cryptonist

Hacks

Crypto hacks classed as Market Manipulation

Data as of 3 October 2026

11 recorded incidents classed as Market Manipulation took $135.1M in total between 2018 and 2026. The largest was Bitget, $100.0M in 2025. That is 0.9% of all incidents in DefiLlama's record and 0.6% of the value lost. Amounts are the losses DefiLlama records, and its record does not say whether they are before or after any recovery. Data as of 3 October 2026.

By year, classed as Market Manipulation

  • 2018 $600K lost
    2 incidents
  • 2019 $0 lost
    0 incidents
  • 2020 $0 lost
    0 incidents
  • 2021 $930K lost
    1 incidents
  • 2022 $16.1M lost
    3 incidents
  • 2023 $9.0M lost
    2 incidents
  • 2024 $0 lost
    0 incidents
  • 2025 $101.0M lost
    2 incidents
  • 2026 $7.5M lost
    1 incidents
Incidents per year classed as Market Manipulation, with value lost in millions of US dollars. Source: DefiLlama, retrieved 3 October 2026.

Incidents classed as Market Manipulation

Incidents classed as Market Manipulation. Newest first. Source: DefiLlama.
DateIncidentClass TechniqueChainsAmount
2026-06-20 JaredFromSubway MEV Bot Market Manipulation MEV Bot Drained Ethereum $7.5M
2025-12-14 Mars Perps Market Manipulation Funding Rate Arbitrage Neutron $960K
2025-04-20 Bitget Market Manipulation Market Maker Bot Exploited — $100.0M
2023-11-18 dYdX V3 Market Manipulation Risk Parameter Abuse Ethereum $9.0M
2023-06-15 Hyperliquid Market Manipulation Risk Parameter Abuse Arbitrum $37K
2022-11-01 Save Market Manipulation Risk Parameter Abuse Solana $1.0M
2022-09-18 GMX V1 Perps Market Manipulation Stale Price Arbitrage Arbitrum $565K
2022-05-11 Drift Trade Market Manipulation Risk Parameter Abuse Solana $14.5M
2021-08-04 WaultSwap Market Manipulation Risk Parameter Abuse BSC $930K
2018-12-12 Vertcoin Market Manipulation Risk Parameter Abuse Vertcoin $100K
2018-11-12 AurumCoin Market Manipulation Risk Parameter Abuse AurumCoin $500K

Source: DefiLlama, retrieved 3 October 2026, under its open methodology. Figures are a dated snapshot, not a live feed.