Home Data Hacks Improper Access Control Hacks
Crypto hacks using Improper Access Control
Data as of 3 October 2026
141 recorded incidents using Improper Access Control took $1.2B in total between 2011 and 2026. The largest was Poly Network, $611.0M in 2021. That is 10.9% of all incidents in DefiLlama's record and 5.7% of the value lost. Amounts are the losses DefiLlama records, and its record does not say whether they are before or after any recovery. Data as of 3 October 2026.
By year, using Improper Access Control 2011 $8.8M lost
1 incidents 2012 $0 lost
0 incidents 2013 $100K lost
1 incidents 2014 $2.0M lost
1 incidents 2015 $270K lost
1 incidents 2016 $2.0M lost
1 incidents 2017 $0 lost
0 incidents 2018 $207.2M lost
2 incidents 2019 $55.1M lost
3 incidents 2020 $1.0M lost
3 incidents 2021 $732.9M lost
12 incidents 2022 $52.3M lost
27 incidents 2023 $30.4M lost
22 incidents 2024 $16.9M lost
23 incidents 2025 $29.1M lost
16 incidents 2026 $54.5M lost
28 incidents Incidents per year using Improper Access Control, with value lost in millions of US dollars. Source: DefiLlama, retrieved 3 October 2026. Incidents using Improper Access Control Incidents using Improper Access Control. Newest first. Source: DefiLlama.
Date Incident Class Technique Chains Amount 2026-10-01 FlashLoopAdapter Access Control Improper Access Control Ethereum $305K 2026-09-16 Startale Access Control Improper Access Control Ethereum $3K 2026-09-15 Bonfire Access Control Improper Access Control BSC $47K 2026-08-31 Radix Access Control Improper Access Control Radix $1.2M 2026-08-22 The Sandbox Access Control Improper Access Control Base , BSC , Ethereum $675K 2026-08-21 MANTRA Chain Access Control Improper Access Control MANTRA $0 2026-08-19 BounceBit Access Control Improper Access Control BounceBit $3.0M 2026-08-09 Coinsbuy Access Control Improper Access Control Ethereum , Tron $7.9M 2026-08-03 RISEx Access Control Improper Access Control RISE $673K 2026-07-28 Crypto DAO Access Control Improper Access Control BSC $8.2M 2026-07-28 LULA Access Control Improper Access Control BSC $578K 2026-07-26 WEMIX.FI Lend Access Control Improper Access Control Wemix $737K 2026-07-26 ChainConnect Access Control Improper Access Control Ethereum , BSC , Avalanche , Polygon $650K 2026-06-01 TesseraDAO Access Control Improper Access Control BSC $2.4M 2026-05-27 SUPERFORTUNE AI Access Control Improper Access Control Ethereum $15.2M 2026-05-25 New Market Trading Access Control Improper Access Control Ethereum , Base , Arbitrum $4.0M 2026-05-13 Transit Finance Access Control Improper Access Control Tron $1.9M 2026-05-12 SQ Protocol Access Control Improper Access Control BSC $346K 2026-05-11 Huma Access Control Improper Access Control Polygon $101K 2026-05-04 SquidRouterModule Access Control Improper Access Control Ethereum , Base $3.2M 2026-04-28 YieldCore-3rd-deal Access Control Improper Access Control Ethereum $399K 2026-04-12 SubQuery Network Access Control Improper Access Control Base $134K 2026-04-09 Aethir Access Control Improper Access Control BSC $400K 2026-04-07 SquidMulticall Access Control Improper Access Control Arbitrum , BSC , Avalanche , Optimism , Base $517K 2026-04-04 BSC TMM/USDT Access Control Improper Access Control BSC $1.7M 2026-03-16 CheckoutPool Access Control Improper Access Control Polygon $86K 2026-03-07 Molt EVM Access Control Improper Access Control Base $127K 2026-02-28 Wise Lending V2 Access Control Improper Access Control Arbitrum , Ethereum $66K 2025-12-28 MSCST Access Control Improper Access Control BSC $130K 2025-12-12 Ribbon Access Control Improper Access Control Ethereum $2.7M 2025-10-07 TokenHolder Access Control Improper Access Control BSC $26K 2025-10-04 Abracadabra Spell Access Control Improper Access Control Ethereum $1.7M 2025-09-28 dTRINITY Access Control Improper Access Control Sonic $56K 2025-09-08 Nemo Yield Trading Access Control Improper Access Control Sui $2.6M 2025-07-09 Texture Access Control Improper Access Control Solana $2.2M 2025-06-06 ForceBridge Access Control Improper Access Control Nervos $3.9M 2025-05-28 Cork V1 Access Control Improper Access Control Ethereum $12.0M 2025-05-09 LND Access Control Improper Access Control Sonic, Hyperliquid L1 $1.2M 2025-04-22 Bitcoin Mission Access Control Improper Access Control Arbitrum $1.3M 2025-04-16 R0AR Access Control Improper Access Control Ethereum $780K 2025-04-04 AIRWA Access Control Improper Access Control BSC $34K 2025-03-18 Voltage V3 Access Control Improper Access Control Fuse $322K 2025-03-18 four.meme Access Control Improper Access Control BSC $80K 2025-03-16 WebKeyDAO Access Control Improper Access Control BSC $73K 2024-12-16 BTC24H Access Control Improper Access Control Polygon $86K 2024-11-26 NFTG Access Control Improper Access Control BSC $10K 2024-11-23 AK1111 Access Control Improper Access Control BSC $32K 2024-11-09 X319 Access Control Improper Access Control BSC $13K 2024-11-07 CoW Access Control Improper Access Control Ethereum $59K 2024-10-22 Erc20transfer Access Control Improper Access Control Ethereum $15K 2024-08-13 Vowcurrency Access Control Improper Access Control Ethereum $1.2M 2024-07-26 Solrise Finance Access Control Improper Access Control Casper $6.7M 2024-06-20 OKX NFT Aggregator Access Control Improper Access Control BSC $14K 2024-05-29 MetaDragon Access Control Improper Access Control BSC $181K 2024-05-28 Orion Protocol Access Control Improper Access Control BSC $645K 2024-05-22 YON Access Control Improper Access Control BSC $118K 2024-05-14 Predy Finance Access Control Improper Access Control Arbitrum $464K 2024-05-10 Galaxy Fox Access Control Improper Access Control Ethereum $330K 2024-04-25 FENGSHOU Access Control Improper Access Control BSC $191K 2024-04-24 XBridge Access Control Improper Access Control Ethereum , BSC $1.4M 2024-03-29 ETHFIN Access Control Improper Access Control BSC $1K 2024-03-20 Dolomite Access Control Improper Access Control Ethereum $1.8M 2024-03-20 ParaSwap Access Control Improper Access Control Ethereum $300K 2024-03-06 ALP Access Control Improper Access Control BSC $10K 2024-02-22 Swarm Markets Access Control Improper Access Control Ethereum $473K 2024-01-27 Citadel.one Access Control Improper Access Control Arbitrum $93K 2024-01-16 Hector Network Access Control Improper Access Control Ethereum $2.7M 2023-11-07 Curve Finance MEV Bot Access Control Improper Access Control Ethereum $2.0M 2023-11-06 TrustPad Access Control Improper Access Control BSC $155K 2023-09-02 DAppSocial Access Control Improper Access Control Ethereum $16K 2023-08-18 Exactly Access Control Improper Access Control Optimism $7.6M 2023-08-01 LeetSwap Access Control Improper Access Control Base $620K 2023-07-31 GYM Network Access Control Improper Access Control BSC $1K 2023-07-25 MetaLabz Access Control Improper Access Control BSC $0 2023-07-18 BNO Access Control Improper Access Control BSC $500K 2023-07-13 Ethscriptions Access Control Improper Access Control Ethereum $3K 2023-07-10 Arcadia V1 Access Control Improper Access Control Ethereum , Optimism $455K 2023-07-08 CIVNFT Access Control Improper Access Control Ethereum $180K 2023-06-30 Biswap Access Control Improper Access Control BSC $72K 2023-06-10 Atlantis Loans Access Control Improper Access Control BSC $2.5M 2023-05-24 Local Traders Access Control Improper Access Control BSC $118K 2023-05-10 SNK (Snooker) Access Control Improper Access Control BSC $198K 2023-05-06 Melo Access Control Improper Access Control BSC $90K 2023-04-10 Terraport Access Control Improper Access Control Terra Classic $4.0M 2023-03-28 Safemoon Access Control Improper Access Control BSC $8.9M 2023-03-10 Hedera Access Control Improper Access Control Hedera $600K 2023-02-27 swapX Access Control Improper Access Control BSC $1.0M 2023-02-27 DungeonSwap Access Control Improper Access Control BSC $728K 2023-02-27 LaunchZone Access Control Improper Access Control BSC $700K 2022-12-26 Amun Access Control Improper Access Control Polygon $300K 2022-12-14 FPR Access Control Improper Access Control BSC $29K 2022-12-02 Ankr Access Control Improper Access Control BSC $5.0M 2022-11-29 MBC & ZZSH Access Control Improper Access Control BSC $6K 2022-11-22 AUR Protocol Access Control Improper Access Control BSC $13K 2022-10-27 UvToken Access Control Improper Access Control BSC $1.5M 2022-10-25 ULME Access Control Improper Access Control BSC $250K 2022-10-11 TempleDAO Access Control Improper Access Control Ethereum $2.3M 2022-09-08 Ragnarok Online Invasion Access Control Improper Access Control BSC $44K 2022-09-05 DAO Swap Access Control Improper Access Control BSC $580K 2022-09-02 ShadowFi Access Control Improper Access Control BSC $301K 2022-08-01 Reaper Farm Access Control Improper Access Control Fantom $1.7M 2022-07-02 Crema Finance Access Control Improper Access Control Solana $8.8M 2022-06-08 Gym Network Access Control Improper Access Control BSC $2.1M 2022-06-05 Wintermute Access Control Improper Access Control Optimism $17.6M 2022-05-30 Mirror Access Control Improper Access Control Terra Classic $2.0M 2022-05-24 HackDao Access Control Improper Access Control BSC $65K 2022-05-18 Feminist Metaverse Access Control Improper Access Control BSC $540K 2022-05-17 FEG Token Access Control Improper Access Control BSC , Ethereum $1.9M 2022-04-15 Rikkei Finance Access Control Improper Access Control BSC $1.1M 2022-04-11 CF Token Access Control Improper Access Control BSC $1.9M 2022-03-21 One Ring Finance Access Control Improper Access Control Ethereum $1.4M 2022-03-20 Umbrella Network Access Control Improper Access Control Ethereum , BSC $700K 2022-03-09 Pirate X Access Control Improper Access Control BSC $78K 2022-02-18 Rigoblock Access Control Improper Access Control Ethereum $464K 2022-01-18 Crosswise Access Control Improper Access Control BSC $879K 2022-01-17 Crypto Burger Access Control Improper Access Control BSC $770K 2021-12-03 Polygon Access Control Improper Access Control Polygon $2.0M 2021-10-08 Mirror Access Control Improper Access Control Terra Classic $90.0M 2021-09-04 DAO Maker Vesting Access Control Improper Access Control Ethereum $4.0M 2021-08-19 Solend Access Control Improper Access Control Solana $16K 2021-08-13 NEKO Access Control Improper Access Control BSC $2.2M 2021-08-12 DAO Maker Vesting Access Control Improper Access Control Ethereum $7.0M 2021-08-10 Poly Network Access Control Improper Access Control Ethereum , BSC , Polygon $611.0M 2021-06-24 SharedStake Access Control Improper Access Control Ethereum $500K 2021-06-19 Visor Finance Access Control Improper Access Control Ethereum $505K 2021-05-05 ValueDefi Access Control Improper Access Control BSC $10.0M 2021-04-12 PancakeSwap Access Control Improper Access Control BSC $1.8M 2021-03-09 DODO AMM Access Control Improper Access Control Ethereum $3.8M 2020-11-30 SushiSwap Access Control Improper Access Control Ethereum $15K 2020-07-01 Vether Access Control Improper Access Control Ethereum $450K 2020-06-18 Bancor V3 Access Control Improper Access Control Ethereum $545K 2019-06-27 Bitrue Access Control Improper Access Control XRPL, Cardano $4.7M 2019-06-02 Kraken Access Control Improper Access Control Bitcoin $10.4M 2019-03-25 Coinbene Access Control Improper Access Control Ethereum $40.0M 2018-06-10 Coinrail Access Control Improper Access Control Ethereum $37.2M 2018-02-12 BitGrail Access Control Improper Access Control Nano $170.0M 2016-05-14 Gatecoin Access Control Improper Access Control Ethereum $2.0M 2015-01-27 796 Access Control Improper Access Control Bitcoin $270K 2014-07-13 Mintpal Access Control Improper Access Control Bitcoin $2.0M 2013-11-11 Bitcash Access Control Improper Access Control Bitcoin $100K 2011-06-19 Mt. Gox Access Control Improper Access Control Bitcoin $8.8M
What this measures, and what it does not Incidents, classes, techniques and amounts are DefiLlama's record. Its dashboard and documentation give no method note: they do not say how incidents enter the record, which date's prices an amount uses, or whether amounts are before or after any recovery. If the record depends on public reporting, it will be most complete for the largest events on the most watched chains, so a chain's count may reflect where value and attention concentrate as much as where code is weakest. Chain figures overlap: a multi-chain incident counts in full on every chain it touched. Absence from this record is not evidence of safety.
Read: How crypto gets hacked: the incidents, classified
Source: DefiLlama , retrieved 3 October 2026,
under its open methodology. Figures are a dated snapshot, not a live feed.