Home Data Hacks Access Control Hacks
Crypto hacks classed as Access Control
Data as of 3 October 2026
226 recorded incidents classed as Access Control took $2.0B in total between 2011 and 2026. The largest was Poly Network, $611.0M in 2021. That is 17.5% of all incidents in DefiLlama's record and 9.3% of the value lost. Amounts are the losses DefiLlama records, and its record does not say whether they are before or after any recovery. Data as of 3 October 2026.
By year, classed as Access Control 2011 $8.8M lost
1 incidents 2012 $0 lost
0 incidents 2013 $100K lost
1 incidents 2014 $2.0M lost
1 incidents 2015 $270K lost
1 incidents 2016 $2.0M lost
1 incidents 2017 $180.0M lost
2 incidents 2018 $207.2M lost
2 incidents 2019 $55.1M lost
3 incidents 2020 $1.0M lost
3 incidents 2021 $770.2M lost
16 incidents 2022 $56.3M lost
32 incidents 2023 $43.4M lost
37 incidents 2024 $134.3M lost
43 incidents 2025 $131.5M lost
31 incidents 2026 $369.6M lost
52 incidents Incidents per year classed as Access Control, with value lost in millions of US dollars. Source: DefiLlama, retrieved 3 October 2026. Incidents classed as Access Control Incidents classed as Access Control. Showing the 200 largest of 226 by amount, newest first. Source: DefiLlama.
Date Incident Class Technique Chains Amount 2026-10-01 FlashLoopAdapter Access Control Improper Access Control Ethereum $305K 2026-09-24 Limit Break Payment Processor Access Control Token Approval Abuse Ethereum , ApeChain, Polygon , Base $1.8M 2026-09-15 Bonfire Access Control Improper Access Control BSC $47K 2026-09-11 ether.fi Liquid Access Control Arbitrary External Call Ethereum $43K 2026-08-31 Aquifer Access Control Arbitrary External Call Solana $2.5M 2026-08-31 Radix Access Control Improper Access Control Radix $1.2M 2026-08-25 Enjin Access Control Ownership Takeover Ethereum $162K 2026-08-22 The Sandbox Access Control Improper Access Control Base , BSC , Ethereum $675K 2026-08-19 BounceBit Access Control Improper Access Control BounceBit $3.0M 2026-08-09 Coinsbuy Access Control Improper Access Control Ethereum , Tron $7.9M 2026-08-03 RISEx Access Control Improper Access Control RISE $673K 2026-07-28 Crypto DAO Access Control Improper Access Control BSC $8.2M 2026-07-28 LULA Access Control Improper Access Control BSC $578K 2026-07-26 WEMIX.FI Lend Access Control Improper Access Control Wemix $737K 2026-07-26 ChainConnect Access Control Improper Access Control Ethereum , BSC , Avalanche , Polygon $650K 2026-06-09 Asterix Access Control Token Approval Abuse Ethereum $40K 2026-06-01 TesseraDAO Access Control Improper Access Control BSC $2.4M 2026-05-28 ONTR Access Control Ownership Takeover Ethereum $98K 2026-05-27 SUPERFORTUNE AI Access Control Improper Access Control Ethereum $15.2M 2026-05-25 New Market Trading Access Control Improper Access Control Ethereum , Base , Arbitrum $4.0M 2026-05-13 Transit Finance Access Control Improper Access Control Tron $1.9M 2026-05-13 ShapeShift FOX Colony Access Control Arbitrary External Call Arbitrum $133K 2026-05-12 Aurellion Access Control Uninitialized Proxy Arbitrum $456K 2026-05-12 SQ Protocol Access Control Improper Access Control BSC $346K 2026-05-11 INK Finance Access Control Caller Impersonation Polygon $140K 2026-05-11 Huma Access Control Improper Access Control Polygon $101K 2026-05-10 Renegade Access Control Uninitialized Proxy Arbitrum $209K 2026-05-07 TrustedVolumes Access Control Caller Impersonation Ethereum $6.7M 2026-05-05 Ekubo Access Control Token Approval Abuse Ethereum $1.4M 2026-05-04 SquidRouterModule Access Control Improper Access Control Ethereum , Base $3.2M 2026-04-28 YieldCore-3rd-deal Access Control Improper Access Control Ethereum $399K 2026-04-28 Quant Access Control Arbitrary External Call Ethereum $138K 2026-04-27 ZetaChain Access Control Token Approval Abuse Ethereum , Base , Polygon , Arbitrum , Avalanche , BSC $334K 2026-04-25 Purrlend Access Control Caller Impersonation MegaETH, Hyperliquid L1 $1.5M 2026-04-19 Custom sAVAX Rebalancer Access Control Arbitrary External Call Avalanche $64K 2026-04-12 SubQuery Network Access Control Improper Access Control Base $134K 2026-04-09 Aethir Access Control Improper Access Control BSC $400K 2026-04-07 SquidMulticall Access Control Improper Access Control Arbitrum , BSC , Avalanche , Optimism , Base $517K 2026-04-04 BSC TMM/USDT Access Control Improper Access Control BSC $1.7M 2026-04-01 Drift Trade Access Control Proxy Upgrade Hijack Solana $295.0M 2026-03-16 CheckoutPool Access Control Improper Access Control Polygon $86K 2026-03-12 Stake DAO Yield Access Control Caller Impersonation Arbitrum , Base $176K 2026-03-09 Gondi V3 Access Control Token Approval Abuse Ethereum $230K 2026-03-07 Molt EVM Access Control Improper Access Control Base $127K 2026-02-28 Wise Lending V2 Access Control Improper Access Control Arbitrum , Ethereum $66K 2026-01-25 Aperture LM Access Control Token Approval Abuse Ethereum , Base , BSC $3.7M 2026-01-06 Fusion by IPOR Access Control Arbitrary External Call Arbitrum $336K 2025-12-28 MSCST Access Control Improper Access Control BSC $130K 2025-12-18 Rari Capital Access Control Uninitialized Proxy Ethereum $2.0M 2025-12-12 Ribbon Access Control Improper Access Control Ethereum $2.7M 2025-12-12 ZEROBASE Access Control Token Approval Abuse BSC $250K 2025-12-04 US Permissionless Dollar Access Control Proxy Upgrade Hijack Ethereum $1.0M 2025-12-02 Goldfinch Access Control Token Approval Abuse Ethereum $330K 2025-11-20 Dexmax AI Access Control Token Approval Abuse Ethereum $130K 2025-10-04 Abracadabra Spell Access Control Improper Access Control Ethereum $1.7M 2025-09-28 dTRINITY Access Control Improper Access Control Sonic $56K 2025-09-27 Hyperdrive HL Lending Access Control Arbitrary External Call Hyperliquid L1 $782K 2025-09-22 UXLINK Access Control Delegatecall Hijack Ethereum , Arbitrum $11.3M 2025-09-08 Nemo Yield Trading Access Control Improper Access Control Sui $2.6M 2025-08-13 Coinbase Access Control Token Approval Abuse Ethereum $300K 2025-07-28 SuperRare Access Control Merkle Proof Forgery Ethereum $730K 2025-07-10 Kinto Bridge Access Control Uninitialized Proxy Arbitrum $1.6M 2025-07-09 Texture Access Control Improper Access Control Solana $2.2M 2025-06-06 ALEX Access Control Caller Impersonation Stacks $8.4M 2025-06-06 ForceBridge Access Control Improper Access Control Nervos $3.9M 2025-05-28 Cork V1 Access Control Improper Access Control Ethereum $12.0M 2025-05-09 LND Access Control Improper Access Control Sonic, Hyperliquid L1 $1.2M 2025-04-22 Bitcoin Mission Access Control Improper Access Control Arbitrum $1.3M 2025-04-16 R0AR Access Control Improper Access Control Ethereum $780K 2025-04-01 UPCX Access Control Proxy Upgrade Hijack Ethereum $70.0M 2025-03-30 SIR Access Control Proxy Upgrade Hijack Ethereum $355K 2025-03-18 Voltage V3 Access Control Improper Access Control Fuse $322K 2025-03-18 four.meme Access Control Improper Access Control BSC $80K 2025-03-16 WebKeyDAO Access Control Improper Access Control BSC $73K 2025-03-07 1inch Swap Access Control Arbitrary External Call Ethereum $5.0M 2025-01-02 MoonHacker Access Control Token Approval Abuse Optimism $300K 2024-12-16 BTC24H Access Control Improper Access Control Polygon $86K 2024-12-01 Spectral Labs Access Control Token Approval Abuse Ethereum $250K 2024-11-20 MainnetSettler Access Control Token Approval Abuse Ethereum $66K 2024-11-07 CoW Access Control Improper Access Control Ethereum $59K 2024-09-16 WXETA Access Control Uninitialized Proxy Ethereum , BSC $110K 2024-08-28 Aave Access Control Arbitrary External Call Ethereum $56K 2024-08-13 Vowcurrency Access Control Improper Access Control Ethereum $1.2M 2024-08-06 Ronin Bridge Access Control Uninitialized Proxy Ethereum $12.0M 2024-07-26 Solrise Finance Access Control Improper Access Control Casper $6.7M 2024-07-24 Spectra Finance Access Control Arbitrary External Call Ethereum $73K 2024-07-23 DeltaPrime Access Control Ownership Takeover Arbitrum $1.0M 2024-07-16 LiFi Finance Access Control Token Approval Abuse zkSync Era, Linea, Metis $9.7M 2024-07-12 Dough Finance Access Control Arbitrary External Call Ethereum $2.0M 2024-06-11 YOLO Games Access Control Caller Impersonation Blast $1.5M 2024-05-29 MetaDragon Access Control Improper Access Control BSC $181K 2024-05-28 Orion Protocol Access Control Improper Access Control BSC $645K 2024-05-22 YON Access Control Improper Access Control BSC $118K 2024-05-14 Predy Finance Access Control Improper Access Control Arbitrum $464K 2024-05-10 Galaxy Fox Access Control Improper Access Control Ethereum $330K 2024-05-06 Perpy Access Control Uninitialized Proxy Arbitrum $132K 2024-04-30 Pike V1 Access Control Proxy Upgrade Hijack Ethereum , Optimism , Arbitrum $1.6M 2024-04-25 FENGSHOU Access Control Improper Access Control BSC $191K 2024-04-24 XBridge Access Control Improper Access Control Ethereum , BSC $1.4M 2024-04-15 Chainge Finance Access Control Arbitrary External Call BSC $716K 2024-03-26 Munchables Access Control Proxy Upgrade Hijack Blast $62.5M 2024-03-25 Curio Access Control Delegatecall Hijack Ethereum $16.0M 2024-03-20 Dolomite Access Control Improper Access Control Ethereum $1.8M 2024-03-20 ParaSwap Access Control Improper Access Control Ethereum $300K 2024-03-08 Unizen Access Control Arbitrary External Call Ethereum $2.1M 2024-02-28 Seneca Access Control Token Approval Abuse Ethereum , Arbitrum $6.4M 2024-02-22 Swarm Markets Access Control Improper Access Control Ethereum $473K 2024-01-27 Citadel.one Access Control Improper Access Control Arbitrum $93K 2024-01-17 BasketDAO Access Control Arbitrary External Call Ethereum $1.2M 2024-01-16 Hector Network Access Control Improper Access Control Ethereum $2.7M 2023-12-25 Telcoin Access Control Uninitialized Proxy Polygon $1.3M 2023-12-17 Flooring Protocol Access Control Arbitrary External Call Ethereum $1.6M 2023-11-07 Curve Finance MEV Bot Access Control Improper Access Control Ethereum $2.0M 2023-11-06 TrustPad Access Control Improper Access Control BSC $155K 2023-10-31 Unibot Access Control Token Approval Abuse Ethereum $640K 2023-10-23 Maestro Access Control Arbitrary External Call Ethereum $500K 2023-09-01 SharedStake Access Control Ownership Takeover Ethereum $175K 2023-08-18 Exactly Access Control Improper Access Control Optimism $7.6M 2023-08-01 LeetSwap Access Control Improper Access Control Base $620K 2023-07-28 Pond0x Access Control Arbitrary External Call Ethereum $2.2M 2023-07-18 BNO Access Control Improper Access Control BSC $500K 2023-07-10 Arcadia V1 Access Control Improper Access Control Ethereum , Optimism $455K 2023-07-09 CivFund Access Control Token Approval Abuse Ethereum $180K 2023-07-08 CIVNFT Access Control Improper Access Control Ethereum $180K 2023-06-30 Biswap Access Control Improper Access Control BSC $72K 2023-06-19 Ara Finance Access Control Token Approval Abuse BSC $125K 2023-06-15 Hashflow Access Control Token Approval Abuse Ethereum , Arbitrum , Avalanche , BSC , Polygon $605K 2023-06-10 Atlantis Loans Access Control Improper Access Control BSC $2.5M 2023-06-02 Hector Lending Access Control Token Approval Abuse Fantom $653K 2023-05-24 Local Traders Access Control Improper Access Control BSC $118K 2023-05-10 SNK (Snooker) Access Control Improper Access Control BSC $198K 2023-05-06 Melo Access Control Improper Access Control BSC $90K 2023-04-12 MetaPoint Access Control Token Approval Abuse BSC $820K 2023-04-10 Terraport Access Control Improper Access Control Terra Classic $4.0M 2023-03-28 Safemoon Access Control Improper Access Control BSC $8.9M 2023-03-10 Hedera Access Control Improper Access Control Hedera $600K 2023-02-27 swapX Access Control Improper Access Control BSC $1.0M 2023-02-27 DungeonSwap Access Control Improper Access Control BSC $728K 2023-02-27 LaunchZone Access Control Improper Access Control BSC $700K 2023-02-20 Dexible V2 Access Control Arbitrary External Call Ethereum , Arbitrum $2.0M 2023-02-20 Hope Finance Access Control Arbitrary External Call Arbitrum $2.0M 2023-02-07 CoWSwap Access Control Arbitrary External Call Ethereum $180K 2022-12-26 Amun Access Control Improper Access Control Polygon $300K 2022-12-25 Rubic Access Control Arbitrary External Call Ethereum $1.4M 2022-12-02 Ankr Access Control Improper Access Control BSC $5.0M 2022-11-09 Brahma Finance Access Control Arbitrary External Call Ethereum $89K 2022-10-27 UvToken Access Control Improper Access Control BSC $1.5M 2022-10-25 ULME Access Control Improper Access Control BSC $250K 2022-10-11 TempleDAO Access Control Improper Access Control Ethereum $2.3M 2022-09-08 Ragnarok Online Invasion Access Control Improper Access Control BSC $44K 2022-09-05 DAO Swap Access Control Improper Access Control BSC $580K 2022-09-02 ShadowFi Access Control Improper Access Control BSC $301K 2022-08-01 Reaper Farm Access Control Improper Access Control Fantom $1.7M 2022-07-02 Crema Finance Access Control Improper Access Control Solana $8.8M 2022-06-08 Gym Network Access Control Improper Access Control BSC $2.1M 2022-06-05 Wintermute Access Control Improper Access Control Optimism $17.6M 2022-05-30 Mirror Access Control Improper Access Control Terra Classic $2.0M 2022-05-24 HackDao Access Control Improper Access Control BSC $65K 2022-05-18 Feminist Metaverse Access Control Improper Access Control BSC $540K 2022-05-17 FEG Token Access Control Improper Access Control BSC , Ethereum $1.9M 2022-04-15 Rikkei Finance Access Control Improper Access Control BSC $1.1M 2022-04-11 CF Token Access Control Improper Access Control BSC $1.9M 2022-03-30 BasketDAO Access Control Arbitrary External Call Ethereum $1.2M 2022-03-26 Auctus Access Control Arbitrary External Call Ethereum $726K 2022-03-21 One Ring Finance Access Control Improper Access Control Ethereum $1.4M 2022-03-21 LI.FI Access Control Token Approval Abuse Ethereum $600K 2022-03-20 Umbrella Network Access Control Improper Access Control Ethereum , BSC $700K 2022-03-09 Pirate X Access Control Improper Access Control BSC $78K 2022-02-18 Rigoblock Access Control Improper Access Control Ethereum $464K 2022-01-18 Crosswise Access Control Improper Access Control BSC $879K 2022-01-17 Crypto Burger Access Control Improper Access Control BSC $770K 2021-12-03 Polygon Access Control Improper Access Control Polygon $2.0M 2021-11-07 ChainSwap Access Control Caller Impersonation Ethereum , BSC $4.4M 2021-10-08 Mirror Access Control Improper Access Control Terra Classic $90.0M 2021-09-04 DAO Maker Vesting Access Control Improper Access Control Ethereum $4.0M 2021-08-13 NEKO Access Control Improper Access Control BSC $2.2M 2021-08-12 DAO Maker Vesting Access Control Improper Access Control Ethereum $7.0M 2021-08-10 Poly Network Access Control Improper Access Control Ethereum , BSC , Polygon $611.0M 2021-08-10 Punk Protocol Access Control Delegatecall Hijack Ethereum $8.9M 2021-06-24 SharedStake Access Control Improper Access Control Ethereum $500K 2021-06-19 Visor Finance Access Control Improper Access Control Ethereum $505K 2021-05-08 Rari Capital Access Control Arbitrary External Call Ethereum $10.0M 2021-05-05 ValueDefi Access Control Improper Access Control BSC $10.0M 2021-04-12 PancakeSwap Access Control Improper Access Control BSC $1.8M 2021-03-09 DODO AMM Access Control Improper Access Control Ethereum $3.8M 2021-02-27 Furucombo Access Control Delegatecall Hijack Ethereum $14.0M 2020-07-01 Vether Access Control Improper Access Control Ethereum $450K 2020-06-18 Bancor V3 Access Control Improper Access Control Ethereum $545K 2019-06-27 Bitrue Access Control Improper Access Control XRPL, Cardano $4.7M 2019-06-02 Kraken Access Control Improper Access Control Bitcoin $10.4M 2019-03-25 Coinbene Access Control Improper Access Control Ethereum $40.0M 2018-06-10 Coinrail Access Control Improper Access Control Ethereum $37.2M 2018-02-12 BitGrail Access Control Improper Access Control Nano $170.0M 2017-11-09 Parity Multisig Access Control Uninitialized Proxy Ethereum $150.0M 2017-07-01 Parity Access Control Uninitialized Proxy Ethereum $30.0M 2016-05-14 Gatecoin Access Control Improper Access Control Ethereum $2.0M 2015-01-27 796 Access Control Improper Access Control Bitcoin $270K 2014-07-13 Mintpal Access Control Improper Access Control Bitcoin $2.0M 2013-11-11 Bitcash Access Control Improper Access Control Bitcoin $100K 2011-06-19 Mt. Gox Access Control Improper Access Control Bitcoin $8.8M
What this measures, and what it does not Incidents, classes, techniques and amounts are DefiLlama's record. Its dashboard and documentation give no method note: they do not say how incidents enter the record, which date's prices an amount uses, or whether amounts are before or after any recovery. If the record depends on public reporting, it will be most complete for the largest events on the most watched chains, so a chain's count may reflect where value and attention concentrate as much as where code is weakest. Chain figures overlap: a multi-chain incident counts in full on every chain it touched. Absence from this record is not evidence of safety.
Read: How crypto gets hacked: the incidents, classified
Source: DefiLlama , retrieved 3 October 2026,
under its open methodology. Figures are a dated snapshot, not a live feed.