Every major crypto hack, documented & tracked
Transparent tracking of every major crypto hack since 2010. Full laundering analysis, on-chain flow narratives, and real sources.
Total Hacks Since 2010
205
Total Value Stolen
$15.40B
Hacks This Year
111
Avg Hack Size
$75.1M
Market Overview
Interactive data visualizations across the full hack dataset
Hacks per Year
Stolen Value by Chain
- Ethereum
- Solana
- Bitcoin
- BSC
- Ronin
- NEM
- Litecoin
- Sui
Cumulative Value Stolen Over Time
Recent Incidents
Latest reported hacks, sorted by date
Maya Protocol
Bitcoin$1.7M
Cross-chain liquidity protocol Maya Protocol (MAYAChain, THORChain fork) drained after attacker chained 6 bugs to credit a pool with 49M CACAO that was never funded, then withdrew 48.87M CACAO and swapped for BTC/ETH. CACAO crashed 89%.
Harmony (ONE Token)
Harmony$0
An attacker forged the mint of 4 billion ONE tokens (~26% of supply) on the Harmony layer 1 blockchain, causing ONE to fall 40%. Harmony planned a chain rollback to August 11 checkpoints, discarding 109,000+ transactions.
Coinsbuy
TRON$8.1M
Crypto exchange Coinsbuy lost ~$8.07M in a coordinated two-blockchain attack, with the attacker routing 79% of funds through FixedFloat. Private keys were not compromised and wallets were refilled within 24 hours.
CryptoJS Weak RNG Wallet Drains
Multi-Chain$5.7M
A weak random number generator in the CryptoJS library affected 5 crypto wallet apps, leading to ~$5.7M in wallet drains across the affected applications.
Coldcard Hardware Wallet (Coinkite)
Bitcoin$116.0M
A firmware bug from March 2021 in Coldcard hardware wallets caused weak seed generation (40-72 bits instead of 128), allowing brute-force key recovery without physical access. 1,816 BTC was drained from 5,200+ addresses across 4 waves by 15+ separate attackers.
SSS DeFi
Internet Computer$9K
ICP-based DeFi protocol SSS DeFi was drained of ~$9,204 due to a CLMM position creation/exit calculation inconsistency that allowed an attacker to create abnormal liquidity entitlements and drain real assets. 19 abnormal Open/Burn groups and 58 withdrawals were executed. Preparation funds traced to Tornado Cash.
Triple-A
Multi-Chain$11.8M
Crypto payments company Triple-A lost ~$11.8M in a hot wallet compromise across multiple blockchains. Customer funds held separately were unaffected.
AFX Trade
Arbitrum$24.1M
Arbitrum-based perpetual DEX AFX Trade was drained of ~$24.15M after bridge validator signing keys were compromised via social engineering. A fake recruiter sent a malicious Git repo to a developer, then pivoted to validator nodes. 5 of 7 validators were compromised. Attributed to UNC4899/TraderTraitor (DPRK).
Landmark Incidents
The most consequential hacks in crypto history — full laundering analysis inside
Bybit
Ethereum$1.40B
The largest crypto exchange hack in history — $1.4B siphoned from Bybit's Ethereum cold wallet via a compromised Safe multisig UI, orchestrated by North Korea's Lazarus Group.
Ronin Network
Ronin$625.0M
$625M drained from the Ronin Bridge by Lazarus Group after compromising five of nine validator private keys through a fake job offer social engineering campaign.
Poly Network
Multichain$611.0M
A cross-chain protocol exploit allowed an attacker to steal $611M across Ethereum, BSC and Polygon. Remarkably, the hacker returned nearly all funds within days.
Wormhole
Solana$325.0M
$325M exploited from Wormhole's Solana-Ethereum bridge by forging a signature verification bypass, allowing the attacker to mint 120,000 wETH from thin air.
Explore the full dataset
Filter by chain, technique, amount, and status. Every hack includes a full laundering analysis with on-chain flow narratives.