Every major crypto hack, documented & tracked

$2.8M

Attacker compromised a 1-of-3 multisig signer key for StablR's minting contract, minted 8.35M unbacked USDR and 4.5M EURR, and dumped them on DEXes for ~1,115 ETH, realizing ~$2.8M profit.

$9.1M

Attacker exploited a flaw in Supra's oracle verifier (treated a zeroed BLS signature as valid), submitted a forged price update inflating SAUCE token value by ~12 orders of magnitude, deposited 250 SAUCE as collateral, and borrowed millions from Bonzo Lend.

$5.3M

Suspected exploit on Hedera network moved ~$5.25M in assets from Hedera to Ethereum via the LayerZero bridge; Hedera has not officially confirmed.

$1.0M

Trader lost ~$1M (999,999 USDT) after signing a malicious Uniswap Permit2 phishing message that granted attackers full wallet access; no protocol was hacked — a single bad signature caused the loss.

$0

Attackers compromised a trusted maintainer's account and pushed a wallet-stealing backdoor into @injectivelabs/sdk-ts v1.20.21 on npm, exfiltrating BIP-39 seed phrases and private keys.

$91K

Attacker exploited a compromised StakeDAO deployer private key on Arbitrum, reconfigured the LayerZero v2 OFT peer setting on the vsdCRV contract to redirect to a malicious contract, and forged a cross-chain message triggering a massive unauthorized mint of 5.446 trillion vsdCRV tokens.

$20.0M

Attacker acquired >99% voting power by buying BONK tokens, submitted BIP #76 to transfer the entire treasury to their wallet, and the proposal executed automatically with a 1% quorum threshold.

$6.0M

Attacker manipulated FleetCommander.totalAssets() by donating stale-priced Silo Varlamore USDC Growth vault tokens into an Ark still counted in NAV, using a $65.4M flash loan to net ~$6.04M in DAI in a single atomic transaction.