Risk
Security incidents
A dated record of publicly reported exploits, protocol failures and losses at intermediaries, classified by technique and target. Amounts are as reported at the time and are frequently revised afterwards.
Incidents recorded
Incidents recorded
31
Reported losses shown
Reported losses shown
$1.12B
Years covered
Years covered
16
01
By technique
Key Compromise 159 incidents
$8.95B
Social Engineering 61 incidents
$3.12B
Access Control 231 incidents
$1.96B
Bridge & Cross-Chain 54 incidents
$1.53B
Token & Share Accounting 164 incidents
$1.44B
Frontend & Infrastructure 95 incidents
$1.04B
Oracle Manipulation 165 incidents
$898.47M
Input Validation 70 incidents
$755.43M
Reentrancy 64 incidents
$500.13M
Rugpull 42 incidents
$284.68M
Protocol Logic 175 incidents
$261.29M
Governance 20 incidents
$245.24M
Market Manipulation 14 incidents
$136.89M
02
The record
| Date | Target | Type | Classification | Technique | Chains | Reported loss | Source |
|---|---|---|---|---|---|---|---|
| 2018-12-19 | EOS Max | DeFi Protocol | Protocol Logic | Unknown | EOS | — | — |
| 2018-12-19 | ToBet | DeFi Protocol | Protocol Logic | Unknown | EOS | — | — |
| 2018-12-12 | Vertcoin | Layer 1 | Market Manipulation | Risk Parameter Abuse | Vertcoin | $100,000 | — |
| 2018-11-19 | EOS Lelego | DeFi Protocol | Protocol Logic | Unknown | EOS | — | — |
| 2018-11-12 | AurumCoin | Layer 1 | Market Manipulation | Risk Parameter Abuse | AurumCoin | $500,000 | — |
| 2018-11-12 | HireVibes AirDropsDAC | DeFi Protocol | Key Compromise | Private Key Compromised | EOS | $13,600 | — |
| 2018-11-11 | EOS.WIN | DeFi Protocol | Protocol Logic | Unknown | EOS | $9,180 | — |
| 2018-11-10 | EOSDice | DeFi Protocol | Protocol Logic | Unknown | EOS | $25,100 | — |
| 2018-11-08 | FFGame | DeFi Protocol | Protocol Logic | Unknown | EOS | $7,200 | — |
| 2018-11-07 | Gate | CEX | Frontend & Infrastructure | Supply Chain Attack | Bitcoin, Ethereum | — | — |
| 2018-10-31 | EOSCast | DeFi Protocol | Token & Share Accounting | Infinite Mint | EOS | $72,912 | — |
| 2018-10-26 | EosRoyale | DeFi Protocol | Protocol Logic | Unknown | EOS | $60,000 | — |
| 2018-10-15 | EOSBet | DeFi Protocol | Token & Share Accounting | Donation Attack | EOS | $338,000 | — |
| 2018-10-07 | SpankChain | DeFi Protocol | Reentrancy | Reentrancy | Ethereum | $38,000 | — |
| 2018-09-14 | NewDex | DeFi Protocol | Token & Share Accounting | Infinite Mint | EOS | $58,000 | — |
| 2018-09-14 | Zaif | CEX | Key Compromise | Hot Wallet Key Compromised | Bitcoin | $60.00M | — |
| 2018-09-12 | EOSBet | DeFi Protocol | Token & Share Accounting | Infinite Mint | EOS | $200,000 | — |
| 2018-07-26 | KICKICO | DeFi Protocol | Key Compromise | Hot Wallet Key Compromised | Ethereum | $7.70M | — |
| 2018-07-09 | Bancor V3 | DeFi Protocol | Key Compromise | Hot Wallet Key Compromised | Ethereum | $23.50M | — |
| 2018-06-21 | Bithumb | CEX | Frontend & Infrastructure | Key Leaked via Infrastructure | Ethereum | $31.00M | — |
| 2018-06-10 | Coinrail | CEX | Access Control | Improper Access Control | Ethereum | $37.20M | — |
| 2018-06-02 | ZenCash | Chain | Bridge & Cross-Chain | Forged Proof | ZenCash | $550,000 | — |
| 2018-05-22 | Verge | Chain | Protocol Logic | Withdrawal Logic Flaw | Verge | $1.75M | — |
| 2018-05-16 | Bitcoin Gold | Chain | Bridge & Cross-Chain | Forged Proof | Bitcoin Gold | $18.00M | — |
| 2018-05-13 | MonaCoin | Chain | Bridge & Cross-Chain | Forged Proof | MonaCoin | $90,000 | — |
| 2018-04-24 | SmartMesh | Token | Token & Share Accounting | Infinite Mint | Ethereum | — | — |
| 2018-04-22 | BeautyChain | Token | Token & Share Accounting | Infinite Mint | Ethereum | — | — |
| 2018-04-21 | Gate | CEX | Key Compromise | Private Key Compromised | $235.00M | — | |
| 2018-04-12 | Coinsecure | CEX | Key Compromise | Private Key Compromised | Bitcoin | $3.30M | — |
| 2018-02-12 | BitGrail | CEX | Access Control | Improper Access Control | Nano | $170.00M | — |
| 2018-01-26 | Coincheck | CEX | Key Compromise | Hot Wallet Key Compromised | NEM | $534.00M | — |
Inclusion is not a judgment about a project. Many of the entries here concern protocols that recovered, reimbursed users, or were themselves the victim of a third-party failure. Read the linked source before drawing any conclusion.