Incidents by year
Crypto hacks and exploits in 2023
55 incidents in 2023.
December 2023 (4)
- Crypto hacks and exploits in December 2023
- Tellor (TRB) spot-perpetual manipulation and liquidation cascade — Ethereum / CEX — 2023-12-31 — 2023-12-31 · loss $68M · OAK-T17.001 Cross-Venue Arbitrage-Driven Price-Discovery Distortion
- Ledger Connect Kit Library Supply-Chain Compromise — multi-chain (EVM dApps) — 2023-12-14 — 2023-12-14 · loss $600K · OAK-T15.002 Supply-Chain / Vendor-Pipeline Compromise
- Galxe frontend DNS hijack pair exploit (Oct 2023): $396K — 2023-10-06 · loss $396K · OAK-T1.003 Renounced-But-Not-Really (Proxy-Upgrade Backdoor)
- Orbit Chain $81M Cross-Chain Bridge Exploit — 2023-12 — loss $81M · OAK-T10.001 Validator / Signer Key Compromise
November 2023 (7)
- Crypto hacks and exploits in November 2023
- KyberSwap Elastic tick-state-manipulation exploit — multi-chain — 2023-11-22 — 2023-11-22 · loss $48M · OAK-T8
- HTX hot wallet + HECO Bridge exploit (Nov 2023): $110M — 2023-11-22 · loss $110M · OAK-T10.001 Validator / Signer Key Compromise
- dYdX V3 SUSHI/YFI targeted market manipulation and insurance-fund drain — dYdX V3 (StarkEx L2) — 2023-10-29 to 2023-11-18 — 2023-11-18 · loss $9M · OAK-T17.001 Cross-Venue Arbitrage-Driven Price-Discovery Distortion
- Poloniex hot-wallet drain (Nov 2023): $120M — 2023-11-10 · loss $120M · OAK-T11.011 Multi-chain Key-store Co-location
- ICBC Financial Services LockBit intrusion — U.S. Treasury market disruption — 2023-11-09 — 2023-11-09 · loss $9B · OAK-T7.002 CEX Deposit-Address Layering
- SafeMoon exploit (Nov 2023): $200M — 2023-11-01 · loss $200M · OAK-T1.001 Modifiable Tax Function
- Solana Jito relayer eclipse griefing exploit (Nov 2023) — OAK-T14.001 Slashing-Condition Exploit
October 2023 (1)
- Crypto hacks and exploits in October 2023
- LastPass Breach → Crypto Drain (Oct 2023): $4.4M — loss $4.4M · OAK-T11.006 Cold-storage Seed-phrase Exfiltration at Rest
September 2023 (8)
- Crypto hacks and exploits in September 2023
- Mixin Network hack (Sep 2023): $200M — 2023-09-23 · loss $200M · OAK-T11.001 Third-Party Signing-Vendor UI / Signing-Flow Compromise
- Nouns DAO rage-quit fork arbitrage exploit (Sep 2023) — 2023-09-15 · OAK-T16.002 Hostile-Vote Treasury Drain
- JPEX Hong Kong unlicensed-exchange fraud (Sep 2023): $1.3B — 2023-09-13 · loss $1.3B · OAK-T11
- CoinEx exchange hot-wallet compromise (Sep 2023): $53–54M — 2023-09-12 · loss $53–54M · OAK-T11.001 Third-Party Signing-Vendor UI / Signing-Flow Compromise
- MGM Resorts ransomware intrusion hack (Sep 2023): $100M — 2023-09-10 · loss $100M · OAK-T5.008 Ransomware Extortion Payment
- Stake.com hot-wallet theft (Sep 2023): $41M — 2023-09-04 · loss $41M · OAK-T7.001 Mixer-Routed Hop
- Caesar's Ransomware hack (Sep 2023): $12M — loss $12M · OAK-T5.008 Ransomware Extortion Payment
- Caesars Entertainment ransom payment hack (Sep 2023): $15M — loss $15M · OAK-T5.008 Ransomware Extortion Payment
August 2023 (9)
- Crypto hacks and exploits in August 2023
- OpenSea Operator Filter Registry sunset (Feb 2024) — 2024-02-29 · OAK-T12.003 Royalty Bypass / Marketplace Manipulation
- Balancer V2 Boosted Pools exploitation (Aug 2023): $2.1M — 2023-08-22 · loss $2.1M · OAK-T9.002 Flash-Loan-Enabled Exploit
- Exactly Protocol exploit (Aug 2023): $7.3M — 2023-08-18 · loss $7.3M · OAK-T9.004 Access-Control Misconfiguration
- Zunami Protocol price-manipulation drain via Curve pool — Ethereum — 2023-08-13 — 2023-08-13 · loss $2.16M · OAK-T7.001 Mixer-Routed Hop
- Milk Sad hack (Aug 2023): $900,000 — 2023-08-08 · loss $900,000 · OAK-T11.004 Insufficient-Entropy Key Generation
- Steadefi deployer-key compromise and malicious-upgrade extraction — Arbitrum — 2023-08-07 — 2023-08-07 · loss $1.1M · OAK-T11.014 Operator Privileged-Key Compromise
- Cypher Protocol sub-account isolation flaw — Solana — 2023-08-07 — 2023-08-07 · loss $1M · OAK-T9.016 Contract Accounting / State-Invariant Flaw
- Verified Organization Phishing hack (Aug 2023) — OAK-T15.006 Impersonation via Verified Social-Account Compromise
- Magnate Finance / Solfire / Kokomo deployer-cluster exit-scam cohort — Solana / BNB Chain / Base — 2022-01 → 2023-08 — loss $16.7M · OAK-T1.003 Renounced-But-Not-Really (Proxy-Upgrade Backdoor)
July 2023 (6)
- Crypto hacks and exploits in July 2023
- Curve Finance Vyper compiler-level reentrancy — Ethereum — 2023-07-30 — 2023-07-30 · loss $73M · OAK-T9.005 Reentrancy
- Alphapo payment-processor hot-wallet compromise — Multi-chain (BTC, ETH, TRON) — 2023-07-22/23 — 2023-07-22 · loss $60M · OAK-T11.001 Third-Party Signing-Vendor UI / Signing-Flow Compromise
- Multichain exploit (Jul 2023): $126M — 2023-07-06 · loss $126M · OAK-T10.001 Validator / Signer Key Compromise
- Multichain MPC bridge verification-model collapse — multi-chain — 2023-07-06/07 — 2023-07-06 · loss $125M · OAK-T10.001 Validator / Signer Key Compromise
- Italian Government Email Compromise (Jul 2023)
- Curve Finance Exploit Freeze Coordination — Multi-Exchange Compliance Response — 2023-07 — loss $61M · OAK-T7.002 CEX Deposit-Address Layering
June 2023 (2)
- Crypto hacks and exploits in June 2023
- Chibi Finance panic / onlyGov residual-authority exit-scam — Arbitrum — 2023-06-27 — 2023-06-27 · loss $1M · OAK-T1.003 Renounced-But-Not-Really (Proxy-Upgrade Backdoor)
- Atomic Wallet hack (Jun 2023): $35M — 2023-06-03 · loss $35M · OAK-T11.002 Wallet-Software Distribution Compromise
May 2023 (5)
- Crypto hacks and exploits in May 2023
- Tornado Cash governance attack (May 2023): $1M — 2023-05-20 · loss $1M · OAK-T16.005 Malicious Proposal Snowballing
- Ledger Recover seed-recovery service trust-substrate-shift event — Ledger hardware-wallet ecosystem — 2023-05-16 — 2023-05-16 · loss $0 · OAK-T11
- Ethereum Beacon Chain finality loss event — Ethereum — 2023-05-11 to 2023-05-12 — 2023-05-12 · OAK-T14.003 Restaking Cascading Risk
- Tornado Cash DAO Snapshot off-chain voting exploitation via governance-token Sybil deployment — chain-agnostic — 2023-05 — OAK-T16.002 Hostile-Vote Treasury Drain
- Mango Markets orderbook spoofing via fake-liquidity deployment — Solana — 2023-05 to 2023-08 — OAK-T17.001 Cross-Venue Arbitrage-Driven Price-Discovery Distortion
April 2023 (3)
- Crypto hacks and exploits in April 2023
- Sentiment Protocol read-only reentrancy via Balancer LP integration — Arbitrum — 2023-04-04 — 2023-04-04 · loss $1M · OAK-T9.002 Flash-Loan-Enabled Exploit
- Allbridge stable-pool virtual-price manipulation — BNB Chain — 2023-04-01 — 2023-04-01 · loss $573K · OAK-T9.001 Oracle Price Manipulation
- Arbitrum Foundation governance bypass and treasury transfer — Ethereum — 2023-03/04 — OAK-T16.002 Hostile-Vote Treasury Drain
March 2023 (3)
- Crypto hacks and exploits in March 2023
- ParaSpace whitehat rescue by BlockSec hack (Mar 2023): $5M — 2023-03-17 · loss $5M · OAK-T5.004 Sandwich / MEV Extraction
- Euler Finance lending exploit (Mar 2023): $197M — 2023-03-13 · loss $197M · OAK-T9.002 Flash-Loan-Enabled Exploit
- Rocket Pool node operator slashing (Mar 2023) — OAK-T14.001 Slashing-Condition Exploit
February 2023 (6)
- Crypto hacks and exploits in February 2023
- jaredfromsubway.eth sandwich-MEV operator — Ethereum — operating since 2023-02-27 — 2023-02-27 · loss $40.6M · OAK-T5.004 Sandwich / MEV Extraction
- Hope Finance router-rerouting rug pull (Feb 2023): $2M — 2023-02-21 · loss $2M · OAK-T1.003 Renounced-But-Not-Really (Proxy-Upgrade Backdoor)
- Platypus Finance emergency-withdrawal logic flaw — Avalanche — 2023-02-16 — 2023-02-16 · loss $8.5M · OAK-T9.002 Flash-Loan-Enabled Exploit
- MetaBirkins (Feb 2023): $133K — 2023-02-08 · loss $133K · OAK-T12.002 Fake-Mint / Counterfeit Collection
- Yearn iearnUSDT v1 deprecated-vault misconfiguration — Ethereum — 2023-02-02 — 2023-02-02 · loss $11.6M · OAK-T7.001 Mixer-Routed Hop
- BonqDAO Tellor oracle manipulation exploit (Feb 2023): $120M — 2023-02-01 · loss $120M · OAK-T17.002 Liquidation-Cascade Engineering
January 2023 (1)
- Crypto hacks and exploits in January 2023
- Magic Eden y00ts indexer-bug counterfeit-listing exploit — Solana — 2023-01-04 — 2023-01-04 · OAK-T12.002 Fake-Mint / Counterfeit Collection