YFarmX logoYFarmXIntelligence for an accelerating worldBriefings
YFarmX logoYFarmX
YFarmX
Security Desk · live log

Crypto Exploit Tracker

$5.93bn drained across 154 logged incidents

Every major crypto exploit we log: what was hit, how much was lost, and how the attack actually worked, with the on-chain references and sources attached. Maintained by the Security Desk; updated as incidents are verified.

Updated 15 Oct 2026 · 154 incidents · 22 months tracked

Showing 154 of 154 incidents · $5.93bn in view

Overview
Total lossAll time$5.93bnCumulative, Jan 2025 to date
2026 so farYear to date$2.51bn100 incidents · 2025 total $3.42bn
Biggest single hitAll time$1.40bnBybit Multisig Cold-Wallet Hack · 24% of all losses
Major incidentsAll time154Logged per month, Jan 2025 to date
Most common vectorAll timeAccess Control41 of 154 incidents
Days since last hackLogged–Days between the last 25 hacks

Where the money went · by vector

  1. Access Control$2.40bn40.4%
  2. Phishing$800M13.5%
  3. Other$686M11.6%
  4. Third-party security appliance compromise$388M6.5%
  5. Software Bug$330M5.6%
  6. Bridge Exploit$328M5.5%
  7. Rugpull$298M5.0%
  8. Private Key Compromise$280M4.7%
  9. Oracle Manipulation$207M3.5%
  10. Under investigation$103M1.7%
  11. Smart Contract Bug$40M0.7%
  12. Governance Attack$29M0.5%
  13. Flash Loan$20M0.3%
  14. Private key compromise$13M0.2%
  15. Bridge$7.5M0.1%
  16. Unauthorised server access$3M0.1%
  17. Supply Chain$3M0.1%
  18. Vesting contract exploit$1.5M0.0%
  19. Logic Flaw$316k0.0%

Losses · last 12 months

Loss severity · all time

154total
LowUnder $10M
10266.2%
Medium$10M – $50M
3220.8%
High$50M and above
2013.0%
  1. UNCX vesting contracts lose about $1.49mNewVesting contract exploitMultichainDeFi$1.5M
  2. Gamdom reports more than $3m lost from hot walletsNewUnauthorised server accessUnknownGambling$3M
  3. Ledger reseller customers lose an estimated $103.4mNewUnder investigationMultichainWallet$103M, high severity
  4. 79th Vault reports a key compromise and returned fundsNewPrivate key compromiseBNB ChainDeFi$13M, medium severity
  5. Legacy auction keeper loses 200 ETH through exposed permissionsNewAccess ControlEthereumDeFi$543k
  6. Base vault loses $6m after malicious contract approvalAccess ControlBaseDeFi$6M
  7. MALT swap flaw causes a reported $72,000 lossLogic FlawPolygonDeFi$72k
  8. GoldPesa accounting flaw causes a reported $114,900 lossLogic FlawBaseDeFi$115k
  9. NEAR Intents recovers $3.8m taken in bridge incidentBridge ExploitMultichainCross-chain$3.8M
  10. Flaw in a Safe wallet add-on lets attacker take $307,000Access ControlEthereumWallet$307k
  11. MUSystem pays deposit bonuses twice, losing about $36,900Logic FlawEthereumDeFi$37k
  12. MCN Labs reward flaw causes a reported $92,600 lossLogic FlawBNB ChainDeFi$93k
  13. Fake Upbit GIWA bridge drains $2.07m from early usersPhishingEthereumBridge$2.1M
  14. Payy's Ethereum bridge contract drained of $1.83m in USDCBridge ExploitEthereumPayments$1.8M
  15. Stolen hot-wallet keys let an attacker empty crypto casino Duelbits on five blockchainsPrivate Key CompromiseMultichainGaming$6.1M
  16. Bitget hack: $387.5 million taken through compromised security appliancesThird-party security appliance compromiseMultichainCentralised Exchange$388M, high severity
  17. Old Magic Eden approvals let attacker take $1.77m in WETHAccess ControlMultichainNFT$1.8M
  18. Inflated NSTR oracle price lets one account borrow $3.5m from NostraOracle ManipulationStarknetLending$3.5M
  19. MEV bot captures 2,900 rsETH drained through a Safe module flawAccess ControlEthereumWallet$7.7M
  20. Signing flaw in D'CENT's app wallet lets attackers move user fundsSoftware BugMultichainWallet$6.6M
  21. Chainflip pays out twice on replayed Tron memosSoftware BugTronCross-chain$736k
  22. Unbacked nBTC minted on Nomic reaches Osmosis poolsSoftware BugCosmos / OsmosisBridge$3.1M
  23. Elements bug sends 4,000 BTC out of Liquid's reserve, 3,400 returnedSoftware BugLiquid / BitcoinBridge$320M, high severity
  24. Injective Binary-Options Exploit and Emergency UpgradeSmart Contract BugInjectiveDerivatives–
  25. Ontology Mainnet Halt After Malicious Attack ActivityOtherOntologyLayer 1–
  26. More Markets Lending Reserve Drain on Flow EVMSmart Contract BugFlowLending$410k
  27. Aquifer AMM Exploit on SolanaAccess ControlSolanaAMM$2.5M
  28. Balancer V1 Legacy Pool Rounding ErrorSmart Contract BugEthereumAMM$234k
  29. Tectonic Oracle Manipulation and Cronos HaltOracle ManipulationCronosLending$120M, high severity
  30. Avici Card Contract DrainAccess ControlSolanaPayments$501k
  31. Moonwell MAMO Market ExploitOracle ManipulationBaseBorrowing$8.7M
  32. CometDEX Backstop Pool DrainSmart Contract BugStellarAMM$718k
  33. Term Finance Vault Governance TakeoverGovernance AttackEthereumLending$8.5M
  34. TAC Cosmos EVM Balance Underflow DrainOtherTACLayer 1$7.5M
  35. The Sandbox OFT Bridge MintAccess ControlMultichainGaming$1.5M
  36. BounceBit Authorisation Exploit and L1 ShutdownAccess ControlBounceBitRestaking$3M
  37. Coldcard Mk3 Seed Entropy SweepPrivate Key CompromiseBitcoinWallet$116M, high severity
  38. Crypto DAO Vault DrainAccess ControlBNB ChainDeFi$52k
  39. WEMIX$ Stablecoin Contract TakeoverAccess ControlWEMIX3.0Stablecoin$731k
  40. Triple-A Hot Wallet DrainOtherMultichainPayments$9.7M
  41. AFX Trade Bridge ExploitAccess ControlArbitrumDerivatives$24M, medium severity
  42. Verus Ethereum Bridge Exploit (second)BridgeEthereumBridge$7.5M
  43. B² Network Staking ExploitAccess ControlBitcoin L2Staking$3.9M
  44. CascadeSmart Contract BugArbitrumPerps$1.3M
  45. OstiumOracle ManipulationArbitrumPerps$24M, medium severity
  46. Bonzo LendOracle ManipulationHederaLending$9M
  47. Summer.fiFlash LoanEthereumYield$6M
  48. BonkDAOGovernance AttackSolanaDeFi$20M, medium severity
  49. PolymarketSupply ChainPolygonDeFi$3M
  50. SecondFiPrivate Key CompromiseCardanoWallet$2.4M
  51. Taiko BridgeBridge ExploitEthereumBridge$1.7M
  52. JaredFromSubway MEV BotPhishingEthereumInfrastructure$7.5M
  53. Aztec Private Rollup BridgeSmart Contract BugEthereumBridge$2.2M
  54. Aztec ConnectSmart Contract BugEthereumInfrastructure$2.1M
  55. RaydiumSmart Contract BugSolanaDEX$1.3M
  56. Secret NetworkBridge ExploitSecret NetworkBridge$4.7M
  57. Humanity ProtocolPrivate Key CompromiseEthereumInfrastructure$31M, medium severity
  58. Syscoin BridgeBridge ExploitSyscoinBridge$10M, medium severity
  59. Gravity BridgePrivate Key CompromiseEthereumBridge$5.4M
  60. DxSaleAccess ControlBNB ChainDeFi$7.3M
  61. Ill Bloom Wallet VulnerabilityPrivate Key CompromiseMultichainWallet$5.2M
  62. New Market TradingAccess ControlEthereumDeFi$4M
  63. StablRPrivate Key CompromiseEthereumStablecoin$2.8M
  64. RetoSwapSmart Contract BugMoneroDEX$2.7M
  65. Echo ProtocolPrivate Key CompromiseMonadYield$77M, high severity
  66. Verus–Ethereum BridgeBridge ExploitEthereumBridge$12M, medium severity
  67. THORChainPrivate Key CompromiseMultichainDEX$11M, medium severity
  68. Transit FinanceSmart Contract BugTronDEX$1.9M
  69. TrustedVolumesAccess ControlEthereumDeFi$5.9M
  70. EkuboSmart Contract BugEthereumDEX$1.4M
  71. Wasabi ProtocolPrivate Key CompromiseEthereumPerps$5M
  72. Aftermath PerpsSmart Contract BugSuiPerps$1.1M
  73. Sweat EconomySmart Contract BugNEARDeFi$3.5M
  74. PurrlendSmart Contract BugHyperliquidLending$1.5M
  75. GiddySmart Contract BugEthereumWallet$1.3M
  76. VoloPrivate Key CompromiseSuiYield$3.5M
  77. Kelp DAOBridge ExploitMultichainYield$292M, high severity
  78. Rhea FinanceSmart Contract BugNEARLending$18M, medium severity
  79. GrinexPrivate Key CompromiseTronCEX$15M, medium severity
  80. CoW SwapPhishingEthereumDEX$1.2M
  81. HyperbridgeBridge ExploitEthereumBridge$2.5M
  82. Drift ProtocolAccess ControlSolanaPerps$286M, high severity
  83. Resolv LabsAccess ControlEthereumStablecoin$25M, medium severity
  84. VenusOtherBNB ChainBorrowing$2.2M
  85. USDC Permit Signature PhishPhishingEthereumWallet$1.8M
  86. Solv ProtocolOtherEthereumVault$2.7M
  87. Blend ProtocolOracle ManipulationStellarBorrowing$11M, medium severity
  88. IoTeX ioTube BridgeAccess ControlEthereumBridge$4.4M
  89. Moonwell cbETH Oracle IncidentOracle ManipulationBaseBorrowing$1.8M
  90. CrossCurveOtherMultichainBridge$2.9M
  91. Step Finance Treasury BreachAccess ControlSolanaTreasury$30M, medium severity
  92. SwapNetOtherMultichainExchange$17M, medium severity
  93. Aperture FinanceOtherMultichainRouting$3.7M
  94. SagaEVMOtherSagaEVMChainlet$7M
  95. Makina FinanceFlash LoanEthereumYield Aggregator$5M
  96. NYC MemecoinRugpullSolanaToken$3.4M
  97. Yo YieldOtherEthereumYield Aggregator$3.7M
  98. Social Engineering TheftPhishingMultichainWallet$282M, high severity
  99. TruebitOtherEthereumToken$27M, medium severity
  100. TMXOtherArbitrumExchange$1.4M
  101. Unleash ProtocolAccess ControlStoryGovernance$3.9M
  102. Flow NetworkOtherFlowExecution Layer$3.9M
  103. Trust Wallet Browser ExtensionAccess ControlMultichainWallet$7M
  104. Address Poisoning AttackPhishingEthereumWallet$50M, high severity
  105. Yearn Finance Legacy yETH ExploitFlash LoanEthereumYield Aggregator$8.9M
  106. Upbit Solana Hot-Wallet BreachAccess ControlSolanaExchange$36M, medium severity
  107. GANA Payment Liquidity DrainOtherBNB ChainToken$3.1M
  108. Moonwell wrsETH Oracle MeltdownOracle ManipulationBaseBorrowing$3.7M
  109. Stream Finance External Manager Blow-UpOtherMultichainSynthetic / Credit$93M, high severity
  110. Beets Fi Balancer V2 Sonic IncidentOtherSonicAMM$3M
  111. Balancer V2 Stable Pool ExploitOtherMultichainAMM$116M, high severity
  112. Garden Finance Multi-Chain Liquidity DrainOtherMultichainCross-chain$11M, medium severity
  113. Typus Finance Oracle ManipulationOracle ManipulationSuiBorrowing$3.4M
  114. Hyperliquid Private Key CompromiseAccess ControlHyperliquidWallet$21M, medium severity
  115. Hypervault Suspected RugpullRugpullHyperliquidYield$3.6M
  116. GriffinAI GAIN Cross-Chain Peer ExploitAccess ControlBNB ChainToken$3M
  117. SBI Crypto Hot-Wallet HeistAccess ControlMultichainExchange$24M, medium severity
  118. UXLINK Multi-Sig & Mint AbuseAccess ControlArbitrumToken$48M, medium severity
  119. Aqua Solana Presale RugRugpullSolanaToken$4.7M
  120. SwissBorg SOL Earn BreachAccess ControlSolanaStaking$42M, medium severity
  121. Bunni v4 Hooks Liquidity DrainOtherEthereumAMM$8.4M
  122. Venus Protocol Delegate PhishPhishingBNB ChainBorrowing$13M, medium severity
  123. Better Bank Bonus-Mint ExploitOtherPulseChainBorrowing$5M
  124. Phishing: 783 BTC DrainedPhishingBitcoinWallet$91M, high severity
  125. BtcTurk HackAccess ControlMultichainExchange$48M, medium severity
  126. Odin.fun ExploitOtherBitcoinAMM$7M
  127. Phishing USDT TheftPhishingEthereumWallet$3M
  128. CrediX ExploitAccess ControlSonicBorrowing$4.5M
  129. WOO X Phishing BreachPhishingMultichainExchange$14M, medium severity
  130. CoinDCX BreachAccess ControlMultichainExchange$44M, medium severity
  131. BigONE Exchange HackAccess ControlMultichainExchange$28M, medium severity
  132. Arcadia Finance ExploitOtherBaseRebalancing$2.5M
  133. GMX ExploitOtherArbitrumPerps$42M, medium severity
  134. Resupply ExploitOracle ManipulationEthereumBorrowing$9.5M
  135. Nobitex HackAccess ControlMultichainExchange$82M, high severity
  136. AlexLab ExploitAccess ControlStacksDeFi$16M, medium severity
  137. Nervos ForceBridge ExploitAccess ControlMultichainBridge$3.7M
  138. Cork Protocol wstETH ExploitOtherEthereumYield$12M, medium severity
  139. Cetus Protocol ExploitOtherSuiAMM$260M, high severity
  140. Bitcoin TheftPhishingBitcoinWallet$331M, high severity
  141. Loopscale HackOracle ManipulationSolanaBorrowing$5.8M
  142. ZKsync Airdrop Contract ExploitAccess ControlZKsyncAirdrop$5M
  143. KiloEx Oracle ManipulationOracle ManipulationEthereumPerps$7M
  144. UPCX ProxyAdmin Take-OverAccess ControlEthereumToken$70M, high severity
  145. Abracadabra GMX-Cauldron BugOtherArbitrumBorrowing$13M, medium severity
  146. Zoth Logic-Contract SwapAccess ControlEthereumRWA$8.3M
  147. 1inch Fusion v1 Re-entrancyOtherEthereumDEX Aggregation$2.6M
  148. Suji Yan Wallet HackPhishingEthereumWallet$4M
  149. Infini Insider DrainAccess ControlEthereumTreasury$50M, high severity
  150. Bybit Multisig Cold-Wallet HackAccess ControlEthereumExchange$1.40bn, high severity
  151. LIBRA Rug PullRugpullSolanaToken$286M, high severity
  152. zkLend ExploitOtherStarknetBorrowing$9.5M
  153. DogWifTools ExploitOtherMultichainTooling$10M, medium severity
  154. Phemex ExploitAccess ControlMultichainExchange$37M, medium severity

Each row opens the incident's own record page, with the on-chain references and sources. Download the data: CSV ·JSON ·RSS · CC BY 4.0 with attribution to YFarmX.

All losses in USD, best public estimate at the time of logging, verified against on-chain analysis and named sources. Losses are coloured by severity band: green under $10M, gold $10M to $50M, red $50M and above. Attribution claims are reported as claims, not findings.Last update · 15 Oct 2026