What happened, and when
A dated registry of exploits and protocol events for event-study work. Every entry names its source and links back. Nothing here is unattributed, and no amount is estimated by us.
185 events
| Date | Event | Chains | Loss | Returned | Source |
|---|---|---|---|---|---|
| 2026-06-08 |
Flooring Protocol: $500 Thousand exploit
Token & Share Accounting · Infinite Mint
Token & Share Accounting · Infinite Mint · NFTfi
|
Ethereum | $500 Thousand | — | DeFiLlama |
| 2026-06-07 |
Ambient: $111 Thousand exploit
Protocol Logic · Deposit Logic Flaw
Protocol Logic · Deposit Logic Flaw · DeFi Protocol
|
Ethereum | $111 Thousand | — | DeFiLlama |
| 2026-06-07 |
Syscoin Bridge: $10 Million exploit
Bridge & Cross-Chain · Forged Proof
Bridge & Cross-Chain · Forged Proof · bridge · DeFi Protocol
|
Syscoin | $10 Million | — | DeFiLlama |
| 2026-06-03 |
ATM: $243 Thousand exploit
Protocol Logic · Swap Logic Flaw
Protocol Logic · Swap Logic Flaw · Token
|
BSC | $243 Thousand | — | DeFiLlama |
| 2026-06-03 |
GPU.NET: $10.6 Thousand exploit
Protocol Logic · Unknown
Protocol Logic · Unknown · DeFi Protocol
|
Ethereum | $10.6 Thousand | — | DeFiLlama |
| 2026-06-01 |
TesseraDAO: $2.4 Million exploit
Access Control · Improper Access Control
Access Control · Improper Access Control · DeFi Protocol
|
BNB | $2.4 Million | — | DeFiLlama |
| 2026-06-01 |
Gnosis Pay: $1.5 Million exploit
Input Validation · Signature Verification Flaw
Input Validation · Signature Verification Flaw · Other
|
Gnosis Chain | $1.5 Million | — | DeFiLlama |
| 2026-06-01 |
TSR: $2.5 Million exploit
Token & Share Accounting · Infinite Mint
Token & Share Accounting · Infinite Mint · Token
|
BSC | $2.5 Million | — | DeFiLlama |
| 2026-05-31 |
Fluid Lending: $215 Thousand exploit
Frontend & Infrastructure · Key Leaked via Infrastructure
Frontend & Infrastructure · Key Leaked via Infrastructure · DeFi Protocol
|
Ethereum | $215 Thousand | — | DeFiLlama |
| 2026-05-31 |
AROS: $295 Thousand exploit
Oracle Manipulation · Spot Price Manipulation
Oracle Manipulation · Spot Price Manipulation · Token
|
BSC | $295 Thousand | — | DeFiLlama |
| 2026-05-30 |
Gravity Bridge: $5.4 Million exploit
Key Compromise · Validator Key Compromised
Key Compromise · Validator Key Compromised · bridge · DeFi Protocol
|
Ethereum | $5.4 Million | — | DeFiLlama |
| 2026-05-30 |
AFI Protocol: $480 Thousand exploit
Protocol Logic · Unknown
Protocol Logic · Unknown · DeFi Protocol
|
Ethereum | $480 Thousand | — | DeFiLlama |
| 2026-05-30 |
Alephium Bridge: $815 Thousand exploit
Bridge & Cross-Chain · Forged Proof
Bridge & Cross-Chain · Forged Proof · bridge · DeFi Protocol
|
Ethereum | $815 Thousand | — | DeFiLlama |
| 2026-05-28 |
ONTR: $98.2 Thousand exploit
Access Control · Ownership Takeover
Access Control · Ownership Takeover · Token
|
Ethereum | $98.2 Thousand | — | DeFiLlama |
| 2026-05-28 |
DxSale: $7.3 Million exploit
Rugpull · Liquidity Rug
Rugpull · Liquidity Rug · DeFi Protocol
|
BSC | $7.3 Million | — | DeFiLlama |
| 2026-05-27 |
Stake DAO Yield: $91 Thousand exploit
Key Compromise · Deployer Key Compromised
Key Compromise · Deployer Key Compromised · bridge · DeFi Protocol
|
Arbitrum | $91 Thousand | — | DeFiLlama |
| 2026-05-27 |
SUPERFORTUNE AI: $15.2 Million exploit
Access Control · Improper Access Control
Access Control · Improper Access Control · Token
|
Ethereum | $15.2 Million | — | DeFiLlama |
| 2026-05-27 |
Stake DAO: $91 Thousand exploit
Key Compromise · Deployer Key Compromised
Key Compromise · Deployer Key Compromised · bridge · DeFi Protocol
|
Arbitrum | $91 Thousand | — | DeFiLlama |
| 2026-05-26 |
SKP: $212 Thousand exploit
Token & Share Accounting · Incorrect Share Accounting
Token & Share Accounting · Incorrect Share Accounting · DeFi Protocol
|
BNB | $212 Thousand | — | DeFiLlama |
| 2026-05-25 |
Bitmor: $6 Thousand exploit
Access Control · Token Approval Abuse
Access Control · Token Approval Abuse · DeFi Protocol
|
Base | $6 Thousand | — | DeFiLlama |
| 2026-05-25 |
New Market Trading: $3.98 Million exploit
Access Control · Improper Access Control
Access Control · Improper Access Control · Other
|
Ethereum Base Arbitrum | $3.98 Million | — | DeFiLlama |
| 2026-05-25 |
WUSD.fi/Glove: $200 Thousand exploit
Protocol Logic · Reward Logic Flaw
Protocol Logic · Reward Logic Flaw · Liquidity Pool
|
Ethereum | $200 Thousand | — | DeFiLlama |
| 2026-05-24 |
Fractal Protocol: $13.7 Thousand exploit
Reentrancy · Reentrancy
Reentrancy · Reentrancy · DeFi Protocol
|
Arbitrum | $13.7 Thousand | — | DeFiLlama |
| 2026-05-23 |
Mure: $11.7 Thousand exploit
Input Validation · Signature Verification Flaw
Input Validation · Signature Verification Flaw · DeFi Protocol
|
Ethereum | $11.7 Thousand | — | DeFiLlama |
| 2026-05-23 |
StablR: $2.8 Million exploit
Key Compromise · Private Key Compromised
Key Compromise · Private Key Compromised · DeFi Protocol
|
Ethereum | $2.8 Million | — | DeFiLlama |
| 2026-05-22 |
Polymarket: $700 Thousand exploit
Key Compromise · Private Key Compromised
Key Compromise · Private Key Compromised · DeFi Protocol
|
Polygon | $700 Thousand | — | DeFiLlama |
| 2026-05-20 |
RetoSwap: $2.7 Million exploit
Input Validation · Missing Input Validation
Input Validation · Missing Input Validation · DeFi Protocol
|
Monero | $2.7 Million | — | DeFiLlama |
| 2026-05-20 |
MAP Protocol: $110 Thousand exploit
Token & Share Accounting · Infinite Mint
Token & Share Accounting · Infinite Mint · bridge · Chain
|
Ethereum BSC | $110 Thousand | — | DeFiLlama |
| 2026-05-19 |
ElevateFi: $16 Thousand exploit
Oracle Manipulation · Spot Price Manipulation
Oracle Manipulation · Spot Price Manipulation · DeFi Protocol
|
Polygon | $16 Thousand | — | DeFiLlama |
| 2026-05-19 |
Bankr: $170 Thousand exploit
Frontend & Infrastructure · Session Key Compromised
Frontend & Infrastructure · Session Key Compromised · AI Agent
|
Base | $170 Thousand | — | DeFiLlama |
| 2026-05-19 |
HermesVault: $30 Thousand exploit
Protocol Logic · Withdrawal Logic Flaw
Protocol Logic · Withdrawal Logic Flaw · DeFi Protocol
|
Algorand | $30 Thousand | 86.7% | DeFiLlama |
| 2026-05-18 |
Echo Bridge: $821 Thousand exploit
Key Compromise · Private Key Compromised
Key Compromise · Private Key Compromised · bridge · DeFi Protocol
|
Monad | $821 Thousand | — | DeFiLlama |
| 2026-05-17 |
MetaSea: $110 Thousand exploit
Protocol Logic · Withdrawal Logic Flaw
Protocol Logic · Withdrawal Logic Flaw · DeFi Protocol
|
Arbitrum | $110 Thousand | — | DeFiLlama |
| 2026-05-17 |
Verus-Ethereum Bridge: $11.5 Million exploit
Bridge & Cross-Chain · Forged Proof
Bridge & Cross-Chain · Forged Proof · bridge · DeFi Protocol
|
Verus | $11.5 Million | — | DeFiLlama |
| 2026-05-17 |
SEA Token: $153 Thousand exploit
Oracle Manipulation · Spot Price Manipulation
Oracle Manipulation · Spot Price Manipulation · Token
|
Arbitrum | $153 Thousand | — | DeFiLlama |
| 2026-05-16 |
Adshares: $628 Thousand exploit
Bridge & Cross-Chain · Forged Proof
Bridge & Cross-Chain · Forged Proof · bridge · Other
|
Ethereum | $628 Thousand | — | DeFiLlama |
| 2026-05-15 |
THORChain DEX: $10.7 Million exploit
Bridge & Cross-Chain · Bridge Logic Flaw
Bridge & Cross-Chain · Bridge Logic Flaw · bridge · Chain
|
Bitcoin Ethereum Base +1 | $10.7 Million | — | DeFiLlama |
| 2026-05-15 |
Thorchain DEX — $10 Million exploit
Protocol Logic · Vault Churn Address Poisoning
Protocol Logic · Vault Churn Address Poisoning · bridge · Chain
|
Bitcoin Ethereum Base +1 | $10 Million | — | DeFiLlama |
| 2026-05-13 |
ShapeShift FOX Colony: $133 Thousand exploit
Access Control · Arbitrary External Call
Access Control · Arbitrary External Call · DeFi Protocol
|
Arbitrum | $133 Thousand | — | DeFiLlama |
| 2026-05-13 |
Transit Finance: $1.88 Million exploit
Access Control · Improper Access Control
Access Control · Improper Access Control · DeFi Protocol
|
Tron | $1.88 Million | — | DeFiLlama |
| 2026-05-12 |
BoostHook: $187 Thousand exploit
Oracle Manipulation · Spot Price Manipulation
Oracle Manipulation · Spot Price Manipulation · DeFi Protocol
|
Ethereum | $187 Thousand | — | DeFiLlama |
| 2026-05-12 |
IEXCBP: $97 Thousand exploit
Oracle Manipulation · Spot Price Manipulation
Oracle Manipulation · Spot Price Manipulation · DeFi Protocol
|
BNB Chain | $97 Thousand | — | DeFiLlama |
| 2026-05-12 |
SQ Protocol: $346 Thousand exploit
Access Control · Improper Access Control
Access Control · Improper Access Control · DeFi Protocol
|
BSC | $346 Thousand | — | DeFiLlama |
| 2026-05-12 |
Aurellion: $456 Thousand exploit
Access Control · Uninitialized Proxy
Access Control · Uninitialized Proxy · RWA
|
Arbitrum | $456 Thousand | — | DeFiLlama |
| 2026-05-11 |
Huma: $101 Thousand exploit
Access Control · Improper Access Control
Access Control · Improper Access Control · DeFi Protocol
|
Polygon | $101 Thousand | — | DeFiLlama |
| 2026-05-11 |
Huma Finance V2: $101 Thousand exploit
Access Control · Improper Access Control
Access Control · Improper Access Control · DeFi Protocol
|
Polygon | $101 Thousand | — | DeFiLlama |
| 2026-05-11 |
TAC Protocol: $2.85 Million exploit
Bridge & Cross-Chain · Proof Verifier Bug
Bridge & Cross-Chain · Proof Verifier Bug · bridge · DeFi Protocol
|
TON TAC | $2.85 Million | — | DeFiLlama |
| 2026-05-11 |
INK Finance: $140 Thousand exploit
Access Control · Caller Impersonation
Access Control · Caller Impersonation · DeFi Protocol
|
Polygon | $140 Thousand | — | DeFiLlama |
| 2026-05-10 |
Renegade: $209 Thousand exploit
Access Control · Uninitialized Proxy
Access Control · Uninitialized Proxy · DeFi Protocol
|
Arbitrum | $209 Thousand | 100.0% | DeFiLlama |
| 2026-05-07 |
TrustedVolumes: $6.7 Million exploit
Access Control · Caller Impersonation
Access Control · Caller Impersonation · Other
|
Ethereum | $6.7 Million | — | DeFiLlama |
| 2026-05-05 |
Ekubo: $1.4 Million exploit
Access Control · Token Approval Abuse
Access Control · Token Approval Abuse · DeFi Protocol
|
Ethereum | $1.4 Million | — | DeFiLlama |
| 2026-05-04 |
SquidRouterModule: $3.2 Million exploit
Access Control · Improper Access Control
Access Control · Improper Access Control · DeFi Protocol
|
Ethereum Base | $3.2 Million | — | DeFiLlama |
| 2026-05-04 |
SmartCredit: $72 Thousand exploit
Protocol Logic · Unknown
Protocol Logic · Unknown · DeFi Protocol
|
Ethereum | $72 Thousand | — | DeFiLlama |
| 2026-05-01 |
Bisq: $550 Thousand exploit
Input Validation · Missing Input Validation
Input Validation · Missing Input Validation · DeFi Protocol
|
Bitcoin | $550 Thousand | — | DeFiLlama |
| 2026-05-01 |
Sharwa.Finance: $32.9 Thousand exploit
Oracle Manipulation · Spot Price Manipulation
Oracle Manipulation · Spot Price Manipulation · DeFi Protocol
|
Arbitrum | $32.9 Thousand | — | DeFiLlama |
| 2026-04-30 |
Wasabi Perps: $5.5 Million exploit
Key Compromise · Deployer Key Compromised
Key Compromise · Deployer Key Compromised · DeFi Protocol
|
Ethereum Base Berachain +1 | $5.5 Million | — | DeFiLlama |
| 2026-04-29 |
Syndicate: $380 Thousand exploit
Bridge & Cross-Chain · Bridge Logic Flaw
Bridge & Cross-Chain · Bridge Logic Flaw · bridge · DeFi Protocol
|
Base | $380 Thousand | 100.0% | DeFiLlama |
| 2026-04-29 |
Sweat Foundation: $3.5 Million exploit
Protocol Logic · Withdrawal Logic Flaw
Protocol Logic · Withdrawal Logic Flaw · DeFi Protocol
|
Near | $3.5 Million | — | DeFiLlama |
| 2026-04-29 |
Aftermath Perps: $1.14 Million exploit
Protocol Logic · Withdrawal Logic Flaw
Protocol Logic · Withdrawal Logic Flaw · DeFi Protocol
|
Sui | $1.14 Million | — | DeFiLlama |
| 2026-04-28 |
YieldCore-3rd-deal: $399 Thousand exploit
Access Control · Improper Access Control
Access Control · Improper Access Control · DeFi Protocol
|
Ethereum | $399 Thousand | — | DeFiLlama |
Exploit records come from the public DeFiLlama hacks registry and are re-imported as recovery figures are updated. Depegs are detected daily from the platform's own hourly bars, and governance upgrades are read from Governor Bravo logs on chain; each row names its source. Curated entries add the transactions and addresses behind an event so it can be traced in the explorer and lined up against price windows. We publish what the source publishes, and amounts we cannot attribute are shown as blank, never filled in. The CSV carries the same rows as the filter you are looking at, one event per line, up to 5,000; past that, request the registry as a data export.