Incidents by month
Crypto hacks and exploits in October 2026
40 incidents. Each links to a full write-up: timeline, OAK Techniques, attacker addresses and fund flow, with sources.
Incidents (40)
- zkLink Nova exploit (Oct 2026): $783K — 2026-10-29 · loss $783K · OAK-T10.002 Message-Verification Bypass
- Polymarket hack (Oct 2026): $2.5–2.7M — 2026-10-29 · loss $2.5–2.7M · OAK-T15.002 Supply-Chain / Vendor-Pipeline Compromise
- Binance hack (Oct 2026): $6.3B — 2026-10-29 · loss $6.3B · OAK-T13.004 EIP-7702 Delegation Abuse
- TranchePool exploit (Oct 2026) — 2026-10-28 · OAK-T9.016 Contract Accounting / State-Invariant Flaw
- Hifi Finance exploit (Oct 2026): $1M — 2026-10-28 · loss $1M · OAK-T16.002 Hostile-Vote Treasury Drain
- Predict.fun hack (Oct 2026) — 2026-10-27 · OAK-T15.002 Supply-Chain / Vendor-Pipeline Compromise
- Bloom Trading hack (Oct 2026): $947K — 2026-10-26 · loss $947K · OAK-T15.003 Operator-Endpoint Compromise (Developer Workstation / Signing Machine)
- Unnamed trading Safe exploit (Oct 2026): $7.45M — 2026-10-26 · loss $7.45M · OAK-T9.004 Access-Control Misconfiguration
- Yapeswap exploit (Oct 2026): $21.9K — 2026-10-25 · loss $21.9K · OAK-T9.003 Governance Attack
- X100 exploit (Oct 2026): $4.85M — 2026-10-24 · loss $4.85M · OAK-T16.001 Vote Takeover via Flash-Loan
- Kimchi hack (Oct 2026): $385K — 2026-10-23 · loss $385K · OAK-T3.004 Influencer-Amplified Promotion-and-Dump
- Initia exploit (Oct 2026): $2.7M — 2026-10-23 · loss $2.7M · OAK-T7.001 Mixer-Routed Hop
- WAX Multi-Chain Bridge exploit (Oct 2026): $90.5K — 2026-10-22 · loss $90.5K · OAK-T9.016 Contract Accounting / State-Invariant Flaw
- NEM exploit (Oct 2026): $821,920 — 2026-10-21 · loss $821,920 · OAK-T9.016 Contract Accounting / State-Invariant Flaw
- Fearless Wallet hack (Oct 2026) — 2026-10-21 · OAK-T11.002 Wallet-Software Distribution Compromise
- Slice exploit (Oct 2026): $41K — 2026-10-20 · loss $41K · OAK-T9.016 Contract Accounting / State-Invariant Flaw
- Argent-style smart wallets exploit (Oct 2026): $59.8K — 2026-10-19 · loss $59.8K · OAK-T7.001 Mixer-Routed Hop
- AlpsCon AI Trade Hub exploit (Oct 2026): $355K — 2026-10-18 · loss $355K · OAK-T13.004 EIP-7702 Delegation Abuse
- Qubic hack (Oct 2026): $1.3–1.4M — 2026-10-17 · loss $1.3–1.4M · OAK-T11.004 Insufficient-Entropy Key Generation
- BiFi Lending exploit (Oct 2026): $165.4K — 2026-10-17 · loss $165.4K · OAK-T9.002 Flash-Loan-Enabled Exploit
- Kolan exploit (Oct 2026): $3K — 2026-10-15 · loss $3K · OAK-T9.001 Oracle Price Manipulation
- UNCX Network exploit (Oct 2026): $1.49M — 2026-10-14 · loss $1.49M · OAK-T9.016 Contract Accounting / State-Invariant Flaw
- Pirate Chain exploit (Oct 2026) — 2026-10-14 · OAK-T9.014 Protocol-Client Consensus Bug
- Gamdom hack (Oct 2026): $3M — 2026-10-13 · loss $3M · OAK-T11.011 Multi-chain Key-store Co-location
- Autheo THEO exploit (Oct 2026): $1.76M — 2026-10-12 · loss $1.76M · OAK-T10.002 Message-Verification Bypass
- Coinkite / Coldcard hack (Oct 2026) — 2026-10-11 · OAK-T11.007.003 Brand-Trust-Leveraged Active Phishing for Seed-Phrase Exfiltration
- Papertrade exploit (Oct 2026): $1.28M — 2026-10-10 · loss $1.28M · OAK-T17.001 Cross-Venue Arbitrage-Driven Price-Discovery Distortion
- Ledger / CryptoBilis hack (Oct 2026): $72M — 2026-10-09 · loss $72M · OAK-T11.007 Hardware-wallet Supply-chain / Physical-access Compromise
- EtherVista exploit (Oct 2026): $18.6K — 2026-10-09 · loss $18.6K · OAK-T9.004 Access-Control Misconfiguration
- BitBay StableVault exploit (Oct 2026): $14K — 2026-10-09 · loss $14K · OAK-T9.004 Access-Control Misconfiguration
- X7 Finance exploit (Oct 2026): $16.5K — 2026-10-08 · loss $16.5K · OAK-T9.016 Contract Accounting / State-Invariant Flaw
- Set Protocol exploit (Oct 2026): $13.7K — 2026-10-06 · loss $13.7K · OAK-T7.001 Mixer-Routed Hop
- MakerDAO legacy auction keeper exploit (Oct 2026): $543K — 2026-10-06 · loss $543K · OAK-T11.013 Legacy-Version Maintenance Attack Surface
- Based Visa Card hack (Oct 2026) — 2026-10-05 · OAK-T15.004 Operator-Side Credential Compromise (SSO / Cloud / Registrar / DNS / Package Registry)
- Anonymous Base vault hack (Oct 2026): $6M — 2026-10-04 · loss $6M · OAK-T11.003 In-Use Multisig Smart-Contract Manipulation
- MALT exploit (Oct 2026): $72K — 2026-10-03 · loss $72K · OAK-T9.016 Contract Accounting / State-Invariant Flaw
- GoldPesa exploit (Oct 2026): $114.9K — 2026-10-02 · loss $114.9K · OAK-T9.016 Contract Accounting / State-Invariant Flaw
- NEAR Intents exploit (Oct 2026): $3.8M — 2026-10-01 · loss $3.8M · OAK-T10.002 Message-Verification Bypass
- Microsoft's X account hack (Oct 2026): $200,000 — 2026-10-01 · loss $200,000 · OAK-T15.006 Impersonation via Verified Social-Account Compromise
- FlashLoopAdapter exploit (Oct 2026): $305K — 2026-10-01 · loss $305K · OAK-T9.002 Flash-Loan-Enabled Exploit