Structural failure
Social Engineering Attack Vector
Privileged personnel targeted with high-effort phishing — bogus job offers, conference invitations, recruitment outreach — rather than direct technical exploits.
Records exhibiting this pattern
CFTC Action Over Alleged $14M Crypto Pool Fraud
A reported CFTC case alleged that a North Carolina man and his company used a commodity pool tied to crypto and futures trading to obtain about $14 million from about 60 people.
$14.0M affectedKartik Saini Sentenced in Tech-Support Fraud Case
A federal court sentenced Kartik Saini to more than six years in prison after prosecutors said he participated in a tech-support fraud scheme that targeted senior citizens in the United States.
Ukraine Put Seized $8.3M USDT Under ARMA Control
Ukrainian prosecutors said more than $8.3 million in USDT tied to an alleged hacking group was transferred to ARMA, described as the country’s first placement of seized crypto under state management.
$8.3M affectedPolymarket Wallet Theft After Frontend Script Injection
About $3.1 million in PUSD was taken from 11 user wallets after Polymarket said a compromised third-party vendor injected malicious code into parts of its frontend; full refunds were promised.
$3.1M affectedjaredfromsubway.eth Drain via Fake Route Approvals
A reported exploit of the Ethereum MEV bot jaredfromsubway.eth used fabricated trading routes, fake token infrastructure, and standing approvals to remove more than $7.5 million.
$7.5M affectedTexas Brothers Plead Guilty in $8M Crypto Kidnapping
Federal prosecutors said two Texas brothers traveled to Minnesota, held a family at gunpoint for more than eight hours, and coerced the transfer of over $8 million in cryptocurrency.
$8.0M affectedNancy Fake-Police Crypto Assault Followed Waltio Breach
A Nancy indictment linked an alleged fake-police assault on a crypto-holding couple to personal data reportedly obtained after Waltio’s January breach exposed balances and contact information.
$20000 affectedHumanity Protocol: $36M Social-Engineering Token Theft
Quantstamp attributed Humanity Protocol’s loss of $36 million in H tokens to a phishing email impersonating Bithumb, subsequent malware-based laptop compromise, and theft of MetaMask credentials and private keys.
$36.0M affectedStar Credit Holdings Indictment in Alleged Ponzi Case
Federal prosecutors alleged that Misam M. Abidi used Star Credit Holdings from 2020 to 2024 to solicit crypto investments with false return and reserve claims, diverting more than $1.9 million and prompting an 11-count indictment.
$1.9M affectedBybit Cold-Wallet Hack — February 2025
During a routine multi-sig transfer from an Ethereum cold wallet, malicious code injected into the signing UI tricked three Bybit executives into approving the transfer of approximately 401,000 ETH to a Lazarus-controlled address — at $1.46 billion, the largest cryptocurrency theft on record.
$1.46B affectedDanbury Bitcoin Robbery Scheme Guilty Plea
Federal prosecutors said a 22-year-old Missouri man pleaded guilty in Hartford in connection with an attempted Bitcoin robbery and kidnapping in Danbury in August 2024, though key case details remain undisclosed.
$— affectedWazirX Multi-Sig Hack — July 2024
India's largest cryptocurrency exchange lost approximately $235M from a multi-sig wallet compromise attributed to North Korea's Lazarus Group. Singapore restructuring proceedings remain open.
$235.0M affectedShanghai Sentencing in $29 Million Crypto Forex Case
Chinese authorities traced unusual transactions to a company alleged to have enabled illegal overseas transfers via crypto, and a Shanghai court later sentenced five people in the matter.
$29.0M affectedDMM Bitcoin Hack — May 2024
The Japanese exchange lost approximately $305M of BTC to a private-key compromise attributed by the FBI to North Korea's TraderTraitor (Lazarus). DMM covered customer balances and wound down operations in 2025.
$305.0M affectedRonin Bridge Hack — March 2022
A North Korean state actor compromised 5 of 9 validator nodes on the Ronin sidechain, draining $625 million in ETH and USDC.
$625.0M affected