Incidents by year
Crypto hacks and exploits in 2021
29 incidents in 2021.
December 2021 (4)
- Crypto hacks and exploits in December 2021
- AscendEX hot-wallet compromise (Dec 2021): $77.7M — 2021-12-11 · loss $77.7M · OAK-T11.001 Third-Party Signing-Vendor UI / Signing-Flow Compromise
- BitMart hot-wallet compromise (Dec 2021): $150M — 2021-12-05 · loss $150M · OAK-T11.001 Third-Party Signing-Vendor UI / Signing-Flow Compromise
- Vulcan Forged wallet-server compromise (Dec 2021): $140M — loss $140M · OAK-T11.001 Third-Party Signing-Vendor UI / Signing-Flow Compromise
- BadgerDAO frontend compromise via Cloudflare Workers — Ethereum — 2021-12 — loss $120M · OAK-T15.003 Operator-Endpoint Compromise (Developer Workstation / Signing Machine)
November 2021 (1)
- Crypto hacks and exploits in November 2021
- SQUID exploit (Nov 2021): $3.38M — 2021-11-01 · loss $3.38M · OAK-T1.001 Modifiable Tax Function
October 2021 (2)
- Crypto hacks and exploits in October 2021
- AnubisDAO hack (Oct 2021): $60M — 2021-10-29 · loss $60M · OAK-T5.001 Hard LP Drain
- Cream Finance oracle manipulation exploit (Oct 2021): $130M — 2021-10-27 · loss $130M · OAK-T9.001 Oracle Price Manipulation
September 2021 (3)
- Crypto hacks and exploits in September 2021
- Evolved Apes NFT rug pull (Oct 2021): $2.7M — 2021-10-05 · loss $2.7M · OAK-T1.003 Renounced-But-Not-Really (Proxy-Upgrade Backdoor)
- Compound Comptroller distribution bug exploit (Sep 2021): $80–90M — 2021-09-30 · loss $80–90M · OAK-T9.003 Governance Attack
- Vee Finance oracle manipulation exploit (Sep 2021): $35M — 2021-09-21 · loss $35M · OAK-T9.001 Oracle Price Manipulation
August 2021 (2)
- Crypto hacks and exploits in August 2021
- Liquid Global warm-wallet compromise (Aug 2021): $91M — 2021-08-19 · loss $91M · OAK-T11.001 Third-Party Signing-Vendor UI / Signing-Flow Compromise
- Poly Network exploit (Aug 2021): $611M — 2021-08-10 · loss $611M · OAK-T10.002 Message-Verification Bypass
July 2021 (2)
- Crypto hacks and exploits in July 2021
- THORChain exploit (Aug 2021): $8M — 2021-08-12 · loss $8M · OAK-T10.001 Validator / Signer Key Compromise
- ChainSwap bridge unauthorised-mint exploit — multi-chain (Ethereum, BSC) — 2021-07-02 and 2021-07-11 — 2021-07-11 · loss $800K · OAK-T10.002 Message-Verification Bypass
June 2021 (2)
- Crypto hacks and exploits in June 2021
- StableMagnet exploit (Jun 2021): $27M — 2021-06-23 · loss $27M · OAK-T1.003 Renounced-But-Not-Really (Proxy-Upgrade Backdoor)
- Iron Finance (Jun 2021): $2B — 2021-06-16 · loss $2B · OAK-T2.001 Single-Sided Liquidity Plant
May 2021 (6)
- Crypto hacks and exploits in May 2021
- Bogged Finance flash-loan staking-reward mint exploit — BNB Chain — 2021-05 (reported 2021-05-24) — 2021-05-24 · loss $3M · OAK-T9.002 Flash-Loan-Enabled Exploit
- PancakeBunny yield-aggregator mint-pricing exploit — BNB Smart Chain — 2021-05-19 — 2021-05-19 · loss $45M · OAK-T5.001 Hard LP Drain
- DFINITY Internet Computer (ICP) insider vesting-cliff token dump — Ethereum — 2021-05-10 onward — 2021-05-10 · loss $700 · OAK-T5.006 Vesting Cliff Dump
- Meebits (May 2021) — 2021-05-08 · OAK-T12.002 Fake-Mint / Counterfeit Collection
- Spartan Protocol AMM-LP-pricing exploit (May 2021): $30M — 2021-05-02 · loss $30M · OAK-T9.001 Oracle Price Manipulation
- Colonial Pipeline ransomware extortion payment — 2021-05 — loss $4.4M · OAK-T5.008 Ransomware Extortion Payment
April 2021 (2)
- Crypto hacks and exploits in April 2021
- Uranium Finance migration-pair arithmetic error — BSC — 2021-04-28 — 2021-04-28 · loss $50M · OAK-T9.011 Precision-Loss Rounding Attack
- EasyFi admin-key compromise (Apr 2021): $59M — 2021-04-19 · loss $59M · OAK-T11.014 Operator Privileged-Key Compromise
March 2021 (4)
- Crypto hacks and exploits in March 2021
- True Seigniorage Dollar (TSD) hostile-vote mint flooding — Binance Smart Chain — 2021-03-13 — 2021-03-13 · OAK-T16.002 Hostile-Vote Treasury Drain
- McAfee / Watson digital-asset pump-and-dump CFTC + DOJ enforcement — multi-CEX (Twitter-amplified) — 2017-12 / 2018-01 conduct; charges 2021-03-05 — 2021-03-05 · loss $2M · OAK-T17.001 Cross-Venue Arbitrage-Driven Price-Discovery Distortion
- Meerkat Finance deployer-drain exit scam (Mar 2021): $31M — 2021-03-04 · loss $31M · OAK-T5.001 Hard LP Drain
- SafeMoon token-launch mechanics exploit (Mar 2021) — OAK-T1.001 Modifiable Tax Function
February 2021 (1)
- Crypto hacks and exploits in February 2021
- Furucombo proxy-authority exploit (Feb 2021): $14M — 2021-02-27 · loss $14M · OAK-T16.006 Timelock-Free Governance Execution