What happened, and when
A dated registry of exploits and protocol events for event-study work. Every entry names its source and links back. Nothing here is unattributed, and no amount is estimated by us.
Recorded losses
$1.513 Billion
265 events
page 5 of 5
| Date | Event | Chains | Loss | Returned | Source |
|---|---|---|---|---|---|
| 2026-02-23 |
DGLD: $250 Thousand exploit
Token & Share Accounting · Infinite Mint
Token & Share Accounting · Infinite Mint · bridge · DeFi Protocol
|
Base | $250 Thousand | — | DeFiLlama |
| 2026-02-22 |
LAXO: $190 Thousand exploit
Token & Share Accounting · Incorrect Share Accounting
Token & Share Accounting · Incorrect Share Accounting · DeFi Protocol
|
BSC | $190 Thousand | — | DeFiLlama |
| 2026-02-22 |
Blend Pools V2: $11 Million exploit
Oracle Manipulation · Spot Price Manipulation
Oracle Manipulation · Spot Price Manipulation · DeFi Protocol
|
Stellar | $11 Million | — | DeFiLlama |
| 2026-02-21 |
Veil Cash: $5 Thousand exploit
Bridge & Cross-Chain · Proof Verifier Bug
Bridge & Cross-Chain · Proof Verifier Bug · DeFi Protocol
|
Base | $5 Thousand | — | DeFiLlama |
| 2026-02-21 |
IoTeX: $4.4 Million exploit
Key Compromise · Validator Key Compromised
Key Compromise · Validator Key Compromised · bridge · DeFi Protocol
|
Ethereum | $4.4 Million | — | DeFiLlama |
| 2026-02-19 |
Velar Perps: $401 Thousand exploit
Oracle Manipulation · Predictable Oracle Update
Oracle Manipulation · Predictable Oracle Update · DeFi Protocol
|
Mezo | $401 Thousand | — | DeFiLlama |
| 2026-02-15 |
Moonwell Lending: $1.78 Million exploit
Oracle Manipulation · Oracle Misconfiguration
Oracle Manipulation · Oracle Misconfiguration · DeFi Protocol
|
Base | $1.78 Million | — | DeFiLlama |
| 2026-02-01 |
CrossCurve: $3 Million exploit
Bridge & Cross-Chain · Cross-Chain Message Spoofing
Bridge & Cross-Chain · Cross-Chain Message Spoofing · bridge · DeFi Protocol
|
$3 Million | — | DeFiLlama | |
| 2026-01-31 |
Step Finance: $40 Million exploit
Key Compromise · Private Key Compromised
Key Compromise · Private Key Compromised · DeFi Protocol
|
Solana | $40 Million | — | DeFiLlama |
| 2026-01-29 |
Revert Lend: $50 Thousand exploit
Protocol Logic · Staking Logic Flaw
Protocol Logic · Staking Logic Flaw · DeFi Protocol
|
Base | $50 Thousand | — | DeFiLlama |
| 2026-01-27 |
PGNLZ: $100 Thousand exploit
Token & Share Accounting · Incorrect Share Accounting
Token & Share Accounting · Incorrect Share Accounting · DeFi Protocol
|
BSC | $100 Thousand | — | DeFiLlama |
| 2026-01-25 |
Aperture LM: $3.67 Million exploit
Access Control · Token Approval Abuse
Access Control · Token Approval Abuse · DeFi Protocol
|
Ethereum Base BSC | $3.67 Million | — | DeFiLlama |
| 2026-01-25 |
Matcha: $13.4 Million exploit
Frontend & Infrastructure · Frontend Compromise
Frontend & Infrastructure · Frontend Compromise · DeFi Protocol
|
Base Ethereum | $13.4 Million | — | DeFiLlama |
| 2026-01-21 |
Saga: $7 Million exploit
Token & Share Accounting · Infinite Mint
Token & Share Accounting · Infinite Mint · Chain
|
Saga | $7 Million | — | DeFiLlama |
| 2026-01-20 |
Makina: $4.2 Million exploit
Oracle Manipulation · Spot Price Manipulation
Oracle Manipulation · Spot Price Manipulation · DeFi Protocol
|
Ethereum | $4.2 Million | 81.2% | DeFiLlama |
| 2026-01-20 |
SynapLogic: $144 Thousand exploit
Protocol Logic · Unknown
Protocol Logic · Unknown · DeFi Protocol
|
Base | $144 Thousand | — | DeFiLlama |
| 2026-01-19 |
Makina: $4.2 Million exploit
Oracle Manipulation · Spot Price Manipulation
Oracle Manipulation · Spot Price Manipulation · DeFi Protocol
|
Ethereum | $4.2 Million | — | DeFiLlama |
| 2026-01-17 |
Meteora DAMM V2: $1.5 Million exploit
Social Engineering · Impersonation Scam
Social Engineering · Impersonation Scam · DeFi Protocol
|
Solana | $1.5 Million | — | DeFiLlama |
| 2026-01-13 |
YO Protocol: $3.6 Million exploit
Protocol Logic · Missing Slippage Check
Protocol Logic · Missing Slippage Check · DeFi Protocol
|
Ethereum | $3.6 Million | — | DeFiLlama |
| 2026-01-10 |
FutureSwap: $395 Thousand exploit
Protocol Logic · Withdrawal Logic Flaw
Protocol Logic · Withdrawal Logic Flaw · DeFi Protocol
|
Arbitrum | $395 Thousand | — | DeFiLlama |
| 2026-01-08 |
Truebit: $26.4 Million exploit
Token & Share Accounting · Arithmetic Error
Token & Share Accounting · Arithmetic Error · DeFi Protocol
|
Ethereum | $26.4 Million | — | DeFiLlama |
| 2026-01-07 |
Polycule: $230 Thousand exploit
Frontend & Infrastructure · Key Leaked via Infrastructure
Frontend & Infrastructure · Key Leaked via Infrastructure · DeFi Protocol
|
Polygon | $230 Thousand | — | DeFiLlama |
| 2026-01-06 |
Fusion by IPOR: $336 Thousand exploit
Access Control · Arbitrary External Call
Access Control · Arbitrary External Call · DeFi Protocol
|
Arbitrum | $336 Thousand | — | DeFiLlama |
| 2026-01-05 |
USDGambit and TLP: $1.5 Million exploit
Key Compromise · Deployer Key Compromised
Key Compromise · Deployer Key Compromised · DeFi Protocol
|
Arbitrum | $1.5 Million | — | DeFiLlama |
| 2026-01-05 |
TMX TRIBE: $1.4 Million exploit
Token & Share Accounting · Arithmetic Error
Token & Share Accounting · Arithmetic Error · DeFi Protocol
|
Arbitrum | $1.4 Million | — | DeFiLlama |
About this data
Exploit records come from the public DeFiLlama hacks registry and are re-imported as recovery figures are updated. Depegs are detected daily from the platform's own hourly bars, and governance upgrades are read from Governor Bravo logs on chain; each row names its source. Curated entries add the transactions and addresses behind an event so it can be traced in the explorer and lined up against price windows. We publish what the source publishes, and amounts we cannot attribute are shown as blank, never filled in. The CSV carries the same rows as the filter you are looking at, one event per line, up to 5,000; past that, request the registry as a data export.