What happened, and when
A dated registry of exploits and protocol events for event-study work. Every entry names its source and links back. Nothing here is unattributed, and no amount is estimated by us.
Recorded losses
$21.18 Billion
1,331 events
page 5 of 23
| Date | Event | Chains | Loss | Returned | Source |
|---|---|---|---|---|---|
| 2026-04-19 |
Custom sAVAX Rebalancer: $64 Thousand exploit
Access Control · Arbitrary External Call
Access Control · Arbitrary External Call · DeFi Protocol
|
Avalanche | $64 Thousand | — | DeFiLlama |
| 2026-04-19 |
Benqi Staked Avax: $64 Thousand exploit
Access Control · Arbitrary External Call
Access Control · Arbitrary External Call · DeFi Protocol
|
Avalanche | $64 Thousand | — | DeFiLlama |
| 2026-04-18 |
Kelp: $293 Million exploit
Bridge & Cross-Chain · Cross-Chain Message Spoofing
Bridge & Cross-Chain · Cross-Chain Message Spoofing · bridge · DeFi Protocol
|
Ethereum Arbitrum | $293 Million | — | DeFiLlama |
| 2026-04-16 |
Rhea Lend: $18.4 Million exploit
Oracle Manipulation · Spot Price Manipulation
Oracle Manipulation · Spot Price Manipulation · DeFi Protocol
|
Near | $18.4 Million | — | DeFiLlama |
| 2026-04-16 |
Grinex: $13.7 Million exploit
Key Compromise · Hot Wallet Key Compromised
Key Compromise · Hot Wallet Key Compromised · CEX
|
Tron Ethereum | $13.7 Million | — | DeFiLlama |
| 2026-04-14 |
CoW Swap: $1.2 Million exploit
Frontend & Infrastructure · DNS Hijack
Frontend & Infrastructure · DNS Hijack · DeFi Protocol
|
Ethereum | $1.2 Million | — | DeFiLlama |
| 2026-04-14 |
Zerion Wallet: $100 Thousand exploit
Social Engineering · Phishing
Social Engineering · Phishing · Wallet
|
$100 Thousand | — | DeFiLlama | |
| 2026-04-13 |
Dango: $1.9 Million exploit
Input Validation · Missing Input Validation
Input Validation · Missing Input Validation · DeFi Protocol
|
Dango | $1.9 Million | 21.6% | DeFiLlama |
| 2026-04-13 |
MONA: $61 Thousand exploit
Token & Share Accounting · Incorrect Share Accounting
Token & Share Accounting · Incorrect Share Accounting · Token
|
BSC | $61 Thousand | — | DeFiLlama |
| 2026-04-12 |
Hyperbridge: $2.5 Million exploit
Bridge & Cross-Chain · Forged Proof
Bridge & Cross-Chain · Forged Proof · bridge · DeFi Protocol
|
Ethereum Base BSC +1 | $2.5 Million | — | DeFiLlama |
| 2026-04-12 |
SubQuery Network: $134 Thousand exploit
Access Control · Improper Access Control
Access Control · Improper Access Control · DeFi Protocol
|
Base | $134 Thousand | — | DeFiLlama |
| 2026-04-09 |
Aethir: $400 Thousand exploit
Access Control · Improper Access Control
Access Control · Improper Access Control · bridge · DeFi Protocol
|
BSC | $400 Thousand | — | DeFiLlama |
| 2026-04-07 |
SquidMulticall: $517 Thousand exploit
Access Control · Improper Access Control
Access Control · Improper Access Control · DeFi Protocol
|
Arbitrum BNB Chain Avalanche +2 | $517 Thousand | — | DeFiLlama |
| 2026-04-05 |
Denaria vAMM: $166 Thousand exploit
Oracle Manipulation · Spot Price Manipulation
Oracle Manipulation · Spot Price Manipulation · DeFi Protocol
|
Linea | $166 Thousand | — | DeFiLlama |
| 2026-04-05 |
Denaria: $166 Thousand exploit
Oracle Manipulation · Spot Price Manipulation
Oracle Manipulation · Spot Price Manipulation · DeFi Protocol
|
Linea | $166 Thousand | — | DeFiLlama |
| 2026-04-04 |
BSC TMM/USDT: $1.67 Million exploit
Access Control · Improper Access Control
Access Control · Improper Access Control · DeFi Protocol
|
BSC | $1.67 Million | — | DeFiLlama |
| 2026-04-03 |
Silo V2: $359 Thousand exploit
Oracle Manipulation · Oracle Misconfiguration
Oracle Manipulation · Oracle Misconfiguration · DeFi Protocol
|
Arbitrum | $359 Thousand | — | DeFiLlama |
| 2026-04-01 |
Drift Trade: $295 Million exploit
Access Control · Proxy Upgrade Hijack
Access Control · Proxy Upgrade Hijack · DeFi Protocol
|
Solana | $295 Million | — | DeFiLlama |
| 2026-03-31 |
WhaleBit: $10.5 Thousand exploit
Oracle Manipulation · Spot Price Manipulation
Oracle Manipulation · Spot Price Manipulation · DeFi Protocol
|
Polygon | $10.5 Thousand | — | DeFiLlama |
| 2026-03-31 |
LML/USDT staking protocol: $950 Thousand exploit
Oracle Manipulation · Spot Price Manipulation
Oracle Manipulation · Spot Price Manipulation · DeFi Protocol
|
BSC | $950 Thousand | — | DeFiLlama |
| 2026-03-28 |
VTSwapHook
Protocol Logic · Swap Logic Flaw
Protocol Logic · Swap Logic Flaw · DeFi Protocol
|
Arbitrum | — | — | DeFiLlama |
| 2026-03-28 |
GoonFi: $254 Thousand exploit
Protocol Logic · Swap Logic Flaw
Protocol Logic · Swap Logic Flaw · DeFi Protocol
|
Solana | $254 Thousand | — | DeFiLlama |
| 2026-03-26 |
TUR Staking: $133 Thousand exploit
Oracle Manipulation · Spot Price Manipulation
Oracle Manipulation · Spot Price Manipulation · DeFi Protocol
|
BSC | $133 Thousand | — | DeFiLlama |
| 2026-03-24 |
UdonFi Lending
Protocol Logic · Withdrawal Logic Flaw
Protocol Logic · Withdrawal Logic Flaw · DeFi Protocol
|
Chromia | — | — | DeFiLlama |
| 2026-03-23 |
BCE: $679 Thousand exploit
Token & Share Accounting · Incorrect Share Accounting
Token & Share Accounting · Incorrect Share Accounting · DeFi Protocol
|
BSC | $679 Thousand | — | DeFiLlama |
| 2026-03-22 |
Cyrus Finance: $5 Million exploit
Oracle Manipulation · Spot Price Manipulation
Oracle Manipulation · Spot Price Manipulation · DeFi Protocol
|
BSC | $5 Million | — | DeFiLlama |
| 2026-03-21 |
Resolv USR: $24.5 Million exploit
Frontend & Infrastructure · Key Leaked via Infrastructure
Frontend & Infrastructure · Key Leaked via Infrastructure · DeFi Protocol
|
Ethereum | $24.5 Million | — | DeFiLlama |
| 2026-03-18 |
Neutrl
Frontend & Infrastructure · DNS Hijack
Frontend & Infrastructure · DNS Hijack · DeFi Protocol
|
Ethereum | — | — | DeFiLlama |
| 2026-03-17 |
dTRINITY dLEND: $257 Thousand exploit
Token & Share Accounting · First Depositor Attack
Token & Share Accounting · First Depositor Attack · DeFi Protocol
|
Ethereum | $257 Thousand | — | DeFiLlama |
| 2026-03-16 |
CheckoutPool: $85.7 Thousand exploit
Access Control · Improper Access Control
Access Control · Improper Access Control · DeFi Protocol
|
Polygon | $85.7 Thousand | — | DeFiLlama |
| 2026-03-15 |
Venus Core Pool: $3.7 Million exploit
Token & Share Accounting · Donation Attack
Token & Share Accounting · Donation Attack · DeFi Protocol
|
BSC | $3.7 Million | — | DeFiLlama |
| 2026-03-14 |
Goose Finance: $8.44 Thousand exploit
Token & Share Accounting · Incorrect Share Accounting
Token & Share Accounting · Incorrect Share Accounting · DeFi Protocol
|
BSC | $8.44 Thousand | — | DeFiLlama |
| 2026-03-12 |
Stake DAO Yield: $176 Thousand exploit
Access Control · Caller Impersonation
Access Control · Caller Impersonation · DeFi Protocol
|
Arbitrum Base | $176 Thousand | — | DeFiLlama |
| 2026-03-12 |
AM: $132 Thousand exploit
Token & Share Accounting · Incorrect Share Accounting
Token & Share Accounting · Incorrect Share Accounting · DeFi Protocol
|
BSC | $132 Thousand | — | DeFiLlama |
| 2026-03-12 |
Stake DAO: $176 Thousand exploit
Access Control · Caller Impersonation
Access Control · Caller Impersonation · DeFi Protocol
|
Arbitrum Base | $176 Thousand | — | DeFiLlama |
| 2026-03-12 |
Aave V3: $862 Thousand exploit
Oracle Manipulation · Oracle Misconfiguration
Oracle Manipulation · Oracle Misconfiguration · DeFi Protocol
|
Ethereum | $862 Thousand | 100.0% | DeFiLlama |
| 2026-03-11 |
BONK Fun: $30 Thousand exploit
Frontend & Infrastructure · DNS Hijack
Frontend & Infrastructure · DNS Hijack · ICO
|
Solana | $30 Thousand | — | DeFiLlama |
| 2026-03-11 |
DBXen: $150 Thousand exploit
Input Validation · Missing Input Validation
Input Validation · Missing Input Validation · DeFi Protocol
|
Ethereum | $150 Thousand | — | DeFiLlama |
| 2026-03-10 |
Movie Token: $242 Thousand exploit
Token & Share Accounting · Incorrect Share Accounting
Token & Share Accounting · Incorrect Share Accounting · DeFi Protocol
|
BSC | $242 Thousand | — | DeFiLlama |
| 2026-03-09 |
Gondi V3: $230 Thousand exploit
Access Control · Token Approval Abuse
Access Control · Token Approval Abuse · NFTfi
|
Ethereum | $230 Thousand | — | DeFiLlama |
| 2026-03-07 |
Molt EVM: $127 Thousand exploit
Access Control · Improper Access Control
Access Control · Improper Access Control · Other
|
Base | $127 Thousand | — | DeFiLlama |
| 2026-03-06 |
SolvBTC: $2.7 Million exploit
Token & Share Accounting · Infinite Mint
Token & Share Accounting · Infinite Mint · DeFi Protocol
|
Ethereum | $2.7 Million | — | DeFiLlama |
| 2026-03-02 |
FOOM Cash: $2.26 Million exploit
Bridge & Cross-Chain · Forged Proof
Bridge & Cross-Chain · Forged Proof · DeFi Protocol
|
Ethereum Base | $2.26 Million | — | DeFiLlama |
| 2026-03-02 |
Curve LlamaLend: $240 Thousand exploit
Token & Share Accounting · Donation Attack
Token & Share Accounting · Donation Attack · DeFi Protocol
|
Ethereum | $240 Thousand | — | DeFiLlama |
| 2026-02-28 |
Wise Lending V2: $66 Thousand exploit
Access Control · Improper Access Control
Access Control · Improper Access Control · DeFi Protocol
|
Arbitrum Ethereum | $66 Thousand | — | DeFiLlama |
| 2026-02-26 |
Ploutos Money: $390 Thousand exploit
Oracle Manipulation · Oracle Misconfiguration
Oracle Manipulation · Oracle Misconfiguration · DeFi Protocol
|
Ethereum | $390 Thousand | — | DeFiLlama |
| 2026-02-23 |
DGLD: $250 Thousand exploit
Token & Share Accounting · Infinite Mint
Token & Share Accounting · Infinite Mint · bridge · DeFi Protocol
|
Base | $250 Thousand | — | DeFiLlama |
| 2026-02-22 |
LAXO: $190 Thousand exploit
Token & Share Accounting · Incorrect Share Accounting
Token & Share Accounting · Incorrect Share Accounting · DeFi Protocol
|
BSC | $190 Thousand | — | DeFiLlama |
| 2026-02-22 |
Blend Pools V2: $11 Million exploit
Oracle Manipulation · Spot Price Manipulation
Oracle Manipulation · Spot Price Manipulation · DeFi Protocol
|
Stellar | $11 Million | — | DeFiLlama |
| 2026-02-21 |
Veil Cash: $5 Thousand exploit
Bridge & Cross-Chain · Proof Verifier Bug
Bridge & Cross-Chain · Proof Verifier Bug · DeFi Protocol
|
Base | $5 Thousand | — | DeFiLlama |
| 2026-02-21 |
IoTeX: $4.4 Million exploit
Key Compromise · Validator Key Compromised
Key Compromise · Validator Key Compromised · bridge · DeFi Protocol
|
Ethereum | $4.4 Million | — | DeFiLlama |
| 2026-02-19 |
Velar Perps: $401 Thousand exploit
Oracle Manipulation · Predictable Oracle Update
Oracle Manipulation · Predictable Oracle Update · DeFi Protocol
|
Mezo | $401 Thousand | — | DeFiLlama |
| 2026-02-15 |
Moonwell Lending: $1.78 Million exploit
Oracle Manipulation · Oracle Misconfiguration
Oracle Manipulation · Oracle Misconfiguration · DeFi Protocol
|
Base | $1.78 Million | — | DeFiLlama |
| 2026-02-01 |
CrossCurve: $3 Million exploit
Bridge & Cross-Chain · Cross-Chain Message Spoofing
Bridge & Cross-Chain · Cross-Chain Message Spoofing · bridge · DeFi Protocol
|
$3 Million | — | DeFiLlama | |
| 2026-01-31 |
Step Finance: $40 Million exploit
Key Compromise · Private Key Compromised
Key Compromise · Private Key Compromised · DeFi Protocol
|
Solana | $40 Million | — | DeFiLlama |
| 2026-01-29 |
Revert Lend: $50 Thousand exploit
Protocol Logic · Staking Logic Flaw
Protocol Logic · Staking Logic Flaw · DeFi Protocol
|
Base | $50 Thousand | — | DeFiLlama |
| 2026-01-27 |
PGNLZ: $100 Thousand exploit
Token & Share Accounting · Incorrect Share Accounting
Token & Share Accounting · Incorrect Share Accounting · DeFi Protocol
|
BSC | $100 Thousand | — | DeFiLlama |
| 2026-01-25 |
Aperture LM: $3.67 Million exploit
Access Control · Token Approval Abuse
Access Control · Token Approval Abuse · DeFi Protocol
|
Ethereum Base BSC | $3.67 Million | — | DeFiLlama |
| 2026-01-25 |
Matcha: $13.4 Million exploit
Frontend & Infrastructure · Frontend Compromise
Frontend & Infrastructure · Frontend Compromise · DeFi Protocol
|
Base Ethereum | $13.4 Million | — | DeFiLlama |
| 2026-01-21 |
Saga: $7 Million exploit
Token & Share Accounting · Infinite Mint
Token & Share Accounting · Infinite Mint · Chain
|
Saga | $7 Million | — | DeFiLlama |
About this data
Exploit records come from the public DeFiLlama hacks registry and are re-imported as recovery figures are updated. Depegs are detected daily from the platform's own hourly bars, and governance upgrades are read from Governor Bravo logs on chain; each row names its source. Curated entries add the transactions and addresses behind an event so it can be traced in the explorer and lined up against price windows. We publish what the source publishes, and amounts we cannot attribute are shown as blank, never filled in. The CSV carries the same rows as the filter you are looking at, one event per line, up to 5,000; past that, request the registry as a data export.