What happened, and when
A dated registry of exploits and protocol events for event-study work. Every entry names its source and links back. Nothing here is unattributed, and no amount is estimated by us.
17 events
| Date | Event | Chains | Loss | Returned | Source |
|---|---|---|---|---|---|
| 2026-07-27 |
Uniswap proposal 100 executed: Activate v4 Protocol Fees (Part 1/2)
## Summary This proposal continues the protocol fee rollout approved in UNIfication, following proposals [#93](https://vote.uniswapfoundation.org/proposals/93), [#94](https://vote.uniswapfoundation.org/proposals/94), [#95](https://vote.uniswapfoundation.org/proposals/95), and ...
|
Ethereum | — | — | Governor (on-chain) |
| 2026-07-27 |
Uniswap proposal 99 executed: Protocol Fee Expansion: Robinhood Chain
*This proposal is part of the protocol fee rollout, following proposals [#93](https://vote.uniswapfoundation.org/proposals/93), [#94](https://vote.uniswapfoundation.org/proposals/94), [#95](https://vote.uniswapfoundation.org/proposals/95), and [#96](https://vote.uniswapfoundat...
|
Ethereum | — | — | Governor (on-chain) |
| 2026-07-26 |
ChainConnect: $650 Thousand exploit
Access Control · Improper Access Control
Access Control · Improper Access Control · bridge · DeFi Protocol
|
Ethereum BSC Avalanche +1 | $650 Thousand | — | DeFiLlama |
| 2026-07-26 |
WEMIX.FI Lend: $737 Thousand exploit
Access Control · Improper Access Control
Access Control · Improper Access Control · DeFi Protocol
|
WEMIX3.0 | $737 Thousand | — | DeFiLlama |
| 2026-07-26 |
Garden: $450 Thousand exploit
Frontend & Infrastructure · Database Breach
Frontend & Infrastructure · Database Breach · bridge · DeFi Protocol
|
Ethereum Base Arbitrum +1 | $450 Thousand | — | DeFiLlama |
| 2026-07-25 |
Bankr: $480 Thousand exploit
Social Engineering · Social Account Takeover
Social Engineering · Social Account Takeover · Wallet
|
Base | $480 Thousand | — | DeFiLlama |
| 2026-07-25 |
Projekt: $560 Thousand exploit
Input Validation · Missing Input Validation
Input Validation · Missing Input Validation · DeFi Protocol
|
Ethereum | $560 Thousand | — | DeFiLlama |
| 2026-07-24 |
Triple-A: $9.7 Million exploit
Key Compromise · Hot Wallet Key Compromised
Key Compromise · Hot Wallet Key Compromised · Payments
|
Ethereum Tron Arbitrum | $9.7 Million | — | DeFiLlama |
| 2026-07-24 |
DeBond: $542 Thousand exploit
Protocol Logic · Accounting Error
Protocol Logic · Accounting Error · DeFi Protocol
|
Ethereum | $542 Thousand | — | DeFiLlama |
| 2026-07-23 |
Solido Cash: $900 Thousand exploit
Oracle Manipulation · Oracle Misconfiguration
Oracle Manipulation · Oracle Misconfiguration · DeFi Protocol
|
Supra | $900 Thousand | — | DeFiLlama |
| 2026-07-23 |
Lien: $542 Thousand exploit
Input Validation · Missing Input Validation
Input Validation · Missing Input Validation · DeFi Protocol
|
Ethereum | $542 Thousand | — | DeFiLlama |
| 2026-07-22 |
AFX Bridge: $24.2 Million exploit
Key Compromise · Validator Key Compromised
Key Compromise · Validator Key Compromised · bridge · DeFi Protocol
|
Arbitrum | $24.2 Million | — | DeFiLlama |
| 2026-07-22 |
Verus-Ethereum Bridge: $7.53 Million exploit
Bridge & Cross-Chain · Forged Proof
Bridge & Cross-Chain · Forged Proof · bridge · DeFi Protocol
|
Verus | $7.53 Million | — | DeFiLlama |
| 2026-07-22 |
Zilliqa: $1.64 Million exploit
Key Compromise · Weak Key Generation
Key Compromise · Weak Key Generation · Chain
|
Zilliqa | $1.64 Million | — | DeFiLlama |
| 2026-07-21 |
FlashTrade: $98 Thousand exploit
Input Validation · Missing Input Validation
Input Validation · Missing Input Validation · DeFi Protocol
|
Solana | $98 Thousand | — | DeFiLlama |
| 2026-07-21 |
42DAO: $912 Thousand exploit
Oracle Manipulation · Spot Price Manipulation
Oracle Manipulation · Spot Price Manipulation · DeFi Protocol
|
BSC | $912 Thousand | — | DeFiLlama |
| 2026-07-21 |
Wanchain: $10 Million exploit
Input Validation · Signature Verification Flaw
Input Validation · Signature Verification Flaw · bridge · Chain
|
Cardano | $10 Million | — | DeFiLlama |
Exploit records come from the public DeFiLlama hacks registry and are re-imported as recovery figures are updated. Depegs are detected daily from the platform's own hourly bars, and governance upgrades are read from Governor Bravo logs on chain; each row names its source. Curated entries add the transactions and addresses behind an event so it can be traced in the explorer and lined up against price windows. We publish what the source publishes, and amounts we cannot attribute are shown as blank, never filled in. The CSV carries the same rows as the filter you are looking at, one event per line, up to 5,000; past that, request the registry as a data export.