What happened, and when
A dated registry of exploits and protocol events for event-study work. Every entry names its source and links back. Nothing here is unattributed, and no amount is estimated by us.
Recorded losses
$21.18 Billion
1,331 events
page 7 of 23
| Date | Event | Chains | Loss | Returned | Source |
|---|---|---|---|---|---|
| 2025-09-12 |
Kame Aggregator: $1.3 Million exploit
Protocol Logic · Swap Logic Flaw
Protocol Logic · Swap Logic Flaw · DeFi Protocol
|
Sei | $1.3 Million | — | DeFiLlama |
| 2025-09-10 |
Evoq Finance: $420 Thousand exploit
Key Compromise · Private Key Compromised
Key Compromise · Private Key Compromised · DeFi Protocol
|
BSC | $420 Thousand | — | DeFiLlama |
| 2025-09-09 |
SwissBorg: $41.5 Million exploit
Frontend & Infrastructure · API Key Compromised
Frontend & Infrastructure · API Key Compromised · CEX
|
Solana | $41.5 Million | — | DeFiLlama |
| 2025-09-08 |
Nemo Yield Trading: $2.59 Million exploit
Access Control · Improper Access Control
Access Control · Improper Access Control · DeFi Protocol
|
Sui | $2.59 Million | — | DeFiLlama |
| 2025-09-02 |
Bunni V2: $8.4 Million exploit
Token & Share Accounting · Rounding Error
Token & Share Accounting · Rounding Error · DeFi Protocol
|
Ethereum Unichain | $8.4 Million | — | DeFiLlama |
| 2025-09-01 |
OlaXBT: $2 Million exploit
Social Engineering · Signer Phishing
Social Engineering · Signer Phishing · DeFi Protocol
|
BSC | $2 Million | — | DeFiLlama |
| 2025-08-30 |
Cozy V2: $427 Thousand exploit
Input Validation · Missing Input Validation
Input Validation · Missing Input Validation · DeFi Protocol
|
Optimism | $427 Thousand | — | DeFiLlama |
| 2025-08-26 |
BetterBank: $5 Million exploit
Protocol Logic · Reward Logic Flaw
Protocol Logic · Reward Logic Flaw · DeFi Protocol
|
PulseChain | $5 Million | — | DeFiLlama |
| 2025-08-25 |
Panoptic V1.1
Input Validation · Hash Collision
Input Validation · Hash Collision · DeFi Protocol
|
Base Unichain Ethereum | $0 | — | DeFiLlama |
| 2025-08-14 |
BtcTurk: $48 Million exploit
Key Compromise · Hot Wallet Key Compromised
Key Compromise · Hot Wallet Key Compromised · CEX
|
Ethereum Avalanche Arbitrum +4 | $48 Million | — | DeFiLlama |
| 2025-08-14 |
BtcTurk
: $48 Million exploit
Infrastructure · Private Key Compromised
Infrastructure · Private Key Compromised · CEX
|
Ethereum Avalanche Arbitrum +4 | $48 Million | — | DeFiLlama |
| 2025-08-13 |
Grizzifi: $61 Thousand exploit
Protocol Logic · Reward Logic Flaw
Protocol Logic · Reward Logic Flaw · DeFi Protocol
|
BSC | $61 Thousand | — | DeFiLlama |
| 2025-08-13 |
Coinbase: $300 Thousand exploit
Access Control · Token Approval Abuse
Access Control · Token Approval Abuse · CEX
|
Ethereum | $300 Thousand | — | DeFiLlama |
| 2025-08-12 |
Odin.Fun: $7 Million exploit
Oracle Manipulation · Spot Price Manipulation
Oracle Manipulation · Spot Price Manipulation · DeFi Protocol
|
ICP | $7 Million | — | DeFiLlama |
| 2025-08-10 |
numa.: $313 Thousand exploit
Token & Share Accounting · Incorrect Share Accounting
Token & Share Accounting · Incorrect Share Accounting · DeFi Protocol
|
Sonic | $313 Thousand | — | DeFiLlama |
| 2025-08-04 |
CrediX: $4.5 Million exploit
Key Compromise · Private Key Compromised
Key Compromise · Private Key Compromised · DeFi Protocol
|
Sonic | $4.5 Million | — | DeFiLlama |
| 2025-07-28 |
SuperRare: $730 Thousand exploit
Access Control · Merkle Proof Forgery
Access Control · Merkle Proof Forgery · DeFi Protocol
|
Ethereum | $730 Thousand | — | DeFiLlama |
| 2025-07-24 |
WOO X: $14 Million exploit
Social Engineering · Phishing
Social Engineering · Phishing · CEX
|
Bitcoin Ethereum Arbitrum +1 | $14 Million | — | DeFiLlama |
| 2025-07-20 |
Stepp2p: $43 Thousand exploit
Protocol Logic · Unknown
Protocol Logic · Unknown · DeFi Protocol
|
BSC | $43 Thousand | — | DeFiLlama |
| 2025-07-19 |
CoinDCX: $44.2 Million exploit
Key Compromise · Hot Wallet Key Compromised
Key Compromise · Hot Wallet Key Compromised · CEX
|
$44.2 Million | — | DeFiLlama | |
| 2025-07-16 |
BigONE: $27 Million exploit
Frontend & Infrastructure · Supply Chain Attack
Frontend & Infrastructure · Supply Chain Attack · CEX
|
Bitcoin BSC Ethereum +2 | $27 Million | — | DeFiLlama |
| 2025-07-15 |
Arcadia V2: $2.5 Million exploit
Reentrancy · Reentrancy
Reentrancy · Reentrancy · DeFi Protocol
|
Base | $2.5 Million | — | DeFiLlama |
| 2025-07-10 |
Kinto Bridge: $1.55 Million exploit
Access Control · Uninitialized Proxy
Access Control · Uninitialized Proxy · bridge · DeFi Protocol
|
Arbitrum | $1.55 Million | — | DeFiLlama |
| 2025-07-09 |
GMX V1 EVM: $42 Million exploit
Reentrancy · Reentrancy
Reentrancy · Reentrancy · DeFi Protocol
|
Arbitrum | $42 Million | 95.2% | DeFiLlama |
| 2025-07-09 |
ZKSwap: $5 Million exploit
Bridge & Cross-Chain · Forged Proof
Bridge & Cross-Chain · Forged Proof · bridge · DeFi Protocol
|
Ethereum | $5 Million | — | DeFiLlama |
| 2025-07-09 |
GMX V1 Perps: $42 Million exploit
Reentrancy · Reentrancy
Reentrancy · Reentrancy · DeFi Protocol
|
Arbitrum | $42 Million | 95.2% | DeFiLlama |
| 2025-07-09 |
Texture: $2.2 Million exploit
Access Control · Improper Access Control
Access Control · Improper Access Control · DeFi Protocol
|
Solana | $2.2 Million | — | DeFiLlama |
| 2025-07-08 |
Peapods Finance: $207 Thousand exploit
Oracle Manipulation · Oracle Misconfiguration
Oracle Manipulation · Oracle Misconfiguration · DeFi Protocol
|
Ethereum | $207 Thousand | — | DeFiLlama |
| 2025-07-08 |
Peapods Finance
: $175 Thousand exploit
Ecosystem · Oracle manipulation in user-created Pods
Ecosystem · Oracle manipulation in user-created Pods · DeFi Protocol
|
Ethereum | $175 Thousand | — | DeFiLlama |
| 2025-07-05 |
RANT: $204 Thousand exploit
Token & Share Accounting · Incorrect Fee Accounting
Token & Share Accounting · Incorrect Fee Accounting · Token
|
BSC | $204 Thousand | — | DeFiLlama |
| 2025-07-02 |
Future Protocol: $4.6 Million exploit
Token & Share Accounting · Incorrect Share Accounting
Token & Share Accounting · Incorrect Share Accounting · DeFi Protocol
|
BSC | $4.6 Million | — | DeFiLlama |
| 2025-06-25 |
Resupply: $9.6 Million exploit
Token & Share Accounting · Donation Attack
Token & Share Accounting · Donation Attack · DeFi Protocol
|
Ethereum | $9.6 Million | — | DeFiLlama |
| 2025-06-25 |
Silo Finance: $546 Thousand exploit
Input Validation · Missing Input Validation
Input Validation · Missing Input Validation · DeFi Protocol
|
Ethereum | $546 Thousand | — | DeFiLlama |
| 2025-06-20 |
Hacken Token: $250 Thousand exploit
Key Compromise · Private Key Compromised
Key Compromise · Private Key Compromised · Other
|
$250 Thousand | — | DeFiLlama | |
| 2025-06-19 |
Bankroll Network: $65 Thousand exploit
Token & Share Accounting · Arithmetic Error
Token & Share Accounting · Arithmetic Error · DeFi Protocol
|
Binance Smart Chain | $65 Thousand | — | DeFiLlama |
| 2025-06-18 |
Nobitex: $82 Million exploit
Social Engineering · Malware
Social Engineering · Malware · CEX
|
Tron Ethereum BSC +4 | $82 Million | — | DeFiLlama |
| 2025-06-17 |
Meta Pool: $130 Thousand exploit
Token & Share Accounting · Infinite Mint
Token & Share Accounting · Infinite Mint · DeFi Protocol
|
Ethereum | $130 Thousand | — | DeFiLlama |
| 2025-06-15 |
FixedTokenBSwap: $2.2 Thousand exploit
Oracle Manipulation · Spot Price Manipulation
Oracle Manipulation · Spot Price Manipulation · DeFi Protocol
|
Ethereum | $2.2 Thousand | — | DeFiLlama |
| 2025-06-06 |
ALEX: $8.37 Million exploit
Access Control · Caller Impersonation
Access Control · Caller Impersonation · DeFi Protocol
|
Stacks | $8.37 Million | — | DeFiLlama |
| 2025-06-06 |
ForceBridge: $3.9 Million exploit
Access Control · Improper Access Control
Access Control · Improper Access Control · bridge · DeFi Protocol
|
Nervos | $3.9 Million | — | DeFiLlama |
| 2025-05-28 |
Cork V1: $12 Million exploit
Access Control · Improper Access Control
Access Control · Improper Access Control · DeFi Protocol
|
Ethereum | $12 Million | — | DeFiLlama |
| 2025-05-27 |
Usual USD0: $43 Thousand exploit
Input Validation · Missing Input Validation
Input Validation · Missing Input Validation · DeFi Protocol
|
Ethereum | $43 Thousand | — | DeFiLlama |
| 2025-05-26 |
Dexodus Finance: $300 Thousand exploit
Oracle Manipulation · Stale Oracle Price
Oracle Manipulation · Stale Oracle Price · DeFi Protocol
|
Base | $300 Thousand | 100.0% | DeFiLlama |
| 2025-05-22 |
Cetus CLMM: $223 Million exploit
Token & Share Accounting · Arithmetic Error
Token & Share Accounting · Arithmetic Error · DeFi Protocol
|
Sui | $223 Million | — | DeFiLlama |
| 2025-05-20 |
IRYS AI: $69.6 Thousand exploit
Rugpull · Backdoor Contract
Rugpull · Backdoor Contract · Token
|
Binance Smart Chain | $69.6 Thousand | — | DeFiLlama |
| 2025-05-16 |
Demex: $951 Thousand exploit
Oracle Manipulation · Spot Price Manipulation
Oracle Manipulation · Spot Price Manipulation · DeFi Protocol
|
Arbitrum | $951 Thousand | — | DeFiLlama |
| 2025-05-15 |
Zunami Protocol: $500 Thousand exploit
Key Compromise · Private Key Compromised
Key Compromise · Private Key Compromised · DeFi Protocol
|
Ethereum | $500 Thousand | — | DeFiLlama |
| 2025-05-11 |
Mobius Token: $2.15 Million exploit
Token & Share Accounting · Decimal Miscalculation
Token & Share Accounting · Decimal Miscalculation · DeFi Protocol
|
BSC | $2.15 Million | — | DeFiLlama |
| 2025-05-09 |
LND: $1.18 Million exploit
Access Control · Improper Access Control
Access Control · Improper Access Control · DeFi Protocol
|
Sonic Hyperliquid L1 | $1.18 Million | — | DeFiLlama |
| 2025-05-08 |
BitoPro: $11.5 Million exploit
Frontend & Infrastructure · Key Leaked via Infrastructure
Frontend & Infrastructure · Key Leaked via Infrastructure · CEX
|
Ethereum Tron Solana +1 | $11.5 Million | — | DeFiLlama |
| 2025-04-27 |
Aventa: $7 Thousand exploit
Protocol Logic · Unknown
Protocol Logic · Unknown · DeFi Protocol
|
Ethereum | $7 Thousand | — | DeFiLlama |
| 2025-04-27 |
QuantMaster: $100 Thousand exploit
Rugpull · Backdoor Contract
Rugpull · Backdoor Contract · DeFi Protocol
|
Ethereum | $100 Thousand | — | DeFiLlama |
| 2025-04-26 |
Term Finance: $1.65 Million exploit
Oracle Manipulation · Oracle Misconfiguration
Oracle Manipulation · Oracle Misconfiguration · DeFi Protocol
|
Ethereum | $1.65 Million | — | DeFiLlama |
| 2025-04-26 |
Impermax V3: $300 Thousand exploit
Token & Share Accounting · Incorrect Fee Accounting
Token & Share Accounting · Incorrect Fee Accounting · DeFi Protocol
|
Base | $300 Thousand | — | DeFiLlama |
| 2025-04-26 |
Loopscale: $5.8 Million exploit
Oracle Manipulation · Spot Price Manipulation
Oracle Manipulation · Spot Price Manipulation · DeFi Protocol
|
Solana | $5.8 Million | — | DeFiLlama |
| 2025-04-24 |
ACB: $22.8 Thousand exploit
Oracle Manipulation · Spot Price Manipulation
Oracle Manipulation · Spot Price Manipulation · DeFi Protocol
|
BSC | $22.8 Thousand | — | DeFiLlama |
| 2025-04-22 |
Bitcoin Mission: $1.3 Million exploit
Access Control · Improper Access Control
Access Control · Improper Access Control · DeFi Protocol
|
Arbitrum | $1.3 Million | — | DeFiLlama |
| 2025-04-20 |
Bitget: $100 Million exploit
Market Manipulation · Market Maker Bot Exploited
Market Manipulation · Market Maker Bot Exploited · CEX
|
$100 Million | — | DeFiLlama | |
| 2025-04-18 |
Numa: $506 Thousand exploit
Oracle Manipulation · Spot Price Manipulation
Oracle Manipulation · Spot Price Manipulation · DeFi Protocol
|
Arbitrum | $506 Thousand | — | DeFiLlama |
| 2025-04-16 |
R0AR: $780 Thousand exploit
Access Control · Improper Access Control
Access Control · Improper Access Control · DeFi Protocol
|
Ethereum | $780 Thousand | — | DeFiLlama |
About this data
Exploit records come from the public DeFiLlama hacks registry and are re-imported as recovery figures are updated. Depegs are detected daily from the platform's own hourly bars, and governance upgrades are read from Governor Bravo logs on chain; each row names its source. Curated entries add the transactions and addresses behind an event so it can be traced in the explorer and lined up against price windows. We publish what the source publishes, and amounts we cannot attribute are shown as blank, never filled in. The CSV carries the same rows as the filter you are looking at, one event per line, up to 5,000; past that, request the registry as a data export.