Hacks
Crypto hacks in 2025
Data as of 3 October 2026
148 recorded incidents in 2025 took $2.7B in total. The largest was Bybit, $1.4B. That is 11.4% of all incidents in DefiLlama's record and 12.9% of the value lost. Amounts are the losses DefiLlama records, and its record does not say whether they are before or after any recovery. Data as of 3 October 2026.
By class of failure, 2025
- Access Control $131.5M lost31 incidents
- Key Compromise $302.0M lost22 incidents
- Token & Share Accounting $401.3M lost21 incidents
- Protocol Logic $22.7M lost19 incidents
- Oracle Manipulation $33.3M lost18 incidents
- Frontend & Infrastructure $110.6M lost9 incidents
- Social Engineering $1.5B lost8 incidents
- Input Validation $1.4M lost5 incidents
- Rugpull $4.3M lost5 incidents
- Reentrancy $44.6M lost4 incidents
- Bridge & Cross-Chain $15.9M lost3 incidents
- Market Manipulation $101.0M lost2 incidents
- Governance $270K lost1 incidents
Incidents in 2025
| Date | Incident | Class | Technique | Chains | Amount |
|---|---|---|---|---|---|
| 2025-12-30 | Unleash Protocol | Key Compromise | Private Key Compromised | Story | $3.9M |
| 2025-12-28 | MSCST | Access Control | Improper Access Control | BSC | $130K |
| 2025-12-27 | Flow | Token & Share Accounting | Infinite Mint | Flow | $3.9M |
| 2025-12-26 | FilDA | Oracle Manipulation | Spot Price Manipulation | Elastos | $167K |
| 2025-12-25 | Trust Wallet Wallet | Frontend & Infrastructure | Supply Chain Attack | Ethereum, Bitcoin, Solana | $8.5M |
| 2025-12-18 | Rari Capital | Access Control | Uninitialized Proxy | Ethereum | $2.0M |
| 2025-12-16 | Yearn Finance | Token & Share Accounting | Donation Attack | Ethereum | $300K |
| 2025-12-16 | FutureSwap | Governance | Flashloan Governance Attack | Ethereum | $270K |
| 2025-12-14 | Mars Perps | Market Manipulation | Funding Rate Arbitrage | Neutron | $960K |
| 2025-12-12 | Ribbon | Access Control | Improper Access Control | Ethereum | $2.7M |
| 2025-12-12 | ZEROBASE | Access Control | Token Approval Abuse | BSC | $250K |
| 2025-12-11 | 0G Labs | Protocol Logic | Withdrawal Logic Flaw | 0G | $516K |
| 2025-12-04 | US Permissionless Dollar | Access Control | Proxy Upgrade Hijack | Ethereum | $1.0M |
| 2025-12-02 | Goldfinch | Access Control | Token Approval Abuse | Ethereum | $330K |
| 2025-11-30 | Yearn Ether | Token & Share Accounting | Incorrect Share Accounting | Ethereum | $9.0M |
| 2025-11-26 | Upbit | Social Engineering | Malware | Solana | $36.0M |
| 2025-11-24 | Agentic FoF | Protocol Logic | Unknown | Ethereum | $531K |
| 2025-11-23 | Port3 Network | Token & Share Accounting | Infinite Mint | BSC | $166K |
| 2025-11-22 | Raga Finance | Protocol Logic | Unknown | Hyperliquid L1 | $19K |
| 2025-11-21 | Aerodrome V1 | Frontend & Infrastructure | DNS Hijack | Ethereum, Optimism | $700K |
| 2025-11-20 | GANA Payment | Social Engineering | Phishing | BSC | $3.1M |
| 2025-11-20 | Dexmax AI | Access Control | Token Approval Abuse | Ethereum | $130K |
| 2025-11-11 | Polymarket | Social Engineering | Phishing | Polygon, Ethereum | $500K |
| 2025-11-11 | Impermax V3 | Protocol Logic | Liquidation Logic Flaw | Base | $380K |
| 2025-11-10 | DRLVaultV3 | Oracle Manipulation | Spot Price Manipulation | Ethereum | $100K |
| 2025-11-07 | DIMO | Key Compromise | Deployer Key Compromised | Ethereum | $40K |
| 2025-11-04 | Moonwell Lending | Oracle Manipulation | Spot Price Manipulation | Base, Optimism | $1.0M |
| 2025-11-03 | Balancer V2 | Token & Share Accounting | Rounding Error | Ethereum, Arbitrum, Base, Polygon, Sonic, Optimism | $128.0M |
| 2025-10-30 | Garden | Frontend & Infrastructure | Key Leaked via Infrastructure | Ethereum, Arbitrum, Base, Solana | $11.4M |
| 2025-10-27 | 402bridge | Frontend & Infrastructure | Key Stored Publicly | Base | $18K |
| 2025-10-21 | DoodiPals | Key Compromise | Private Key Compromised | Solana | $171K |
| 2025-10-20 | Sharwa.Finance | Protocol Logic | Swap Logic Flaw | Arbitrum | $146K |
| 2025-10-19 | Astra Nova | Key Compromise | Private Key Compromised | Ethereum | $9.1M |
| 2025-10-15 | Typus Perp | Oracle Manipulation | Oracle Misconfiguration | Sui | $3.4M |
| 2025-10-09 | Astera.fi | Token & Share Accounting | Incorrect Share Accounting | Linea | $573K |
| 2025-10-07 | TokenHolder | Access Control | Improper Access Control | BSC | $26K |
| 2025-10-04 | Abracadabra Spell | Access Control | Improper Access Control | Ethereum | $1.7M |
| 2025-09-28 | dTRINITY | Access Control | Improper Access Control | Sonic | $56K |
| 2025-09-27 | Hyperdrive HL Lending | Access Control | Arbitrary External Call | Hyperliquid L1 | $782K |
| 2025-09-26 | HyperVault | Rugpull | Admin Drain | Hyperliquid L1 | $3.6M |
| 2025-09-24 | SBI Crypto | Key Compromise | Hot Wallet Key Compromised | Bitcoin, Ethereum, Litecoin, Doge, BitcoinCash | $21.0M |
| 2025-09-24 | GriffinAI | Bridge & Cross-Chain | Cross-Chain Message Spoofing | BSC | $3.0M |
| 2025-09-23 | Seedify | Key Compromise | Private Key Compromised | BSC, Avalanche | $1.2M |
| 2025-09-23 | Corepound | Rugpull | Admin Drain | CORE | $400K |
| 2025-09-22 | UXLINK | Access Control | Delegatecall Hijack | Ethereum, Arbitrum | $11.3M |
| 2025-09-18 | New Gold Protocol | Oracle Manipulation | Spot Price Manipulation | BSC | $1.9M |
| 2025-09-14 | Yala | Key Compromise | Deployer Key Compromised | Solana, Ethereum | $7.6M |
| 2025-09-13 | Shibarium | Key Compromise | Validator Key Compromised | Shibarium | $4.1M |
| 2025-09-12 | Kame Aggregator | Protocol Logic | Swap Logic Flaw | Sei | $1.3M |
| 2025-09-10 | Evoq Finance | Key Compromise | Private Key Compromised | BSC | $420K |
| 2025-09-09 | SwissBorg | Frontend & Infrastructure | API Key Compromised | Solana | $41.5M |
| 2025-09-08 | Nemo Yield Trading | Access Control | Improper Access Control | Sui | $2.6M |
| 2025-09-02 | Bunni V2 | Token & Share Accounting | Rounding Error | Ethereum, Unichain | $8.4M |
| 2025-09-01 | OlaXBT | Social Engineering | Signer Phishing | BSC | $2.0M |
| 2025-08-30 | Cozy V2 | Input Validation | Missing Input Validation | Optimism | $427K |
| 2025-08-26 | BetterBank | Protocol Logic | Reward Logic Flaw | PulseChain | $5.0M |
| 2025-08-25 | Panoptic V1.1 | Input Validation | Hash Collision | Base, Unichain, Ethereum | $0 |
| 2025-08-14 | BtcTurk | Key Compromise | Hot Wallet Key Compromised | Ethereum, Avalanche, Arbitrum, Base, Optimism, Mantle, Polygon | $48.0M |
| 2025-08-13 | Coinbase | Access Control | Token Approval Abuse | Ethereum | $300K |
| 2025-08-13 | Grizzifi | Protocol Logic | Reward Logic Flaw | BSC | $61K |
| 2025-08-12 | Odin.Fun | Oracle Manipulation | Spot Price Manipulation | ICP | $7.0M |
| 2025-08-10 | numa. | Token & Share Accounting | Incorrect Share Accounting | Sonic | $313K |
| 2025-08-04 | CrediX | Key Compromise | Private Key Compromised | Sonic | $4.5M |
| 2025-07-28 | SuperRare | Access Control | Merkle Proof Forgery | Ethereum | $730K |
| 2025-07-24 | WOO X | Social Engineering | Phishing | Bitcoin, Ethereum, Arbitrum, BSC | $14.0M |
| 2025-07-20 | Stepp2p | Protocol Logic | Unknown | BSC | $43K |
| 2025-07-19 | CoinDCX | Key Compromise | Hot Wallet Key Compromised | — | $44.2M |
| 2025-07-16 | BigONE | Frontend & Infrastructure | Supply Chain Attack | Bitcoin, BSC, Ethereum, Solana, Tron | $27.0M |
| 2025-07-15 | Arcadia V2 | Reentrancy | Reentrancy | Base | $2.5M |
| 2025-07-10 | Kinto Bridge | Access Control | Uninitialized Proxy | Arbitrum | $1.6M |
| 2025-07-09 | GMX V1 Perps | Reentrancy | Reentrancy | Arbitrum | $42.0M |
| 2025-07-09 | ZKSwap | Bridge & Cross-Chain | Forged Proof | Ethereum | $5.0M |
| 2025-07-09 | Texture | Access Control | Improper Access Control | Solana | $2.2M |
| 2025-07-08 | Peapods Finance | Oracle Manipulation | Oracle Misconfiguration | Ethereum | $207K |
| 2025-07-05 | RANT | Token & Share Accounting | Incorrect Fee Accounting | BSC | $204K |
| 2025-07-02 | Future Protocol | Token & Share Accounting | Incorrect Share Accounting | BSC | $4.6M |
| 2025-06-25 | Resupply | Token & Share Accounting | Donation Attack | Ethereum | $9.6M |
| 2025-06-25 | Silo Finance | Input Validation | Missing Input Validation | Ethereum | $546K |
| 2025-06-20 | Hacken Token | Key Compromise | Private Key Compromised | — | $250K |
| 2025-06-19 | Bankroll Network | Token & Share Accounting | Arithmetic Error | BSC | $65K |
| 2025-06-18 | Nobitex | Social Engineering | Malware | Tron, Ethereum, BSC, Avalanche, Arbitrum, Polygon, Bitcoin | $82.0M |
| 2025-06-17 | Meta Pool | Token & Share Accounting | Infinite Mint | Ethereum | $130K |
| 2025-06-15 | FixedTokenBSwap | Oracle Manipulation | Spot Price Manipulation | Ethereum | $2K |
| 2025-06-06 | ALEX | Access Control | Caller Impersonation | Stacks | $8.4M |
| 2025-06-06 | ForceBridge | Access Control | Improper Access Control | Nervos | $3.9M |
| 2025-05-28 | Cork V1 | Access Control | Improper Access Control | Ethereum | $12.0M |
| 2025-05-27 | Usual USD0 | Input Validation | Missing Input Validation | Ethereum | $43K |
| 2025-05-26 | Dexodus Finance | Oracle Manipulation | Stale Oracle Price | Base | $300K |
| 2025-05-22 | Cetus CLMM | Token & Share Accounting | Arithmetic Error | Sui | $223.0M |
| 2025-05-20 | IRYS AI | Rugpull | Backdoor Contract | BSC | $70K |
| 2025-05-16 | Demex | Oracle Manipulation | Spot Price Manipulation | Arbitrum | $951K |
| 2025-05-15 | Zunami Protocol | Key Compromise | Private Key Compromised | Ethereum | $500K |
| 2025-05-11 | Mobius Token | Token & Share Accounting | Decimal Miscalculation | BSC | $2.1M |
| 2025-05-09 | LND | Access Control | Improper Access Control | Sonic, Hyperliquid L1 | $1.2M |
| 2025-05-08 | BitoPro | Frontend & Infrastructure | Key Leaked via Infrastructure | Ethereum, Tron, Solana, Polygon | $11.5M |
| 2025-04-27 | QuantMaster | Rugpull | Backdoor Contract | Ethereum | $100K |
| 2025-04-27 | Aventa | Protocol Logic | Unknown | Ethereum | $7K |
| 2025-04-26 | Loopscale | Oracle Manipulation | Spot Price Manipulation | Solana | $5.8M |
| 2025-04-26 | Term Finance | Oracle Manipulation | Oracle Misconfiguration | Ethereum | $1.6M |
| 2025-04-26 | Impermax V3 | Token & Share Accounting | Incorrect Fee Accounting | Base | $300K |
| 2025-04-24 | ACB | Oracle Manipulation | Spot Price Manipulation | BSC | $23K |
| 2025-04-22 | Bitcoin Mission | Access Control | Improper Access Control | Arbitrum | $1.3M |
| 2025-04-20 | Bitget | Market Manipulation | Market Maker Bot Exploited | — | $100.0M |
| 2025-04-18 | Numa | Oracle Manipulation | Spot Price Manipulation | Arbitrum | $506K |
| 2025-04-16 | R0AR | Access Control | Improper Access Control | Ethereum | $780K |
| 2025-04-15 | ZKsync | Key Compromise | Private Key Compromised | zkSync Era | $5.0M |
| 2025-04-14 | KiloEx | Oracle Manipulation | Spot Price Manipulation | BSC, Base, Taiko | $7.5M |
| 2025-04-07 | Tenderize V2 | Protocol Logic | Unknown | Ethereum | $11K |
| 2025-04-04 | AIRWA | Access Control | Improper Access Control | BSC | $34K |
| 2025-04-01 | UPCX | Access Control | Proxy Upgrade Hijack | Ethereum | $70.0M |
| 2025-04-01 | Zapper | Frontend & Infrastructure | DNS Hijack | Ethereum, Arbitrum, Optimism, Polygon, Base | $0 |
| 2025-03-30 | SIR | Access Control | Proxy Upgrade Hijack | Ethereum | $355K |
| 2025-03-29 | Venus Core Pool | Token & Share Accounting | Donation Attack | zkSync Era | $902K |
| 2025-03-28 | Alkimiya | Token & Share Accounting | Arithmetic Error | Ethereum | $96K |
| 2025-03-27 | Vicuna Lending | Oracle Manipulation | Spot Price Manipulation | Sonic | $700K |
| 2025-03-25 | Abracadabra Spell | Protocol Logic | Liquidation Logic Flaw | Arbitrum | $13.0M |
| 2025-03-21 | Zoth ZeUSD | Key Compromise | Private Key Compromised | Ethereum | $8.8M |
| 2025-03-20 | BBXToken | Oracle Manipulation | Spot Price Manipulation | BSC | $12K |
| 2025-03-18 | Voltage V3 | Access Control | Improper Access Control | Fuse | $322K |
| 2025-03-18 | four.meme | Access Control | Improper Access Control | BSC | $80K |
| 2025-03-16 | WebKeyDAO | Access Control | Improper Access Control | BSC | $73K |
| 2025-03-14 | Berally | Key Compromise | Deployer Key Compromised | Berachain | $90K |
| 2025-03-07 | 1inch Swap | Access Control | Arbitrary External Call | Ethereum | $5.0M |
| 2025-03-05 | Pond.fun | Rugpull | Admin Drain | Linea | $145K |
| 2025-03-01 | Zoth ZeUSD | Protocol Logic | Swap Logic Flaw | Ethereum | $285K |
| 2025-03-01 | Hegic(old contract) | Protocol Logic | Withdrawal Logic Flaw | Ethereum | $80K |
| 2025-02-28 | Wemix | Key Compromise | Private Key Compromised | Wemix | $6.2M |
| 2025-02-24 | Infini | Key Compromise | Private Key Compromised | Ethereum | $49.5M |
| 2025-02-22 | Unverified_35bc | Reentrancy | Reentrancy | BSC | $7K |
| 2025-02-21 | Bybit | Social Engineering | Signer Phishing | Ethereum | $1.4B |
| 2025-02-21 | StepHeroNFTs | Reentrancy | Reentrancy | BSC | $90K |
| 2025-02-18 | Cardex | Input Validation | Signature Verification Flaw | Abstract | $400K |
| 2025-02-11 | zkLend | Token & Share Accounting | First Depositor Attack | Starknet | $9.6M |
| 2025-02-11 | four.meme | Protocol Logic | Swap Logic Flaw | BSC | $183K |
| 2025-02-04 | Ionic Protocol | Social Engineering | Impersonation Scam | Mode | $8.6M |
| 2025-02-01 | Sirio Finance | Oracle Manipulation | Spot Price Manipulation | Hedera | $2.0M |
| 2025-01-28 | DogWifTools | Frontend & Infrastructure | Key Stored Publicly | Solana | $10.0M |
| 2025-01-23 | Phemex | Key Compromise | Hot Wallet Key Compromised | Ethereum, Solana, XRPL, Bitcoin, BSC, Sui, Base, Tron, Arbitrum, Avalanche, Polygon, Optimism, zkSync Era | $85.0M |
| 2025-01-14 | The Idols | Protocol Logic | Reward Logic Flaw | Ethereum | $324K |
| 2025-01-13 | Mosca2 | Token & Share Accounting | Incorrect Share Accounting | BSC | $38K |
| 2025-01-12 | Unilend V2 | Protocol Logic | Redeem Logic Flaw | Ethereum | $198K |
| 2025-01-08 | Moby | Key Compromise | Private Key Compromised | Arbitrum | $1.5M |
| 2025-01-08 | Orange Finance | Key Compromise | Private Key Compromised | Arbitrum | $840K |
| 2025-01-07 | IPC AI | Protocol Logic | Swap Logic Flaw | BSC | $590K |
| 2025-01-06 | Mosca | Token & Share Accounting | Incorrect Share Accounting | BSC | $38K |
| 2025-01-04 | Sorra Finance | Protocol Logic | Reward Logic Flaw | Ethereum | $41K |
| 2025-01-02 | MoonHacker | Access Control | Token Approval Abuse | Optimism | $300K |
| 2025-01-01 | NoOnes | Bridge & Cross-Chain | Cross-Chain Message Spoofing | Ethereum, BSC, Solana, Tron | $7.9M |
Source: DefiLlama, retrieved 3 October 2026, under its open methodology. Figures are a dated snapshot, not a live feed.