 2024-09-10 | Caterpillar Coin | Oracle Manipulation | Spot Price Manipulation | BSC | $1.4M |
| 2024-09-03 | Penpie | Reentrancy | Reentrancy | Ethereum | $27.0M |
| 2024-09-02 | Pythia | Reentrancy | Reentrancy | Ethereum | $53K |
| 2024-08-28 | Aave | Access Control | Arbitrary External Call | Ethereum | $56K |
| 2024-08-16 | Zenterest | Oracle Manipulation | Stale Oracle Price | Ethereum | $21K |
| 2024-08-13 | Vowcurrency | Access Control | Improper Access Control | Ethereum | $1.2M |
| 2024-08-12 | PolyNetwork | Protocol Logic | Unknown | PolyNetwork | $5.0M |
| 2024-08-12 | iVest | Protocol Logic | Unknown | BSC | $190K |
| 2024-08-07 | Nexera | Social Engineering | Malware | Ethereum | $449K |
| 2024-08-06 | Ronin Bridge | Access Control | Uninitialized Proxy | Ethereum | $12.0M |
| 2024-08-01 | Convergence | Input Validation | Missing Input Validation | Ethereum | $210K |
| 2024-07-31 | Terra 2.0 | Reentrancy | Reentrancy | Terra2 | $6.4M |
| 2024-07-31 | Monoswap | Social Engineering | Malware | Blast | $1.3M |
| 2024-07-26 | Solrise Finance | Access Control | Improper Access Control | Casper | $6.7M |
| 2024-07-24 | Spectra Finance | Access Control | Arbitrary External Call | Ethereum | $73K |
| 2024-07-23 | DeltaPrime | Access Control | Ownership Takeover | Arbitrum | $1.0M |
| 2024-07-23 | dYdX V3 | Frontend & Infrastructure | DNS Hijack | Ethereum | $31K |
| 2024-07-22 | ETHTrustFund | Rugpull | Treasury Misappropriation | Base | $2.1M |
| 2024-07-21 | UtopiaSphere | Oracle Manipulation | Spot Price Manipulation | BSC | $521K |
| 2024-07-19 | Rho Markets | Oracle Manipulation | Spot Price Manipulation | Scroll | $7.6M |
| 2024-07-18 | WazirX: India | Social Engineering | Signer Phishing | Ethereum | $234.9M |
| 2024-07-16 | LiFi Finance | Access Control | Token Approval Abuse | zkSync Era, Linea, Metis | $9.7M |
| 2024-07-15 | Minterest | Reentrancy | Reentrancy | Mantle | $1.4M |
| 2024-07-12 | CoinStats | Social Engineering | Phishing | — | $2.2M |
| 2024-07-12 | Dough Finance | Access Control | Arbitrary External Call | Ethereum | $2.0M |
| 2024-07-11 | OPSEC | Key Compromise | Private Key Compromised | Ethereum | $100K |
| 2024-07-05 | DefiPlaza | Protocol Logic | Swap Logic Flaw | Ethereum | $200K |
| 2024-07-02 | Bittensor | Social Engineering | Malware | — | $8.0M |
| 2024-07-02 | MintRisesPrices | Reentrancy | Reentrancy | BSC | $59K |
| 2024-06-27 | APEMAGA | Protocol Logic | Unknown | Ethereum | $32K |
| 2024-06-22 | BtcTurk | Key Compromise | Hot Wallet Key Compromised | — | $54.0M |
| 2024-06-20 | OKX NFT Aggregator | Access Control | Improper Access Control | BSC | $14K |
| 2024-06-14 | AutoChain Global | Protocol Logic | Unknown | BSC | $113K |
| 2024-06-13 | UwU Lend | Oracle Manipulation | Spot Price Manipulation | Ethereum | $3.7M |
| 2024-06-13 | Holograph | Token & Share Accounting | Infinite Mint | Ethereum | $1.2M |
| 2024-06-11 | YOLO Games | Access Control | Caller Impersonation | Blast | $1.5M |
| 2024-06-10 | UwU Lend | Oracle Manipulation | Spot Price Manipulation | Ethereum | $20.0M |
| 2024-06-10 | JokInTheBox | Protocol Logic | Withdrawal Logic Flaw | Ethereum | $34K |
| 2024-06-09 | Loopring | Frontend & Infrastructure | API Key Compromised | Loopring | $5.0M |
| 2024-06-07 | SteamSwap | Oracle Manipulation | Spot Price Manipulation | BSC | $105K |
| 2024-06-04 | Lykke | Key Compromise | Hot Wallet Key Compromised | Ethereum, Bitcoin | $22.4M |
| 2024-06-02 | Velocore V2 | Token & Share Accounting | Incorrect Fee Accounting | Linea, zkSync Era | $6.8M |
| 2024-05-31 | DMM Bitcoin | Social Engineering | Phishing | Bitcoin | $305.0M |
| 2024-05-31 | TLN Protocol | Protocol Logic | Unknown | BSC | $280K |
| 2024-05-31 | MixedSwapRouter | Access Control | Arbitrary External Call | Arbitrum | $16K |
| 2024-05-29 | MetaDragon | Access Control | Improper Access Control | BSC | $181K |
| 2024-05-28 | Orion Protocol | Access Control | Improper Access Control | BSC | $645K |
| 2024-05-28 | EXcommunity | Protocol Logic | Unknown | BSC | $37K |
| 2024-05-26 | NORMIE | Protocol Logic | Unknown | Base | $882K |
| 2024-05-22 | YON | Access Control | Improper Access Control | BSC | $118K |
| 2024-05-22 | TonUP | Protocol Logic | Reward Logic Flaw | TON | $108K |
| 2024-05-20 | Gala | Token & Share Accounting | Infinite Mint | Ethereum | $22.3M |
| 2024-05-16 | ALEX | Social Engineering | Phishing | Stacks | $4.3M |
| 2024-05-16 | pump.fun | Key Compromise | Private Key Compromised | Solana | $1.9M |
| 2024-05-15 | Sonne Finance | Token & Share Accounting | Donation Attack | Optimism | $20.0M |
| 2024-05-14 | Predy Finance | Access Control | Improper Access Control | Arbitrum | $464K |
| 2024-05-10 | Tsuru | Protocol Logic | Unknown | Base | $410K |
| 2024-05-10 | Galaxy Fox | Access Control | Improper Access Control | Ethereum | $330K |
| 2024-05-09 | Bloom | Protocol Logic | Unknown | Blast | $540K |
| 2024-05-08 | GPU | Token & Share Accounting | Arithmetic Error | BSC | $32K |
| 2024-05-06 | Perpy | Access Control | Uninitialized Proxy | Arbitrum | $132K |
| 2024-05-05 | GeniusAI | Social Engineering | Social Account Takeover | Fantom, Ethereum | $1.3M |
| 2024-04-30 | Pike V1 | Access Control | Proxy Upgrade Hijack | Ethereum, Optimism, Arbitrum | $1.6M |
| 2024-04-30 | Yield Protocol | Token & Share Accounting | Incorrect Share Accounting | Arbitrum | $181K |
| 2024-04-29 | Rain | Key Compromise | Private Key Compromised | Bitcoin, Ethereum, XRPL, Solana | $14.8M |
| 2024-04-25 | FENGSHOU | Access Control | Improper Access Control | BSC | $191K |
| 2024-04-24 | XBridge | Access Control | Improper Access Control | Ethereum, BSC | $1.4M |
| 2024-04-24 | YIEDL | Input Validation | Missing Input Validation | BSC | $150K |
| 2024-04-23 | Magpie Protocol | Input Validation | Missing Input Validation | Ethereum, Polygon, BSC, Blast, Avalanche, Arbitrum, Optimism, Base, zkSync Era, Polygon zkEVM | $129K |
| 2024-04-22 | Z123 | Oracle Manipulation | Spot Price Manipulation | BSC | $136K |
| 2024-04-19 | Hedgey | Input Validation | Missing Input Validation | Arbitrum, Ethereum | $44.7M |
| 2024-04-15 | Grand Base | Social Engineering | Phishing | Base | $1.7M |
| 2024-04-15 | Chainge Finance | Access Control | Arbitrary External Call | BSC | $716K |
| 2024-04-12 | Zest | Oracle Manipulation | Spot Price Manipulation | Stacks | $1.0M |
| 2024-04-12 | Sumer.money | Reentrancy | Reentrancy | Base | $350K |
| 2024-04-09 | xBlast | Key Compromise | Hot Wallet Key Compromised | Ethereum | $85K |
| 2024-04-08 | SQUID | Protocol Logic | Swap Logic Flaw | BSC | $87K |
| 2024-04-01 | OpenLeverage | Protocol Logic | Unknown | BSC | $236K |
| 2024-03-31 | FixedFloat | Frontend & Infrastructure | Key Leaked via Infrastructure | — | $3.0M |
| 2024-03-29 | Solareum | Social Engineering | Social Account Takeover | Solana | $1.4M |
| 2024-03-29 | Lava | Protocol Logic | Liquidation Logic Flaw | Arbitrum | $340K |
| 2024-03-28 | PrismaLST | Input Validation | Missing Input Validation | Ethereum | $11.6M |
| 2024-03-26 | Munchables | Access Control | Proxy Upgrade Hijack | Blast | $62.5M |
| 2024-03-25 | Curio | Access Control | Delegatecall Hijack | Ethereum | $16.0M |
| 2024-03-25 | ZongZiFa | Oracle Manipulation | Spot Price Manipulation | BSC | $229K |
| 2024-03-22 | Super Sushi Samurai | Token & Share Accounting | Infinite Mint | Blast | $4.8M |
| 2024-03-21 | AirDAO | Social Engineering | Malware | Ethereum | $1.1M |
| 2024-03-20 | Dolomite | Access Control | Improper Access Control | Ethereum | $1.8M |
| 2024-03-20 | ParaSwap | Access Control | Improper Access Control | Ethereum | $300K |
| 2024-03-20 | LayerSwap | Frontend & Infrastructure | DNS Hijack | Ethereum | $100K |
| 2024-03-17 | Remilia | Key Compromise | Private Key Compromised | Ethereum | $6.0M |
| 2024-03-15 | NFPrompt | Key Compromise | Private Key Compromised | Ethereum | $3.0M |
| 2024-03-15 | Mozaic | Key Compromise | Private Key Compromised | Arbitrum | $2.0M |
| 2024-03-15 | MOBOX | Protocol Logic | Borrow Logic Flaw | Optimism | $750K |
| 2024-03-12 | Polyhedra Network | Key Compromise | Private Key Compromised | BSC | $760K |
| 2024-03-11 | Blastoff | Protocol Logic | Unknown | Blast | $600K |
| 2024-03-09 | Juice Finance | Protocol Logic | Reward Logic Flaw | Ethereum | $54K |
| 2024-03-08 | Unizen | Access Control | Arbitrary External Call | Ethereum | $2.1M |
| 2024-03-06 | ALP | Access Control | Improper Access Control | BSC | $10K |
| 2024-03-05 | WOOFi Swap | Oracle Manipulation | Spot Price Manipulation | Arbitrum | $8.8M |
| 2024-02-29 | Shido | Key Compromise | Private Key Compromised | Ethereum | $3.3M |
| 2024-02-28 | Seneca | Access Control | Token Approval Abuse | Ethereum, Arbitrum | $6.4M |
| 2024-02-28 | Serenity Shield | Social Engineering | Phishing | Ethereum | $586K |
| 2024-02-25 | RiskOnBlast | Rugpull | Exit Scam | Blast | $1.3M |
| 2024-02-24 | BlueBerry | Oracle Manipulation | Spot Price Manipulation | Ethereum | $1.3M |
| 2024-02-24 | ZoomerCoin | Governance | Flashloan Governance Attack | Ethereum | $41K |
| 2024-02-22 | Swarm Markets | Access Control | Improper Access Control | Ethereum | $473K |
| 2024-02-22 | Tectonic | Protocol Logic | Unknown | Cronos | $250K |
| 2024-02-21 | Gain | Token & Share Accounting | Infinite Mint | Ethereum | $3.0M |
| 2024-02-21 | DeezNutz 404 | Token & Share Accounting | Infinite Mint | Ethereum | $170K |
| 2024-02-18 | FixedFloat | Frontend & Infrastructure | Key Leaked via Infrastructure | Ethereum, Bitcoin | $26.1M |
| 2024-02-16 | ParticleTrade | Input Validation | Missing Input Validation | Ethereum | $140K |
| 2024-02-15 | Miner | Input Validation | Missing Input Validation | Ethereum | $466K |
| 2024-02-15 | DualPools | Token & Share Accounting | Rounding Error | BSC | $41K |
| 2024-02-13 | DuelBits | Social Engineering | Malware | Ethereum | $4.6M |
| 2024-02-09 | PlayDapp | Key Compromise | Hot Wallet Key Compromised | Ethereum | $290.0M |
| 2024-02-08 | Starlay Finance | Protocol Logic | Redeem Logic Flaw | Acala | $2.1M |
| 2024-02-01 | Affine Protocol | Input Validation | Missing Input Validation | Ethereum | $88K |
| 2024-01-30 | Abracadabra Spell | Token & Share Accounting | Rounding Error | Ethereum | $6.5M |
| 2024-01-29 | Barley Finance | Token & Share Accounting | Infinite Mint | Ethereum | $130K |
| 2024-01-28 | Goledo | Oracle Manipulation | Spot Price Manipulation | Conflux | $1.7M |
| 2024-01-27 | Somesing | Token & Share Accounting | Unbacked Mint | Ethereum | $11.6M |
| 2024-01-27 | Citadel.one | Access Control | Improper Access Control | Arbitrum | $93K |
| 2024-01-25 | Nebula Revelation | Reentrancy | Reentrancy | Optimism | $180K |
| 2024-01-25 | Saga | Key Compromise | Private Key Compromised | Solana | $66K |
| 2024-01-23 | Gamee | Frontend & Infrastructure | Key Leaked via Infrastructure | Polygon | $7.0M |
| 2024-01-22 | Concentric | Social Engineering | Phishing | Arbitrum | $1.7M |
| 2024-01-17 | BasketDAO | Access Control | Arbitrary External Call | Ethereum | $1.2M |
| 2024-01-16 | Bungee | Input Validation | Missing Input Validation | Ethereum | $3.3M |
| 2024-01-16 | Hector Network | Access Control | Improper Access Control | Ethereum | $2.7M |
| 2024-01-12 | Wise Lending V1 | Token & Share Accounting | Donation Attack | Ethereum | $464K |
| 2024-01-07 | MangoFarmSol | Rugpull | Admin Drain | Solana | $2.0M |
| 2024-01-06 | CoinsPaid | Key Compromise | Hot Wallet Key Compromised | Ethereum, BSC | $7.5M |
| 2024-01-04 | Gamma | Oracle Manipulation | Spot Price Manipulation | Arbitrum | $4.5M |
| 2024-01-02 | Radiant V2 | Token & Share Accounting | Rounding Error | Arbitrum | $4.5M |
Source: DefiLlama, retrieved 3 October 2026, under its open methodology. Figures are a dated snapshot, not a live feed.