What happened, and when
A dated registry of exploits and protocol events for event-study work. Every entry names its source and links back. Nothing here is unattributed, and no amount is estimated by us.
203 events
| Date | Event | Chains | Loss | Returned | Source |
|---|---|---|---|---|---|
| 2026-04-28 |
YieldCore: $399 Thousand exploit
Access Control · Improper Access Control
Access Control · Improper Access Control · DeFi Protocol
|
Ethereum | $399 Thousand | — | DeFiLlama |
| 2026-04-28 |
JUDAO: $228 Thousand exploit
Token & Share Accounting · Arithmetic Error
Token & Share Accounting · Arithmetic Error · Token
|
BSC | $228 Thousand | — | DeFiLlama |
| 2026-04-28 |
Quant: $138 Thousand exploit
Access Control · Arbitrary External Call
Access Control · Arbitrary External Call · Token
|
Ethereum | $138 Thousand | — | DeFiLlama |
| 2026-04-27 |
ZetaChain: $334 Thousand exploit
Access Control · Token Approval Abuse
Access Control · Token Approval Abuse · bridge · Chain
|
Ethereum Base Polygon +3 | $334 Thousand | — | DeFiLlama |
| 2026-04-27 |
Singularity Finance: $413 Thousand exploit
Oracle Manipulation · Oracle Misconfiguration
Oracle Manipulation · Oracle Misconfiguration · DeFi Protocol
|
Base | $413 Thousand | — | DeFiLlama |
| 2026-04-26 |
Litecoin
Input Validation · Missing Input Validation
Input Validation · Missing Input Validation · Chain
|
Litecoin | — | — | DeFiLlama |
| 2026-04-26 |
Scallop Lend: $142 Thousand exploit
Protocol Logic · Reward Logic Flaw
Protocol Logic · Reward Logic Flaw · DeFi Protocol
|
Sui | $142 Thousand | — | DeFiLlama |
| 2026-04-25 |
Purrlend: $1.5 Million exploit
Access Control · Caller Impersonation
Access Control · Caller Impersonation · DeFi Protocol
|
MegaETH Hyperliquid L1 | $1.5 Million | — | DeFiLlama |
| 2026-04-23 |
Giddy: $1.3 Million exploit
Input Validation · Incomplete Signature Coverage
Input Validation · Incomplete Signature Coverage · DeFi Protocol
|
Ethereum | $1.3 Million | — | DeFiLlama |
| 2026-04-22 |
Kipseli: $72.4 Thousand exploit
Input Validation · Missing Input Validation
Input Validation · Missing Input Validation · DeFi Protocol
|
Base | $72.4 Thousand | — | DeFiLlama |
| 2026-04-21 |
Volo Vault: $3.5 Million exploit
Key Compromise · Private Key Compromised
Key Compromise · Private Key Compromised · DeFi Protocol
|
Sui | $3.5 Million | — | DeFiLlama |
| 2026-04-20 |
Transit Finance: $258 Thousand exploit
Protocol Logic · Unknown
Protocol Logic · Unknown · DeFi Protocol
|
Ethereum | $258 Thousand | — | DeFiLlama |
| 2026-04-20 |
Juicebox V3: $52 Thousand exploit
Input Validation · Missing Input Validation
Input Validation · Missing Input Validation · DeFi Protocol
|
Ethereum | $52 Thousand | — | DeFiLlama |
| 2026-04-20 |
Thetanuts Finance: $50 Thousand exploit
Token & Share Accounting · First Depositor Attack
Token & Share Accounting · First Depositor Attack · DeFi Protocol
|
Ethereum | $50 Thousand | — | DeFiLlama |
| 2026-04-19 |
Custom sAVAX Rebalancer: $64 Thousand exploit
Access Control · Arbitrary External Call
Access Control · Arbitrary External Call · DeFi Protocol
|
Avalanche | $64 Thousand | — | DeFiLlama |
| 2026-04-19 |
Benqi Staked Avax: $64 Thousand exploit
Access Control · Arbitrary External Call
Access Control · Arbitrary External Call · DeFi Protocol
|
Avalanche | $64 Thousand | — | DeFiLlama |
| 2026-04-18 |
Kelp: $293 Million exploit
Bridge & Cross-Chain · Cross-Chain Message Spoofing
Bridge & Cross-Chain · Cross-Chain Message Spoofing · bridge · DeFi Protocol
|
Ethereum Arbitrum | $293 Million | — | DeFiLlama |
| 2026-04-16 |
Rhea Lend: $18.4 Million exploit
Oracle Manipulation · Spot Price Manipulation
Oracle Manipulation · Spot Price Manipulation · DeFi Protocol
|
Near | $18.4 Million | — | DeFiLlama |
| 2026-04-16 |
Grinex: $13.7 Million exploit
Key Compromise · Hot Wallet Key Compromised
Key Compromise · Hot Wallet Key Compromised · CEX
|
Tron Ethereum | $13.7 Million | — | DeFiLlama |
| 2026-04-14 |
CoW Swap: $1.2 Million exploit
Frontend & Infrastructure · DNS Hijack
Frontend & Infrastructure · DNS Hijack · DeFi Protocol
|
Ethereum | $1.2 Million | — | DeFiLlama |
| 2026-04-14 |
Zerion Wallet: $100 Thousand exploit
Social Engineering · Phishing
Social Engineering · Phishing · Wallet
|
$100 Thousand | — | DeFiLlama | |
| 2026-04-13 |
Dango: $1.9 Million exploit
Input Validation · Missing Input Validation
Input Validation · Missing Input Validation · DeFi Protocol
|
Dango | $1.9 Million | 21.6% | DeFiLlama |
| 2026-04-13 |
MONA: $61 Thousand exploit
Token & Share Accounting · Incorrect Share Accounting
Token & Share Accounting · Incorrect Share Accounting · Token
|
BSC | $61 Thousand | — | DeFiLlama |
Exploit records come from the public DeFiLlama hacks registry and are re-imported as recovery figures are updated. Depegs are detected daily from the platform's own hourly bars, and governance upgrades are read from Governor Bravo logs on chain; each row names its source. Curated entries add the transactions and addresses behind an event so it can be traced in the explorer and lined up against price windows. We publish what the source publishes, and amounts we cannot attribute are shown as blank, never filled in. The CSV carries the same rows as the filter you are looking at, one event per line, up to 5,000; past that, request the registry as a data export.