Incidents by year
Crypto hacks and exploits in 2022
49 incidents in 2022.
December 2022 (2)
- Crypto hacks and exploits in December 2022
- Defrost Finance exit scam (Dec 2022): $12M — 2022-12-23 · loss $12M · OAK-T5.001 Hard LP Drain
- Ankr deployer-key compromise and malicious upgrade — BNB Chain — 2022-12-01 — 2022-12-01 · loss $5M · OAK-T11.014 Operator Privileged-Key Compromise
November 2022 (2)
- Crypto hacks and exploits in November 2022
- FTX exchange collapse (Nov 2022): $8B — 2022-11-11 · loss $8B · OAK-T11.005 Operator-side Fake-Platform Fraud
- X2Y2 + LooksRare royalty-optional shift (Nov 2022) — OAK-T12.003 Royalty Bypass / Marketplace Manipulation
October 2022 (5)
- Crypto hacks and exploits in October 2022
- Team Finance liquidity-locker migrate() exploit — Ethereum / BNB Chain — 2022-10-27 — 2022-10-27 · loss $14.5M · OAK-T2.002 Locked-Liquidity Spoof
- Market.xyz exploit (Oct 2022): $220K — 2022-10-24 · loss $220K · OAK-T9.002 Flash-Loan-Enabled Exploit
- Mango Markets oracle manipulation exploit (Oct 2022): $110M — 2022-10-11 · loss $110M · OAK-T16.002 Hostile-Vote Treasury Drain
- BSC Token Hub exploit (Oct 2022): $586M — 2022-10-06 · loss $586M · OAK-T10.002 Message-Verification Bypass
- Transit Swap DEX aggregator exploit (Oct 2022): $23M — 2022-10-02 · loss $23M · OAK-T4.002 Compromised Front-End Permit Solicitation
September 2022 (2)
- Crypto hacks and exploits in September 2022
- Wintermute DeFi vault drain (Sep 2022): $160M — 2022-09-20 · loss $160M · OAK-T11
- CryptoFX / Mauricio Chavez fake-asset-manager Ponzi targeting Latino community — Houston, Texas + ten-state US footprint + two foreign countries — 2020-05 onward / SEC emergency action 2022-09 — loss $300M · OAK-T11.005.002 Fake-Custodian / Fake-Asset-Manager Fraud
August 2022 (6)
- Crypto hacks and exploits in August 2022
- OptiFi accidental program closure exploit (Aug 2022): $661K — 2022-08-29 · loss $661K · OAK-T9.004 Access-Control Misconfiguration
- Tornado Cash OFAC sanctions (Aug 2022) — 2022-08-08 · OAK-T14.005 Builder Censorship MEV Extraction
- Yuga Labs Otherside Discord-phishing wave — Ethereum + multi-chain — 2022-08-04 — 2022-08-04 · loss $3M · OAK-T11
- Slope Wallet hack (Aug 2022): $4–8M — 2022-08-02 · loss $4–8M · OAK-T11.001 Third-Party Signing-Vendor UI / Signing-Flow Compromise
- Nomad Bridge exploit (Aug 2022): $190M — 2022-08-01 · loss $190M · OAK-T10.002 Message-Verification Bypass
- Curve Finance frontend DNS hijack hack (Aug 2022): $575K — loss $575K · OAK-T15.004 Operator-Side Credential Compromise (SSO / Cloud / Registrar / DNS / Package Registry)
July 2022 (7)
- Crypto hacks and exploits in July 2022
- Nirvana Finance flash-loan-driven price manipulation — Solana — 2022-07-28 — 2022-07-28 · loss $3.5M · OAK-T7
- Audius governance storage-collision attack — Ethereum — 2022-07-23 — 2022-07-23 · loss $6M · OAK-T16.005 Malicious Proposal Snowballing
- Premint NFT-allowlist platform front-end JavaScript injection — Ethereum — 2022-07-17 — 2022-07-17 · loss $375K · OAK-T12.002 Fake-Mint / Counterfeit Collection
- Omni Protocol (Jul 2022): $1.4M — 2022-07-10 · loss $1.4M · OAK-T12.006 NFT-Collateral Lending Manipulation
- Crema Finance fake-tick-array exploit (Jul 2022): $8.78M — 2022-07-02 · loss $8.78M · OAK-T9.002 Flash-Loan-Enabled Exploit
- Nomad optimistic bridge challenger-network gap — EVM — 2022 (architecture-review) — OAK-T10.002 Message-Verification Bypass
- Li.Fi v1 diamond-facet vulnerability exploit (Jul 2022): $600K — loss $600K · OAK-T9.004 Access-Control Misconfiguration
June 2022 (4)
- Crypto hacks and exploits in June 2022
- XCarnival (Jun 2022): $3.8M — 2022-06-26 · loss $3.8M · OAK-T12.006 NFT-Collateral Lending Manipulation
- Harmony Horizon Bridge light-client verification economic-security gap — Ethereum / Harmony — 2022-06-23/24 — 2022-06-23 · loss $100M · OAK-T10.001 Validator / Signer Key Compromise
- OpenSea insider trading (Jun 2022) — OAK-T12
- Lido stETH depeg and Aave / Curve looped-leverage liquidation cascade — Ethereum L1 — 2022-05 to 2022-06 — OAK-T14.001 Slashing-Condition Exploit
May 2022 (3)
- Crypto hacks and exploits in May 2022
- Terra/Luna / UST algorithmic-stablecoin collapse — Terra — 2022-05-07 to 2022-05-13 — 2022-05-13 · loss $40B · OAK-T14.001 Slashing-Condition Exploit
- Fortress Protocol flash-loan governance attack — BNB Chain — 2022-05-08 — 2022-05-08 · loss $3M · OAK-T16.001 Vote Takeover via Flash-Loan
- Pixelmon NFT reveal-rug (May 2022): $70M — loss $70M · OAK-T12
April 2022 (5)
- Crypto hacks and exploits in April 2022
- Inverse Finance recurring oracle exploits — Ethereum — 2022-04-02 and 2022-06-16 — 2022-06-16 · loss $15.6M · OAK-T7.001 Mixer-Routed Hop
- Saddle Finance virtual-price manipulation — Ethereum — 2022-04-30 — 2022-04-30 · loss $10M · OAK-T9.001 Oracle Price Manipulation
- Beanstalk Farms flash-loan governance attack — Ethereum — 2022-04-17 — 2022-04-17 · loss $181M · OAK-T16.001 Vote Takeover via Flash-Loan
- Inverse Finance TWAP-oracle lending exploit — Ethereum — 2022-04-02 — 2022-04-02 · loss $15.6M · OAK-T17.004 TWAP / Time-Window Manipulation Against DAO Treasury / Vesting Math
- Ronin Bridge Discord-impersonation followups — Axie Infinity / Ronin community — 2022-04 (cohort) — loss $300K · OAK-T11
March 2022 (4)
- Crypto hacks and exploits in March 2022
- Ronin Bridge exploit (Mar 2022): $625M — 2022-03-23 · loss $625M · OAK-T10.001 Validator / Signer Key Compromise
- Cashio infinite-mint via missing input validation — Solana — 2022-03-23 — 2022-03-23 · loss $48M · OAK-T7
- Agave / Hundred Finance reentrancy exploit — Gnosis Chain — 2022-03-15 — 2022-03-15 · loss $5.5M · OAK-T1.007 Token-2022 Transfer-Hook Abuse
- Paraluni MasterChef reentrancy exploit (Mar 2022): $1.7M — 2022-03-13 · loss $1.7M · OAK-T9.001 Oracle Price Manipulation
February 2022 (3)
- Crypto hacks and exploits in February 2022
- Build Finance DAO hostile-takeover exploit (Feb 2022): $470,000–490,000 — 2022-02-14 · loss $470,000–490,000 · OAK-T1.003 Renounced-But-Not-Really (Proxy-Upgrade Backdoor)
- Meter.io Passport Bridge exploit (Feb 2022): $4.3M — 2022-02-05 · loss $4.3M · OAK-T10.002 Message-Verification Bypass
- Wormhole Bridge exploit (Feb 2022): $325M — 2022-02-02 · loss $325M · OAK-T10.002 Message-Verification Bypass
January 2022 (6)
- Crypto hacks and exploits in January 2022
- Wonderland Money hack (Jan 2022) — 2022-01-27 · OAK-T3.003 Coordinated Pump-and-Dump
- Qubit Bridge exploit (Jan 2022): $80M — 2022-01-27 · loss $80M · OAK-T10.002 Message-Verification Bypass
- Big Daddy Ape Club NFT rug pull (Jan 2022): $1.3M — 2022-01-11 · loss $1.3M · OAK-T1.003 Renounced-But-Not-Really (Proxy-Upgrade Backdoor)
- LooksRare wash-trading launch incentive (Jan 2022) — 2022-01-10 · OAK-T12.001 NFT Wash-Trade Volume Inflation
- Frosties NFT rug pull (Jan 2022): $1.1M — 2022-01-09 · loss $1.1M · OAK-T1.003 Renounced-But-Not-Really (Proxy-Upgrade Backdoor)
- Arbix Finance audit-scope-mismatch rug pull — Binance Smart Chain — 2022-01-04 — 2022-01-04 · loss $10M · OAK-T1.001 Modifiable Tax Function