Hack
Hacks and exploits
Forensic records of every major protocol or bridge exploit: attack vector, on-chain flow of stolen funds, recovery outcomes. 31 records.
Euler Finance Hack — March 2023
A flash-loan exploit of a missing solvency check drained $197M from the Ethereum money market — and was returned in full within three weeks after the protocol's public negotiations with the attacker.
$197.0MMango Markets Oracle Manipulation — October 2022
A trader pumped the MNGO oracle on a thin Solana spot market, used the inflated collateral to borrow $114M from the protocol, then later argued in court that the manoeuvre constituted legitimate trading.
$114.0MRonin Bridge Hack — March 2022
A North Korean state actor compromised 5 of 9 validator nodes on the Ronin sidechain, draining $625 million in ETH and USDC.
$625.0MWormhole Bridge Hack — February 2022
A signature-verification flaw in the Solana-Ethereum Wormhole bridge allowed an attacker to mint 120,000 wETH on Solana without depositing the matching ETH — a $325 million theft that Jump Trading replenished from its own balance sheet.
$325.0MPoly Network Whitehat Exploit — August 2021
A cross-chain bridge exploit drained $611 million across Ethereum, Binance Smart Chain and Polygon — the largest crypto theft to that date — and was returned in full by an anonymous attacker who styled themselves "Mr. White Hat".
$611.0MKuCoin Hot-Wallet Hack — September 2020
Attackers drained $281M from KuCoin hot wallets across BTC, ETH, ERC-20 and stablecoin balances. Project teams froze and blacklisted stolen tokens; approximately 84% of value was eventually recovered.
$281.0MBitGrail NANO Hack — February 2018
The Italian exchange disclosed approximately $170M in losses of NANO tokens. Founder Francesco Firano was later found liable by Italian courts and BitGrail entered bankruptcy proceedings.
$170.0MCoincheck NEM Hack — January 2018
The Tokyo exchange lost $530M in NEM tokens from a hot wallet — the largest crypto theft on record at the time. Customers were reimbursed in JPY at recovery prices.
$530.0MParity Multi-Sig Wallet Freeze — November 2017
A user calling himself 'devops199' invoked a library function that turned a critical Parity contract into a self-destructed shell, freezing approximately $300M worth of ETH across 587 wallets — permanently inaccessible.
$300.0MBitfinex Hack — August 2016
Attackers extracted 119,756 BTC from Bitfinex segregated hot wallets, worth $72M at the time. In February 2022 the US government seized $4.7B of the proceeds and arrested the two-person laundering operation.
$72.0MThe DAO Hack — June 2016
A recursive-call exploit drained 3.6 million ETH from the largest decentralised organisation on Ethereum, triggering a contentious hard fork that split the chain into ETH and ETC.
$50.0M