cryptonist

Hacks

Crypto hacks on Base

Data as of 3 October 2026

62 recorded incidents on Base took $436.1M in total between 2023 and 2026. The largest was Balancer V2, $128.0M in 2025. That is 4.8% of all incidents in DefiLlama's record and 2.1% of the value lost. A multi-chain incident counts its full amount on each chain it touched, so chain totals overlap and together exceed the overall total. Amounts are the losses DefiLlama records, and its record does not say whether they are before or after any recovery. Data as of 3 October 2026.

By year, on Base

  • 2023 $79.0M lost
    5 incidents
  • 2024 $10.5M lost
    12 incidents
  • 2025 $284.4M lost
    13 incidents
  • 2026 $62.2M lost
    32 incidents
Incidents per year on Base, with value lost in millions of US dollars. Source: DefiLlama, retrieved 3 October 2026.

Incidents on Base

Incidents on Base. Newest first. Source: DefiLlama.
DateIncidentClass TechniqueChainsAmount
2026-09-24 Limit Break Payment Processor Access Control Token Approval Abuse Ethereum, ApeChain, Polygon, Base $1.8M
2026-09-21 The Internet Token Access Control Arbitrary External Call Base $16K
2026-08-27 Moonwell Lending Oracle Manipulation Spot Price Manipulation Base $8.7M
2026-08-22 The Sandbox Access Control Improper Access Control Base, BSC, Ethereum $675K
2026-08-19 Allbridge Bridge & Cross-Chain Bridge Logic Flaw Base $191K
2026-08-06 Panther Protocol Governance Malicious Proposal Base $8K
2026-07-26 Garden Frontend & Infrastructure Database Breach Ethereum, Base, Arbitrum, BSC $450K
2026-07-25 Bankr Social Engineering Social Account Takeover Base $480K
2026-05-25 New Market Trading Access Control Improper Access Control Ethereum, Base, Arbitrum $4.0M
2026-05-25 Bitmor Access Control Token Approval Abuse Base $6K
2026-05-19 Bankr Frontend & Infrastructure Session Key Compromised Base $170K
2026-05-15 THORChain DEX Bridge & Cross-Chain Bridge Logic Flaw Bitcoin, Ethereum, Base, BSC $10.7M
2026-05-04 SquidRouterModule Access Control Improper Access Control Ethereum, Base $3.2M
2026-04-30 Wasabi Perps Key Compromise Deployer Key Compromised Ethereum, Base, Berachain, Blast $5.5M
2026-04-29 Syndicate Bridge & Cross-Chain Bridge Logic Flaw Base $380K
2026-04-27 Singularity Finance Oracle Manipulation Oracle Misconfiguration Base $413K
2026-04-27 ZetaChain Access Control Token Approval Abuse Ethereum, Base, Polygon, Arbitrum, Avalanche, BSC $334K
2026-04-22 Kipseli Input Validation Missing Input Validation Base $72K
2026-04-12 Hyperbridge Bridge & Cross-Chain Forged Proof Ethereum, Base, BSC, Arbitrum $2.5M
2026-04-12 SubQuery Network Access Control Improper Access Control Base $134K
2026-04-07 SquidMulticall Access Control Improper Access Control Arbitrum, BSC, Avalanche, Optimism, Base $517K
2026-03-12 Stake DAO Yield Access Control Caller Impersonation Arbitrum, Base $176K
2026-03-07 Molt EVM Access Control Improper Access Control Base $127K
2026-03-02 FOOM Cash Bridge & Cross-Chain Forged Proof Ethereum, Base $2.3M
2026-02-23 DGLD Token & Share Accounting Infinite Mint Base $250K
2026-02-21 Veil Cash Bridge & Cross-Chain Proof Verifier Bug Base $5K
2026-02-15 Moonwell Lending Oracle Manipulation Oracle Misconfiguration Base $1.8M
2026-01-29 Revert Lend Protocol Logic Staking Logic Flaw Base $50K
2026-01-25 Matcha Frontend & Infrastructure Frontend Compromise Base, Ethereum $13.4M
2026-01-25 Aperture LM Access Control Token Approval Abuse Ethereum, Base, BSC $3.7M
2026-01-20 SynapLogic Protocol Logic Unknown Base $144K
2026-01-01 PRXVT Protocol Logic Staking Logic Flaw Base $97K
2025-11-11 Impermax V3 Protocol Logic Liquidation Logic Flaw Base $380K
2025-11-04 Moonwell Lending Oracle Manipulation Spot Price Manipulation Base, Optimism $1.0M
2025-11-03 Balancer V2 Token & Share Accounting Rounding Error Ethereum, Arbitrum, Base, Polygon, Sonic, Optimism $128.0M
2025-10-30 Garden Frontend & Infrastructure Key Leaked via Infrastructure Ethereum, Arbitrum, Base, Solana $11.4M
2025-10-27 402bridge Frontend & Infrastructure Key Stored Publicly Base $18K
2025-08-25 Panoptic V1.1 Input Validation Hash Collision Base, Unichain, Ethereum $0
2025-08-14 BtcTurk Key Compromise Hot Wallet Key Compromised Ethereum, Avalanche, Arbitrum, Base, Optimism, Mantle, Polygon $48.0M
2025-07-15 Arcadia V2 Reentrancy Reentrancy Base $2.5M
2025-05-26 Dexodus Finance Oracle Manipulation Stale Oracle Price Base $300K
2025-04-26 Impermax V3 Token & Share Accounting Incorrect Fee Accounting Base $300K
2025-04-14 KiloEx Oracle Manipulation Spot Price Manipulation BSC, Base, Taiko $7.5M
2025-04-01 Zapper Frontend & Infrastructure DNS Hijack Ethereum, Arbitrum, Optimism, Polygon, Base $0
2025-01-23 Phemex Key Compromise Hot Wallet Key Compromised Ethereum, Solana, XRPL, Bitcoin, BSC, Sui, Base, Tron, Arbitrum, Avalanche, Polygon, Optimism, zkSync Era $85.0M
2024-12-29 Fegex Bridge & Cross-Chain Cross-Chain Message Spoofing Ethereum, BSC, Base $1.1M
2024-12-27 Bizness Reentrancy Reentrancy Base $16K
2024-12-17 GemPad Reentrancy Reentrancy Ethereum, Base, BSC $1.9M
2024-12-10 Clober Liquidity Vault Reentrancy Reentrancy Base $500K
2024-12-01 Clipper Protocol Logic Deposit Logic Flaw Optimism, Base $450K
2024-10-25 Base Lending Protocol Logic Deposit Logic Flaw Base $1.0M
2024-07-22 ETHTrustFund Rugpull Treasury Misappropriation Base $2.1M
2024-05-26 NORMIE Protocol Logic Unknown Base $882K
2024-05-10 Tsuru Protocol Logic Unknown Base $410K
2024-04-23 Magpie Protocol Input Validation Missing Input Validation Ethereum, Polygon, BSC, Blast, Avalanche, Arbitrum, Optimism, Base, zkSync Era, Polygon zkEVM $129K
2024-04-15 Grand Base Social Engineering Phishing Base $1.7M
2024-04-12 Sumer.money Reentrancy Reentrancy Base $350K
2023-11-22 KyberSwap Elastic Token & Share Accounting Rounding Error Ethereum, Base, Polygon, Optimism, Arbitrum $48.0M
2023-08-25 Magnate Finance Rugpull Treasury Misappropriation Base $6.5M
2023-08-15 RocketSwap Base Frontend & Infrastructure Key Leaked via Infrastructure Base $865K
2023-08-02 Bald Rugpull Liquidity Rug Base $23.0M
2023-08-01 LeetSwap Access Control Improper Access Control Base $620K

Source: DefiLlama, retrieved 3 October 2026, under its open methodology. Figures are a dated snapshot, not a live feed.