YFarmXIntelligence for an accelerating worldBriefings
YFarmX
YFarmX
Security Desk · live log

Crypto Exploit Tracker

$5.38bn drained across 132 logged incidents

Every major crypto exploit we log: what was hit, how much was lost, and how the attack actually worked, with the on-chain references and sources attached. Maintained by the Security Desk; updated as incidents are verified.

Updated 15 Sept 2026 · 132 incidents · 21 months tracked

Showing 132 of 132 incidents

Overview
Total lossAll time$5.38bnCumulative, Jan 2025 to date
2026 so farYear to date$1.96bn78 incidents · 2025 total $3.42bn
Biggest single hitAll time$1.40bnBybit Multisig Cold-Wallet Hack · 26% of all losses
Major incidentsAll time132Logged per month, Jan 2025 to date
Most common vectorAll timeAccess Control36 of 132 incidents
Days since last hackLogged–Days between the last 25 hacks

Where the money went · by vector

  1. Access Control$2.38bn44.2%
  2. Phishing$798M14.8%
  3. Other$686M12.8%
  4. Bridge Exploit$322M6.0%
  5. Software Bug$320M5.9%
  6. Rugpull$298M5.5%
  7. Private Key Compromise$274M5.1%
  8. Oracle Manipulation$204M3.8%
  9. Smart Contract Bug$40M0.7%
  10. Governance Attack$29M0.5%
  11. Flash Loan$20M0.4%
  12. Bridge$8M0.1%
  13. Supply Chain$3M0.1%

Losses · last 12 months

Loss severity · all time

132total
LowUnder $10M
8362.9%
Medium$10M – $50M
3123.5%
High$50M and above
1813.6%
  1. Liquid reserve withdrawal and partial Bitcoin recoverySoftware BugLiquid / BitcoinBridge$320M
  2. Aquifer AMM Exploit on SolanaAccess ControlSolanaAMM$2M
  3. More Markets Lending Reserve Drain on Flow EVMSmart Contract BugFlowLending$410k
  4. Ontology Mainnet Halt After Malicious Attack ActivityOtherOntologyLayer 1–
  5. Injective Binary-Options Exploit and Emergency UpgradeSmart Contract BugInjectiveDerivatives–
  6. Tectonic Oracle Manipulation and Cronos HaltOracle ManipulationCronosLending$120M
  7. Balancer V1 Legacy Pool Rounding ErrorSmart Contract BugEthereumAMM$234k
  8. Avici Card Contract DrainAccess ControlSolanaPayments$501k
  9. Moonwell MAMO Market ExploitOracle ManipulationBaseBorrowing$9M
  10. CometDEX Backstop Pool DrainSmart Contract BugStellarAMM$718k
  11. Term Finance Vault Governance TakeoverGovernance AttackEthereumLending$9M
  12. TAC Cosmos EVM Balance Underflow DrainOtherTACLayer 1$8M
  13. The Sandbox OFT Bridge MintAccess ControlMultichainGaming$1M
  14. BounceBit Authorisation Exploit and L1 ShutdownAccess ControlBounceBitRestaking$3M
  15. Coldcard Mk3 Seed Entropy SweepPrivate Key CompromiseBitcoinWallet$116M
  16. Crypto DAO Vault DrainAccess ControlBNB ChainDeFi$52k
  17. WEMIX$ Stablecoin Contract TakeoverAccess ControlWEMIX3.0Stablecoin$731k
  18. Triple-A Hot Wallet DrainOtherMultichainPayments$10M
  19. B² Network Staking ExploitAccess ControlBitcoin L2Staking$4M
  20. Verus Ethereum Bridge Exploit (second)BridgeEthereumBridge$8M
  21. AFX Trade Bridge ExploitAccess ControlArbitrumDerivatives$24M
  22. CascadeSmart Contract BugArbitrumPerps$1M
  23. OstiumOracle ManipulationArbitrumPerps$24M
  24. Bonzo LendOracle ManipulationHederaLending$9M
  25. BonkDAOGovernance AttackSolanaDeFi$20M
  26. Summer.fiFlash LoanEthereumYield$6M
  27. PolymarketSupply ChainPolygonDeFi$3M
  28. SecondFiPrivate Key CompromiseCardanoWallet$2M
  29. Taiko BridgeBridge ExploitEthereumBridge$2M
  30. JaredFromSubway MEV BotPhishingEthereumInfrastructure$8M
  31. Aztec Private Rollup BridgeSmart Contract BugEthereumBridge$2M
  32. Aztec ConnectSmart Contract BugEthereumInfrastructure$2M
  33. Secret NetworkBridge ExploitSecret NetworkBridge$5M
  34. RaydiumSmart Contract BugSolanaDEX$1M
  35. Humanity ProtocolPrivate Key CompromiseEthereumInfrastructure$31M
  36. Syscoin BridgeBridge ExploitSyscoinBridge$10M
  37. Gravity BridgePrivate Key CompromiseEthereumBridge$5M
  38. DxSaleAccess ControlBNB ChainDeFi$7M
  39. Ill Bloom Wallet VulnerabilityPrivate Key CompromiseMultichainWallet$5M
  40. New Market TradingAccess ControlEthereumDeFi$4M
  41. StablRPrivate Key CompromiseEthereumStablecoin$3M
  42. RetoSwapSmart Contract BugMoneroDEX$3M
  43. Echo ProtocolPrivate Key CompromiseMonadYield$77M
  44. Verus–Ethereum BridgeBridge ExploitEthereumBridge$12M
  45. THORChainPrivate Key CompromiseMultichainDEX$11M
  46. Transit FinanceSmart Contract BugTronDEX$2M
  47. TrustedVolumesAccess ControlEthereumDeFi$6M
  48. EkuboSmart Contract BugEthereumDEX$1M
  49. Wasabi ProtocolPrivate Key CompromiseEthereumPerps$5M
  50. Sweat EconomySmart Contract BugNEARDeFi$4M
  51. Aftermath PerpsSmart Contract BugSuiPerps$1M
  52. PurrlendSmart Contract BugHyperliquidLending$2M
  53. GiddySmart Contract BugEthereumWallet$1M
  54. VoloPrivate Key CompromiseSuiYield$4M
  55. Kelp DAOBridge ExploitMultichainYield$292M
  56. Rhea FinanceSmart Contract BugNEARLending$18M
  57. GrinexPrivate Key CompromiseTronCEX$15M
  58. CoW SwapPhishingEthereumDEX$1M
  59. HyperbridgeBridge ExploitEthereumBridge$3M
  60. Drift ProtocolAccess ControlSolanaPerps$286M
  61. Resolv LabsAccess ControlEthereumStablecoin$25M
  62. USDC Permit Signature PhishPhishingEthereumWallet$2M
  63. VenusOtherBNB ChainBorrowing$2M
  64. Solv ProtocolOtherEthereumVault$3M
  65. Blend ProtocolOracle ManipulationStellarBorrowing$11M
  66. IoTeX ioTube BridgeAccess ControlEthereumBridge$4M
  67. Moonwell cbETH Oracle IncidentOracle ManipulationBaseBorrowing$2M
  68. CrossCurveOtherMultichainBridge$3M
  69. Step Finance Treasury BreachAccess ControlSolanaTreasury$30M
  70. Aperture FinanceOtherMultichainRouting$4M
  71. SwapNetOtherMultichainExchange$17M
  72. SagaEVMOtherSagaEVMChainlet$7M
  73. Makina FinanceFlash LoanEthereumYield Aggregator$5M
  74. Yo YieldOtherEthereumYield Aggregator$4M
  75. NYC MemecoinRugpullSolanaToken$3M
  76. Social Engineering TheftPhishingMultichainWallet$282M
  77. TruebitOtherEthereumToken$27M
  78. TMXOtherArbitrumExchange$1M
  79. Unleash ProtocolAccess ControlStoryGovernance$4M
  80. Flow NetworkOtherFlowExecution Layer$4M
  81. Trust Wallet Browser ExtensionAccess ControlMultichainWallet$7M
  82. Address Poisoning AttackPhishingEthereumWallet$50M
  83. Yearn Finance Legacy yETH ExploitFlash LoanEthereumYield Aggregator$9M
  84. Upbit Solana Hot-Wallet BreachAccess ControlSolanaExchange$36M
  85. GANA Payment Liquidity DrainOtherBNB ChainToken$3M
  86. Stream Finance External Manager Blow-UpOtherMultichainSynthetic / Credit$93M
  87. Moonwell wrsETH Oracle MeltdownOracle ManipulationBaseBorrowing$4M
  88. Balancer V2 Stable Pool ExploitOtherMultichainAMM$116M
  89. Beets Fi Balancer V2 Sonic IncidentOtherSonicAMM$3M
  90. Garden Finance Multi-Chain Liquidity DrainOtherMultichainCross-chain$11M
  91. Typus Finance Oracle ManipulationOracle ManipulationSuiBorrowing$3M
  92. Hyperliquid Private Key CompromiseAccess ControlHyperliquidWallet$21M
  93. Hypervault Suspected RugpullRugpullHyperliquidYield$4M
  94. GriffinAI GAIN Cross-Chain Peer ExploitAccess ControlBNB ChainToken$3M
  95. SBI Crypto Hot-Wallet HeistAccess ControlMultichainExchange$24M
  96. UXLINK Multi-Sig & Mint AbuseAccess ControlArbitrumToken$48M
  97. Aqua Solana Presale RugRugpullSolanaToken$5M
  98. SwissBorg SOL Earn BreachAccess ControlSolanaStaking$42M
  99. Venus Protocol Delegate PhishPhishingBNB ChainBorrowing$13M
  100. Bunni v4 Hooks Liquidity DrainOtherEthereumAMM$8M
  101. Better Bank Bonus-Mint ExploitOtherPulseChainBorrowing$5M
  102. Phishing: 783 BTC DrainedPhishingBitcoinWallet$91M
  103. BtcTurk HackAccess ControlMultichainExchange$48M
  104. Odin.fun ExploitOtherBitcoinAMM$7M
  105. Phishing USDT TheftPhishingEthereumWallet$3M
  106. CrediX ExploitAccess ControlSonicBorrowing$5M
  107. WOO X Phishing BreachPhishingMultichainExchange$14M
  108. CoinDCX BreachAccess ControlMultichainExchange$44M
  109. BigONE Exchange HackAccess ControlMultichainExchange$28M
  110. Arcadia Finance ExploitOtherBaseRebalancing$3M
  111. GMX ExploitOtherArbitrumPerps$42M
  112. Resupply ExploitOracle ManipulationEthereumBorrowing$10M
  113. Nobitex HackAccess ControlMultichainExchange$82M
  114. AlexLab ExploitAccess ControlStacksDeFi$16M
  115. Nervos ForceBridge ExploitAccess ControlMultichainBridge$4M
  116. Cork Protocol wstETH ExploitOtherEthereumYield$12M
  117. Cetus Protocol ExploitOtherSuiAMM$260M
  118. Bitcoin TheftPhishingBitcoinWallet$331M
  119. Loopscale HackOracle ManipulationSolanaBorrowing$6M
  120. ZKsync Airdrop Contract ExploitAccess ControlZKsyncAirdrop$5M
  121. KiloEx Oracle ManipulationOracle ManipulationEthereumPerps$7M
  122. UPCX ProxyAdmin Take-OverAccess ControlEthereumToken$70M
  123. Abracadabra GMX-Cauldron BugOtherArbitrumBorrowing$13M
  124. Zoth Logic-Contract SwapAccess ControlEthereumRWA$8M
  125. 1inch Fusion v1 Re-entrancyOtherEthereumDEX Aggregation$3M
  126. Suji Yan Wallet HackPhishingEthereumWallet$4M
  127. Infini Insider DrainAccess ControlEthereumTreasury$50M
  128. Bybit Multisig Cold-Wallet HackAccess ControlEthereumExchange$1.40bn
  129. LIBRA Rug PullRugpullSolanaToken$286M
  130. zkLend ExploitOtherStarknetBorrowing$10M
  131. DogWifTools ExploitOtherMultichainTooling$10M
  132. Phemex ExploitAccess ControlMultichainExchange$37M

Each row opens the incident's own record page, with the on-chain references and sources. Download the data: CSV ·JSON ·RSS · CC BY 4.0 with attribution to YFarmX.

All losses in USD, best public estimate at the time of logging, verified against on-chain analysis and named sources. Attribution claims are reported as claims, not findings.Last update · 15 Sept 2026