Incidents by year
Crypto hacks and exploits in 2025
54 incidents in 2025.
December 2025 (3)
- Crypto hacks and exploits in December 2025
- Unleash Protocol multisig governance hijack — Story Protocol — 2025-12-30 — 2025-12-30 · loss $3.9M · OAK-T16.005 Malicious Proposal Snowballing
- HNUT bundled-rug Pull (Dec 2025): $0.007 — 2025-12-30 · loss $0.007 · OAK-T1.004 Blacklist / Pausable Transfer Weaponization
- USPD CPIMP "Clandestine Proxy In the Middle of Proxy" stablecoin exploit — Ethereum — admin-frontrun 2025-09-16; mint event 2025-12 — 2025-09-16 · loss $1M · OAK-T5.003 Hidden-Mint Dilution
November 2025 (3)
- Crypto hacks and exploits in November 2025
- Hyperliquid POPCAT spoofed-buy-wall + cancel-flood manipulation — Hyperliquid (HyperEVM L1) — 2025-11-12 to 2025-11-13 — 2025-11-13 · loss $4.5M · OAK-T17.001 Cross-Venue Arbitrage-Driven Price-Discovery Distortion
- Balancer V2 ComposableStablePool rounding-error exploit — multi-chain — 2025-11-03 — 2025-11-03 · loss $128M · OAK-T9.002 Flash-Loan-Enabled Exploit
- Polymarket comment-section phishing campaign — Polygon — 2025-11 — loss $500,000 · OAK-T11.008 Embedded-Wallet Identity-Provider Compromise
October 2025 (2)
- Crypto hacks and exploits in October 2025
- Garden Finance solver-key compromise (Oct 2025): $10.8M — 2025-10-30 · loss $10.8M · OAK-T10.001 Validator / Signer Key Compromise
- Polymarket POLY pre-token brand-anticipation phishing — EVM — 2025-10 onward — OAK-T4.008 Fake-DEX Clone-Frontend Phishing
September 2025 (6)
- Crypto hacks and exploits in September 2025
- SBI Crypto mining-pool drain (Sep 2025): $21M — 2025-09-24 · loss $21M · OAK-T11.001 Third-Party Signing-Vendor UI / Signing-Flow Compromise
- UXLINK multisig delegate-call hijack hack (Sep 2025): $44M — 2025-09-22 · loss $44M · OAK-T11.002 Wallet-Software Distribution Compromise
- Shibarium bridge validator-key + flash-loan-amplified PoS-bridge exploit — Ethereum ↔ Shibarium — 2025-09-12 — 2025-09-12 · loss $2.3M · OAK-T10.001 Validator / Signer Key Compromise
- SSV Network correlated mass-slashing event — Ethereum Beacon Chain — 2025-09-10 — 2025-09-10 · loss $50,000 · OAK-T14.001 Slashing-Condition Exploit
- SwissBorg SOL-Earn third-party-API supply-chain compromise — Solana — 2025-09-08 — 2025-09-08 · loss $41M · OAK-T11.001 Third-Party Signing-Vendor UI / Signing-Flow Compromise
- ERC-4337 EntryPoint griefing-vector responsible disclosure (TrustSec / HackenProof / Ethereum Foundation) — coordinated disclosure 2025-09 → patched in v0.9 — 2025 — loss $0 · OAK-T13.001 Paymaster Compromise
August 2025 (2)
- Crypto hacks and exploits in August 2025
- Hypervault Finance exit scam via fake-audit-claims — Hyperliquid / Ethereum — 2025-09-25 — 2025-09-25 · loss $3.6M · OAK-T2.001 Single-Sided Liquidity Plant
- BtcTurk hot-wallet drain (Aug 2025): $48M — 2025-08-14 · loss $48M · OAK-T11
July 2025 (6)
- Crypto hacks and exploits in July 2025
- CoinDCX hack (Jul 2025): $44M — 2025-07-19 · loss $44M · OAK-T15.001 Social Engineering of Operator Personnel
- ALT Token hack (Jul 2025): $190M — 2025-07-14 · loss $190M · OAK-T3.003 Coordinated Pump-and-Dump
- GMX V1 GLP global-short-tracking exploit (Jul 2025): $42M — 2025-07-09 · loss $42M · OAK-T11.013 Legacy-Version Maintenance Attack Surface
- Polymarket Zelenskyy-suit market exploit (Jul 2025): $237M — loss $237M · OAK-T9.006 Subjective-Oracle Resolution Manipulation
- Lido stETH / Aave validator-exit-queue and looped-leverage depeg cascade — Ethereum L1 — 2025-07 — OAK-T14.001 Slashing-Condition Exploit
- Central Bank of Brazil (Jul 2025)
June 2025 (4)
- Crypto hacks and exploits in June 2025
- Resupply Finance wstUSR empty-market donation exploit — Ethereum — 2025-06-26 — 2025-06-26 · loss $9.5M · OAK-T7.001 Mixer-Routed Hop
- Pepe Creator (Matt Furie) NFT contract hijack via fake-IT-worker social engineering — Ethereum — 2025-06-18 to 2025-06-25 — 2025-06-25 · loss $1M · OAK-T12
- Nobitex hack (Jun 2025): $90M — 2025-06-18 · loss $90M · OAK-T11.011 Multi-chain Key-store Co-location
- Force Bridge admin-key drainage (Jun 2025): $3.76M — 2025-06-01 · loss $3.76M · OAK-T10.001 Validator / Signer Key Compromise
May 2025 (2)
- Crypto hacks and exploits in May 2025
- Cetus Protocol concentrated-liquidity overflow exploit — Sui — 2025-05-22 — 2025-05-22 · loss $220M · OAK-T7.003 Cross-Chain Bridge Laundering
- Inferno Drainer "Reloaded" (May 2025): $9M — loss $9M · OAK-T4.001 Permit2 Signature-Based Authority Misuse
April 2025 (7)
- Crypto hacks and exploits in April 2025
- Loopscale RateX-token-pricing exploit (Apr 2025): $5.7M — 2025-04-26 · loss $5.7M · OAK-T9.001 Oracle Price Manipulation
- EigenLayer Mainnet Slashing Launch and AVS Slashing-Condition Activation — Ethereum L1 — 2025-04-17 — 2025-04-17 · OAK-T14.001 Slashing-Condition Exploit
- ZKsync unclaimed-airdrop pool drain (Apr 2025): $5M — 2025-04-15 · loss $5M · OAK-T11.014 Operator Privileged-Key Compromise
- KiloEx oracle-feed manipulation exploit (Apr 2025): $7.5M — 2025-04-14 · loss $7.5M · OAK-T9.001 Oracle Price Manipulation
- Mango Markets MNGO governance-token expiry and protocol wind-down — Solana — 2025-01 — loss $0 · OAK-T16.002 Hostile-Vote Treasury Drain
- eXch instant-exchange shutdown (Apr 2025) — OAK-T7.001 Mixer-Routed Hop
- ERC-4337 paymaster compromise cohort (Apr 2025): $500K — loss $500K · OAK-T13.001 Paymaster Compromise
March 2025 (6)
- Crypto hacks and exploits in March 2025
- Hyperliquid JELLY self-liquidation + cross-venue spot-pump cascade — Hyperliquid (HyperEVM L1) + Solana spot — 2025-03-26 — 2025-03-26 · loss $13.5M · OAK-T17.001 Cross-Venue Arbitrage-Driven Price-Discovery Distortion
- zkLend precision-loss collateral-accounting exploit — Starknet — 2025-02-12 — 2025-02-12 · loss $9.6M · OAK-T9.001 Oracle Price Manipulation
- SushiSwap delegation-cluster governance takeover — Ethereum — 2025-03 to 2025-04 — loss $0 · OAK-T16.002 Hostile-Vote Treasury Drain
- Solflare base-x library homograph-attack vulnerability (CVE-2025-27611) — Solana — 2025-03 — loss $0 · OAK-T11.002 Wallet-Software Distribution Compromise
- Polymarket UMA governance attack (Mar 2025): $7M — loss $7M · OAK-T9.006 Subjective-Oracle Resolution Manipulation
- Hyperliquid Whale (Mar 2025): $20M — loss $20M · OAK-T8.001 Common-Funder Cluster Reuse
February 2025 (7)
- Crypto hacks and exploits in February 2025
- WEMIX exploit (Feb 2025): $6.1–6.2M — 2025-02-28 · loss $6.1–6.2M · OAK-T10.001 Validator / Signer Key Compromise
- Infini neobank treasury drain (Feb 2025): $49.5M — 2025-02-24 · loss $49.5M · OAK-T11.014 Operator Privileged-Key Compromise
- Bybit cold-wallet theft (Feb 2025): $1.46–1.5B — 2025-02-21 · loss $1.46–1.5B · OAK-T11.001 Third-Party Signing-Vendor UI / Signing-Flow Compromise
- Cardex session-signer-key frontend leak exploit (Feb 2025): $400,000 — 2025-02-18 · loss $400,000 · OAK-T13.003 Session-Key Hijacking
- zkLend empty-market rounding-error exploit — Starknet — 2025-02-12 — 2025-02-12 · loss $9.6M · OAK-T7.001 Mixer-Routed Hop
- $LIBRA / Milei presidential-endorsement pump-and-dump — Solana — 2025-02 — loss $251M · OAK-T1.004 Blacklist / Pausable Transfer Weaponization
- Bybit aftermath (Feb 2025): $1.5B — loss $1.5B · OAK-T7.001 Mixer-Routed Hop
January 2025 (6)
- Crypto hacks and exploits in January 2025
- Phemex hot-wallet theft (Jan 2025): $73M — 2025-01-23 · loss $73M · OAK-T7.001 Mixer-Routed Hop
- $TRUMP and $MELANIA presidential / first-spouse memecoin launches — Solana — 2025-01 — loss $4.3B · OAK-T1.004 Blacklist / Pausable Transfer Weaponization
- MEV-Boost relay censorship and OFAC-compliance validator concentration — Ethereum — 2025 — OAK-T14.002 MEV-Boost Relay Attack
- Mango Markets SEC settlement and protocol shutdown — Solana — 2024-09 to 2025-01 — loss $1.2M · OAK-T6.007 Trust-substrate Shift / Vendor-side Promise Revocation
- David Balland kidnapping hack (Jan 2025) — OAK-T5.009 Physical-Coercion Extraction (Wrench Attack)
- Hayden Davis / Kelsier Ventures memecoin operator-cluster cohort — Solana — 2025-Q1 — OAK-T1.003 Renounced-But-Not-Really (Proxy-Upgrade Backdoor)