| 1 | Apr 9, '23 | It seems the @SushiSwap RouterProcessor2 contact has an approve-related bug, which leads to the loss of >$3.3M loss (about 1800 eth) from @0xSifu. If you have approved , please | 88× | 1.8M | 1.1k | 484 | 214 |
| 2 | Sep 4, '23 | Hi @Stake, you may want to take a look: | 65.8× | 1.3M | 1.3k | 256 | 93 |
| 3 | Apr 13, '23 | Hi @AaveAave @iearnfinance, you may want to take a look: | 50.3× | 1M | 780 | 235 | 60 |
| 4 | Mar 13, '23 | Hi @eulerfinance: you may want to take a look: | 45.8× | 933k | 459 | 112 | 52 |
| 5 | Oct 7, '23 | Our initial analysis on today's @starsarenacom $2.9M hack indicates a reentrancy issue on the Stars Arena: Shares contract at The reentrancy is abused to update the weight when the | 33.6× | 683k | 314 | 104 | 50 |
| 6 | Jul 30, '23 | Hi @JPEGd_69, you may want to take a look: | 31.5× | 642k | 526 | 95 | 45 |
| 7 | Nov 10, '23 | Hi @Poloniex, you may want to take a look: @justinsuntron | 30.2× | 616k | 620 | 155 | 32 |
| 8 | Jul 6, '23 | Hi @MultichainOrg you may want to take a look: | 21.4× | 435k | 483 | 120 | 31 |
| 9 | Apr 9, '23 | It seems the exploited RouteProcess02 contract has been deployed in multiple chains. @SushiSwap Please *REVOKE* the following addresses ASAP. ETH: 0x044b7..7357 BSC: 0xd75f...6550 | 18.7× | 381k | 463 | 238 | 91 |
| 10 | Jun 14, '23 | Hi @hashflow, you may want to take a look: It appears there is an approve-related issue. | 16.4× | 335k | 160 | 43 | 29 |
| 11 | Apr 15, '23 | The loss of today's @HundredFinance hack is ~$7m. The root cause appears the attacker donates 200 WBTC to inflate hWBTC's exchange rate so that even a tiny amount (2 wei) of hWBTC | 15.2× | 309k | 242 | 81 | 45 |
| 12 | Mar 28, '23 | It seems last upgrade introduced a public burn bug. | 14.6× | 297k | 174 | 35 | 13 |
| 13 | Dec 25, '22 | Rubic @CryptoRubic is exploited (w/ ～$1.41M) 1,100 $ETH already into Tornado Cash from the exploiter | 13× | 264k | 201 | 45 | 15 |
| 14 | Jun 10, '24 | Today's @UwU_Lend hack leads to $19.4m loss. The root cause is a price oracle issue. In particular, the sUSDe asset is priced as median from multiple sources. Five of them, i.e., F | 12.5× | 255k | 195 | 39 | 76 |
| 15 | Jan 30, '24 | Hi @MIM_Spell, you may want to take a look (w/ $6.49M Loss) | 12.5× | 254k | 345 | 69 | 40 |
| 16 | Jul 2, '23 | Hi @PolyNetwork2 , you may want to take a look: | 12.1× | 246k | 241 | 82 | 26 |
| 17 | Mar 13, '23 | 1/ @eulerfinance was exploited in a flurry of txs on Ethereum (one hack tx: ), leading to the lost of ~$197m from the project. | 12× | 243k | 374 | 130 | 73 |
| 18 | Mar 25, '25 | .@GMX_IO @MIM_Spell related contracts have been hacked for ~6,260 ETH (worth ~$13M) | 11.8× | 241k | 521 | 92 | 87 |
| 19 | Jul 11, '23 | Hi, @Rodeo_Finance you may want to take a look: | 11.2× | 228k | 180 | 48 | 9 |
| 20 | Nov 3, '25 | Hi @Balancer, you may want to take a look: | 10.6× | 216k | 407 | 35 | 45 |
| 21 | May 28, '23 | It appears today's @jimbosprotocol hack leads to the 4090 ETH loss (w/ ~$7.5M). This hack is due to the lack of slippage control of liquidity-shifting operation -- such that the pr | 10.3× | 209k | 213 | 58 | 67 |
| 22 | Jan 23, '25 | Hi @Phemex_official, suspicious outflow of large funds from @Phemex_official hot wallets. | 10.1× | 206k | 241 | 33 | 13 |
| 23 | Mar 28, '23 | Hi @safemoon The upgrade, with the exploited public burn bug, was initiated by the official SafeMoon: Deployer. (Admin key leak?) And here comes the upgrade tx. | 10.0× | 203k | 165 | 46 | 5 |
| 24 | Apr 13, '23 | It appears the root cause is due to the misconfigured yUSDT, which is exploited to mint huge yUSDT (1,252,660,242,212,927.5) from a small $10K USDT. The huge yUSDT is then cashed o | 9.9× | 202k | 236 | 80 | 28 |
| 25 | Sep 19, '22 | 1/ We are thrilled to announce a self-service SaaS platform-#KillSwitch, which aims to detect exploitation TXs before their block inclusion and take contingency measures to block t | 9.5× | 0 | 1.2k | 405 | 185 |
| 26 | Jul 9, '25 | .@GMX_IO has been exploited for ~$42M. The exploiter has bridged ~$9.6M worth of cryptos to #Ethereum. | 8.7× | 176k | 397 | 93 | 78 |
| 27 | Jun 12, '23 | The loss of today's @SturdyFinance hack is ~442 ETH (w/ ~$800K). The root cause is due to the faulty price oracle to compute the cB-stETH-STABLE asset price @SturdyFinance | 8.5× | 173k | 210 | 49 | 36 |
| 28 | Aug 13, '23 | Hi @zunamiprotocol, we have detected an ongoing attack. Users are strongly suggested to take necessary actions. Here is the encrypted hash: 2638ae2969ce932d61c3ca66f9b8a4a6c01c4d89 | 8.5× | 173k | 188 | 37 | 7 |
| 29 | Oct 31, '23 | Hi @TeamUnibot , you may want to take a look: | 8.0× | 162k | 309 | 61 | 11 |
| 30 | Oct 12, '23 | Hi @Platypusdefi, you may want to take a look: | 7.6× | 156k | 205 | 37 | 7 |
| 31 | Jul 11, '23 | Hi @Platypusdefi, you may want to take a look: | 7.6× | 155k | 210 | 50 | 16 |
| 32 | Jan 18, '22 | The @cryptocom loss is about $15M with at least 4.6K ETHs and half of them are currently being washed via @TornadoCash | 7.5× | 0 | 866 | 326 | 59 |
| 33 | May 30, '23 | Hi @ede_finance you may need to take a look and explain: | 7.3× | 149k | 169 | 36 | 17 |
| 34 | Apr 2, '23 | The @Allbridge_io hack results in the loss of ~$570K (282,889 BUSD + 290,868 USDT). The root cause appears to be the manipulation of pool's swap price. The actor plays dual roles o | 6.9× | 141k | 158 | 48 | 18 |
| 35 | Jul 16, '24 | While analyzing today's @lifiprotocol hack, we notice an earlier hack on the same protocol on March 20, 2022. The bug is basically the same. Are we learning anything from the past | 6.8× | 138k | 322 | 66 | 63 |
| 36 | Dec 5, '21 | Estimate loss of @BitMartExchange: ~$100M. Here is the list of the transferred-out assets and their amounts | 6.6× | 0 | 675 | 304 | 35 |
| 37 | Jan 2, '24 | Today's hack on @RDNTCapital results in the loss of 1.9k eth (~$4.5m). The root cause is not new: It basically exploits a time window when a new market is activated in a lending ma | 6.5× | 132k | 193 | 48 | 70 |
| 38 | Jun 17, '23 | The loss of today's @MidasCapitalxyz hack is >$600K. The root cause is due to the rounding issue in its lending protocol (forked from the popular @compoundfinance v2 code base ) | 6.1× | 125k | 185 | 60 | 69 |
| 39 | Sep 12, '23 | Hi @coinexcom, suspicious outflow of large funds from #coinex hot wallets. | 5.8× | 117k | 215 | 51 | 11 |
| 40 | Nov 10, '23 | The estimated loss of @Poloniex hack is ~$125m, mainly on three chains: $56m (ETH), $48m (TRX), $18m (BTC). Also an interesting tx to look into: | 5.7× | 116k | 233 | 89 | 20 |
| 41 | Mar 18, '23 | 👀 | 5.7× | 115k | 170 | 28 | 5 |
| 42 | Dec 5, '21 | Total estimated loss: ~200M (~100M on @ethereum and ~96M on @BinanceChain ). (Previously we only counted the loss on @ethereum). And here is the list of affected assets/amounts on | 5.3× | 0 | 482 | 250 | 19 |
| 43 | Feb 20, '22 | Though unconfirmed, the @opensea hack is most likely phishing. Users authorize the "migration" as instructed in the phishing email and the authorization unfortunately allows the ha | 5.2× | 0 | 679 | 239 | 30 |
| 44 | Aug 10, '21 | The #PolyNetwork hack is possibly the largest crypto hack so far. Is the root cause due to a *SINGLE* compromised signer key? Here is the hack flow!!! | 4.9× | 0 | 671 | 222 | 55 |
| 45 | Mar 28, '24 | Hi @PrismaFi, you may want to a look (w/ $8.1m) | 4.9× | 100k | 248 | 52 | 23 |
| 46 | Aug 18, '23 | Hi @exactlyprotocol, we have detected an ongoing attack. Users are strongly suggested to take necessary actions. Here is the encrypted hash: 20bae0a96e90d5590a98bc81a16c2b1e8e96eba | 4.7× | 95k | 159 | 35 | 13 |
| 47 | Jan 16, '24 | Today's hack on @SocketDotTech results in the loss of >$3.3m. The bad route exploited in the hack was added 3 days ago and is now disabled. Here are related txs: - add route tx: - | 4.6× | 94k | 164 | 53 | 48 |
| 48 | Dec 12, '21 | Estimated loss @AscendEX_Global: $77.7M in total ($60M on @ethereum $9.2M @BinanceChain $8.5M @0xPolygon). Here is the list of the transferred-out assets and their amounts on @ethe | 4.5× | 0 | 499 | 208 | 11 |
| 49 | Dec 31, '23 | It seems @Orbit_Chain is being drained with >$62m | 4.4× | 90k | 188 | 43 | 16 |
| 50 | Apr 17, '22 | 1/ The @BeanstalkFarms was exploited in a flurry of txs ( and ), leading to the gain of $80+M for the hacker (The protocol loss may be larger), including 24,830 ETH and 36M BEAN. | 4.4× | 0 | 522 | 164 | 74 |
| 51 | Sep 27, '22 | #MEV A very profitable MEV bot, internally named as 0xbad, was somehow tricked/hacked with 1,101 ETH loss (~$1.45M) in the following tx: | 4.2× | 0 | 584 | 103 | 106 |
| 52 | Nov 30, '23 | 👀👀👀 New development on the @KyberNetwork exploit: | 4.1× | 84k | 270 | 66 | 11 |
| 53 | Aug 1, '23 | Our analysis shows the root case is from the exposed LeetSwapV2Pair::_transferFeesSupportingTaxTokens() function, which is hardly forked from solidly. | 4.0× | 82k | 207 | 32 | 28 |
| 54 | Jul 29, '21 | We just reported a potential security issue and got the following response. Any community advice on the next step? A. Continue the private disclosure to the team B. Raise necessary | 4.0× | 0 | 498 | 55 | 11 |
| 55 | May 15, '24 | Hi @SonneFinance: Please double check your timelock contract and the loss is now more than $20m. | 3.8× | 77k | 171 | 18 | 7 |
| 56 | Feb 16, '22 | #rugpull The deployer had huge amount of TMT pre-minted, just dumped to 2660+ BNB, and washed through @TornadoCash | 3.7× | 0 | 102 | 159 | 1 |
| 57 | Feb 21, '25 | Hi @Bybit_Official @benbybit you may want to take a look: | 3.7× | 74k | 201 | 47 | 7 |
| 58 | Apr 17, '22 | Hi, @BeanstalkFarms, you may want to take a look: | 3.6× | 0 | 471 | 90 | 39 |
| 59 | May 17, '22 | We are actively working with @FEGtoken on pausing and rescuing the funds. Tough time! 💪 | 3.4× | 0 | 488 | 164 | 3 |
| 60 | Nov 18, '23 | 👀👀👀It seems promising progress in tracking @poloniex stolen funds. @justinsuntron The whitehat reward of $10m is being offered. | 3.1× | 64k | 133 | 37 | 7 |
| 61 | Apr 13, '23 | The loss of today's @iearnfinance yUSDT hack is ~$11.6m. As mentioned earlier, the hacker exploits a bug in the misconfigured yUSDT - - to mint extremely huge amount of yUSDT (1,25 | 3.1× | 63k | 189 | 60 | 15 |
| 62 | Sep 3, '24 | Today @Penpiexyz_io was exploited, resulting in a loss of $>16M, including $7,879,029.18 wstETH, $2,517,458.57 sUSDe, $3,409,021.04 agETH, $2,226,244.80 rswETH and four other Pendl | 3.1× | 62k | 176 | 59 | 65 |
| 63 | Dec 30, '24 | We have analyzed the latest @FEGtoken hack and the root cause appears to be a composability issue from the integration with the underlying Wormhole bridge for cross-chain message/t | 3.0× | 62k | 230 | 54 | 44 |
| 64 | Dec 2, '21 | Here is the current whereabouts as well as the total loss: $120.3M (with ~2.1k BTC + 151 ETH) @BadgerDAO | 3.0× | 0 | 374 | 104 | 20 |
| 65 | May 22, '25 | .@CetusProtocol on #SUI has been hacked and resulting in >$200M loss. The hacker has bridged the 60M $USDC to #Ethereum | 2.9× | 58k | 172 | 38 | 20 |
| 66 | May 9, '23 | 🚨🚨🚨 We notice the following account is impersonating us! And it is using fake security news to attract your attention and advertise the phishing links. Stay vigilant and do *NOT | 2.9× | 58k | 151 | 46 | 4 |
| 67 | Nov 22, '23 | Our initial analysis indicates the suspicious $86.6m outflow from @HECO_Chain #bridge was from a compromised operator, which was operational since 2022-10-08: Will this be connecte | 2.8× | 56k | 118 | 44 | 14 |
| 68 | Aug 24, '21 | #ScamAlert A bunch of #Scam tokens are identified. Please stay ALERT and do *NOT* Approve on the following phishing sites: ShibaDrop[.]io ($SHIB), AAExchange[.]io ($AAE), BSCTOKEN[ | 2.5× | 0 | 333 | 126 | 5 |
| 69 | Feb 6, '22 | The @Meter_IO is hacked with the loss of $~4.3M (including 1391.24945169 ETH + 2.74068396 BTC). The extension over the original (unaffected) ChainBridge introduces a false deposit | 2.4× | 0 | 326 | 101 | 32 |
| 70 | Oct 27, '21 | 1/4 @CreamdotFinance was exploited in ), leading to the gain of ~$117M for the hacker. | 2.2× | 0 | 290 | 89 | 24 |
| 71 | Apr 2, '22 | 1/ The @InverseFinance is exploited in a flurry of txs (one representative hack: ), leading to the gain of at least 11.7M for the hacker (The protocol loss is much larger). | 2.2× | 0 | 287 | 90 | 37 |
| 72 | Apr 30, '22 | The old reentrancy bug bites again on Compound forks w/ $80M loss! This time, it re-enters via exitMarket()!!! Watch out, all Compound forks in EVM-compliant chains. Get in touch w | 2.2× | 0 | 289 | 68 | 47 |
| 73 | Apr 21, '22 | Interesting. The hacker kills the contract, but forgets to transfer the profit. | 2.2× | 0 | 307 | 44 | 30 |
| 74 | Sep 27, '22 | @timotej13 | 2.1× | 0 | 426 | 33 | 7 |
| 75 | Apr 28, '22 | The @DeusDao was exploited today in with ~$13.4M gain for the hacker (The protocol loss may be larger). | 2.1× | 0 | 231 | 63 | 43 |
| 76 | Aug 12, '21 | @TheDaoMaker hacked for over $7,000,000 USDC -- still under investigation | 2.1× | 0 | 198 | 69 | 8 |
| 77 | Apr 2, '22 | Hi, @InverseFinance, you may want to take a look: | 2.0× | 0 | 288 | 50 | 10 |
| 78 | Oct 6, '22 | Hi, @BNBCHAIN Apparently, two huge reward claims with each claiming 1M BNB and in total ~$586M rewards are claimed from its token hub. () | 1.8× | 0 | 225 | 82 | 11 |
| 79 | Dec 5, '21 | hot wallet compromised? @BitMartExchange | 1.8× | 0 | 230 | 69 | 5 |
| 80 | Aug 10, '21 | 1. #PolyNetwork was exploited on @ethereum @BinanceChain @0xPolygon, loss of ~$611M w/ 2857 ETH, 96.3M USDC, 26KW ETH, 1K WBTC, 33.4M USDT, 259B SHIB, 14 renBTC, 673KDAI, 43KUNI on | 1.7× | 0 | 184 | 73 | 8 |
| 81 | Feb 20, '22 | The @opensea scammer just made use of @TornadoCash to wash 1,100 ETH... | 1.7× | 0 | 284 | 47 | 13 |
| 82 | Jun 16, '22 | 1/ @InverseFinance was exploited in , leading to the gain of ~$1.26M for the hacker (The protocol loss may be larger). | 1.7× | 0 | 197 | 58 | 40 |
| 83 | Oct 27, '21 | #FlashLoanAlert | 1.6× | 0 | 173 | 56 | 11 |
| 84 | Mar 15, '22 | 1/ @deusdao Deus Finance was exploited in , leading to the gain of ~$3M for the hacker (The protocol loss may be larger), including 200,000 DAI and 1101.8 ETH | 1.6× | 0 | 185 | 64 | 24 |
| 85 | Dec 2, '21 | Here is the list of funds that were so far transferred out from victims @BadgerDAO | 1.6× | 0 | 197 | 50 | 15 |
| 86 | Oct 6, '22 | Hi, @BNBCHAIN you may want to take a look: It seems huge $293M rewards are claimed from the token hub. | 1.6× | 0 | 273 | 43 | 5 |
| 87 | Dec 5, '21 | Interesting from @BitMartExchange ...😳😳😳 🙏🙏🙏 | 1.6× | 0 | 190 | 69 | 5 |
| 88 | Jul 11, '22 | Our initial investigation indicates it might be a false positive: They are normal operations on collecting fees and withdrawing the liquidity of positions of 260876 and 264378. | 1.4× | 0 | 190 | 57 | 13 |
| 89 | Aug 30, '21 | 1/4 @CreamFinance was exploited in (one hack tx: ), leading to the gain of ~$18.8M for the hacker. | 1.4× | 0 | 192 | 69 | 10 |
| 90 | Jan 12, '24 | The @Wise_Lending market was exploited today, resulting in ~177 ETH loss (~$464K). Our initial analysis shows the share accounting logic is flawed with a precision issue to drain t | 1.4× | 28k | 129 | 24 | 36 |
| 91 | Mar 20, '22 | #SafeMath# matters!The @UmbNetwork reward pools are drained at both @BNBCHAIN and @ethereum, leading to the ~$700K gain for the hacker! The hack is possible because of an unchecked | 1.4× | 0 | 186 | 56 | 21 |
| 92 | Jul 15, '21 | #scam We have tangible evidences showing the connection between @ZooTokenio and a few previous scams. The ZooToken ($ZOOT) fair launch on @PancakeSwap is 7 hours away (today's 2PM, | 1.4× | 0 | 174 | 64 | 1 |
| 93 | Aug 31, '20 | PeckShield is starting the security audit of $SUSHI smart contracts. #SushiSwap @SushiSwap @NomiChef | 1.3× | 0 | 235 | 46 | 1 |
| 94 | Oct 19, '22 | We've confirmed an active exploit that makes use of huge gas price to game the TransactionRequestCore contract for reward at the cost of original owner. In fact, the exploit pays t | 1.2× | 0 | 165 | 45 | 18 |
| 95 | Oct 21, '21 | This bug is unbelievable ... ! @avaterrafinance | 1.2× | 0 | 181 | 32 | 18 |
| 96 | Oct 24, '22 | Looks like @QuickswapDEX @market_xyz @QiDaoProtocol was exploited on polygon again | 1.1× | 0 | 164 | 32 | 10 |
| 97 | Sep 3, '20 | PeckShield just completed SushiSwap audit with all identified issues confirmed or fixed. No critical or high severity issues related to the business logics; Two high severity opsec | 1.1× | 0 | 168 | 48 | 5 |
| 98 | Aug 2, '22 | PeckShield found that one of the @nomadxyz_ bridge exploiters is @RariCapital (Fuse Arbitrum) exploiter, who gained ~$3m in this exploit. | 1.1× | 0 | 158 | 40 | 15 |
| 99 | Apr 4, '22 | The stolen funds from @Ronin_Network is on the move: | 1.0× | 0 | 167 | 45 | 3 |
| 100 | Sep 8, '21 | #FundReturn @CreamdotFinance hacker just returned 5,152.6 ETH | 1.0× | 0 | 173 | 28 | 4 |
@karpathy
@levelsio
@paulg
@naval
@marclou
@illyism