Risk
Security incidents
A dated record of publicly reported exploits, protocol failures and losses at intermediaries, classified by technique and target. Amounts are as reported at the time and are frequently revised afterwards.
Incidents recorded
Incidents recorded
5
Reported losses shown
Reported losses shown
$135.73M
Years covered
Years covered
16
01
By technique
Key Compromise 151 incidents
$8.55B
Social Engineering 60 incidents
$3.11B
Access Control 219 incidents
$1.96B
Token & Share Accounting 151 incidents
$1.26B
Bridge & Cross-Chain 47 incidents
$1.20B
Frontend & Infrastructure 95 incidents
$1.04B
Oracle Manipulation 156 incidents
$962.63M
Input Validation 69 incidents
$755.38M
Reentrancy 63 incidents
$458.13M
Rugpull 42 incidents
$284.68M
Protocol Logic 167 incidents
$260.55M
Governance 18 incidents
$235.94M
Market Manipulation 12 incidents
$136.04M
02
The record
| Date | Target | Type | Classification | Technique | Chains | Reported loss | Source |
|---|---|---|---|---|---|---|---|
| 2016-10-13 | Bitcurex | CEX | Key Compromise | Hot Wallet Key Compromised | Bitcoin | $1.50M | — |
| 2016-08-02 | Bitfinex | CEX | Key Compromise | Hot Wallet Key Compromised | Bitcoin | $72.00M | — |
| 2016-06-17 | The DAO | DeFi Protocol | Reentrancy | Reentrancy | Ethereum | $60.00M | — |
| 2016-05-14 | Gatecoin | CEX | Access Control | Improper Access Control | Ethereum | $2.00M | — |
| 2016-04-07 | ShapeShift | CEX | Key Compromise | Private Key Compromised | Bitcoin | $230,000 | — |
Inclusion is not a judgment about a project. Many of the entries here concern protocols that recovered, reimbursed users, or were themselves the victim of a third-party failure. Read the linked source before drawing any conclusion.