Sign in Create account

What happened, and when

A dated registry of exploits and protocol events for event-study work. Every entry names its source and links back. Nothing here is unattributed, and no amount is estimated by us.

Recorded losses
$598.5 Million
Download registry (CSV)
Clear

128 events

page 3 of 3
Date Event Chains Loss Returned Source
2026-06-08 Flooring Protocol: $500 Thousand exploit
Token & Share Accounting · Infinite Mint
Token & Share Accounting · Infinite Mint · NFTfi
 Ethereum $500 Thousand — DeFiLlama
2026-06-07 Ambient: $111 Thousand exploit
Protocol Logic · Deposit Logic Flaw
Protocol Logic · Deposit Logic Flaw · DeFi Protocol
 Ethereum $111 Thousand — DeFiLlama
2026-06-07 Syscoin Bridge: $10 Million exploit
Bridge & Cross-Chain · Forged Proof
Bridge & Cross-Chain · Forged Proof · bridge · DeFi Protocol
 Syscoin $10 Million — DeFiLlama
2026-06-03 ATM: $243 Thousand exploit
Protocol Logic · Swap Logic Flaw
Protocol Logic · Swap Logic Flaw · Token
 BSC $243 Thousand — DeFiLlama
2026-06-03 GPU.NET: $10.6 Thousand exploit
Protocol Logic · Unknown
Protocol Logic · Unknown · DeFi Protocol
 Ethereum $10.6 Thousand — DeFiLlama
2026-06-01 TesseraDAO: $2.4 Million exploit
Access Control · Improper Access Control
Access Control · Improper Access Control · DeFi Protocol
 BNB $2.4 Million — DeFiLlama
2026-06-01 Gnosis Pay: $1.5 Million exploit
Input Validation · Signature Verification Flaw
Input Validation · Signature Verification Flaw · Other
 Gnosis Chain $1.5 Million — DeFiLlama
2026-06-01 TSR: $2.5 Million exploit
Token & Share Accounting · Infinite Mint
Token & Share Accounting · Infinite Mint · Token
 BSC $2.5 Million — DeFiLlama
About this data

Exploit records come from the public DeFiLlama hacks registry and are re-imported as recovery figures are updated. Depegs are detected daily from the platform's own hourly bars, and governance upgrades are read from Governor Bravo logs on chain; each row names its source. Curated entries add the transactions and addresses behind an event so it can be traced in the explorer and lined up against price windows. We publish what the source publishes, and amounts we cannot attribute are shown as blank, never filled in. The CSV carries the same rows as the filter you are looking at, one event per line, up to 5,000; past that, request the registry as a data export.