Crypto Hack Statistics
$5.5B+ Documented Since 2011
Last updated: May 2026
Key Facts
Compiled from CMZ's investigative archive. All figures are verified against on-chain data, official post-mortems, and primary sources. Updated as new incidents occur.
- Total Documented (CMZ Hack Database)
- $5,517,941,000+
- Largest Single Hack
- $1.5B — Bybit (2025)
- Most Active Year
- 2026 — 10 incidents (ongoing)
- Single-Year Record (amount)
- 2022 — $1.422B (3 incidents)
- Most Common Attack Vector
- Private key compromise (40%)
- Total Incidents Documented
- 25 (Hack Database)
- Coverage Period
- 2011 to present
- Total Losses Across All CMZ Sections
- $22B+ (hacks, scams, collapses)
Year-by-Year Breakdown
CMZ-documented losses from the Hack Database. Figures represent verified amounts from on-chain data and official post-mortems.
| Year | Amount Stolen | Incidents | Notable Event |
|---|---|---|---|
| 2011 | $8,750,000 | 1 | Mt. Gox first breach — unnoticed for years |
| 2014 | $473,000,000 | 1 | Mt. Gox collapse. 850,000 BTC gone |
| 2016 | $60,000,000 | 1 | The DAO hack. Forced Ethereum hard fork |
| 2018 | $534,000,000 | 1 | Coincheck. Largest single hack at the time |
| 2021 | $611,000,000 | 1 | Poly Network. Hacker later returned funds |
| 2022 | $1,422,000,000 | 3 | Ronin Bridge + Wormhole + FTX Hack. DeFi's worst year |
| 2023 | $200,000,000 | 1 | Mixin Network cloud database compromise |
| 2025 | $1,500,000,000 | 1 | Bybit. Largest single crypto hack in history |
| 2026 | $709,191,000+ | 10 | KelpDAO, Drift, Echo, THORChain, and more. Year ongoing |
| TOTAL | $5,517,941,000+ | 25 | CMZ Hack Database (2011 - 2026) |
Top 10 Largest Hacks (CMZ Documented)
Ranked by verified stolen amount. Each entry links to CMZ's full investigative report.
| # | Protocol | Year | Amount Stolen | Attack Vector |
|---|---|---|---|---|
| 1 | Bybit | 2025 | $1,500,000,000 | Social engineering / key compromise |
| 2 | Ronin Bridge | 2022 | $625,000,000 | Compromised validator keys (Lazarus) |
| 3 | Poly Network | 2021 | $611,000,000 | Smart contract exploit |
| 4 | Coincheck | 2018 | $534,000,000 | Hot wallet compromise |
| 5 | FTX Hack | 2022 | $477,000,000 | Insider / key compromise |
| 6 | Mt. Gox | 2014 | $473,000,000 | Exchange compromise |
| 7 | Wormhole | 2022 | $320,000,000 | Smart contract exploit |
| 8 | KelpDAO | 2026 | $292,000,000 | Bridge exploit |
| 9 | Drift Protocol | 2026 | $285,000,000 | Smart contract exploit |
| 10 | Mixin Network | 2023 | $200,000,000 | Cloud database compromise |
Attack Vector Breakdown
Distribution of attack methods across CMZ's 25 documented hack incidents.
| Attack Method | Incidents | Share | Examples |
|---|---|---|---|
| Private / Admin Key Compromise | 10 | 40% | Bybit, Echo Protocol, Wasabi, THORChain |
| Smart Contract Exploit | 8 | 32% | Poly Network, Wormhole, The DAO, Drift |
| Exchange / Custodial Compromise | 4 | 16% | Mt. Gox, Coincheck, Mixin Network |
| Social Engineering | 2 | 8% | Bybit (partial), Volo Protocol |
| Code Logic Bug | 1 | 4% | New Market Trading |
2026 Incidents — Live Tracker
2026 is on pace to be the most active year for crypto exploits by incident count. Figures updated as new CMZ investigations are published.
| Protocol | Date | Amount | Method | CMZ Report |
|---|---|---|---|---|
| KelpDAO | Apr 18 | $292,000,000 | Bridge exploit | Read KelpDAO Report → |
| Drift Protocol | Apr 1 | $285,000,000 | Smart contract | Read Drift Protocol Report → |
| Echo Protocol | May 19 | $77,000,000 | Admin key / mint exploit | Read Echo Protocol Report → |
| Resolv | 2026 | $25,000,000 | Stablecoin mint | Read Resolv Report → |
| THORChain | May 15 | $10,800,000 | Key leak | Read THORChain Report → |
| TrustedVolumes | May 8 | $6,700,000 | Function exploit | Read TrustedVolumes Report → |
| Wasabi Protocol | Apr 30 | $5,900,000 | Admin key / no multisig | Read Wasabi Protocol Report → |
| Volo Protocol | Apr 21 | $3,500,000* | Admin key (97% recovered) | Read Volo Protocol Report → |
| New Market Trading | May 25 | $3,200,000 | Missing validation check | Read New Market Trading Report → |
| StakeDAO | May 27 | $91,000 | Key compromise / LayerZero | Read StakeDAO Report → |
| 2026 TOTAL | Ongoing | $709,191,000+ | 10 incidents |
* Volo Protocol recovered $3.44M of $3.5M stolen. Net loss approximately $60,000.
About This Data
All figures on this page are sourced from CMZ's investigative reports, which are verified against on-chain transaction data, official protocol post-mortems, regulatory filings, and credible security firm reports (Blockaid, CertiK, TRM Labs, PeckShield, ZachXBT).
This page covers CMZ's Hack Database only. CMZ's broader coverage across 15 sections documents over $22 billion in total losses including exchange collapses (FTX, Celsius, Voyager), scams (OneCoin, BitConnect), and market crashes (LUNA/Terra).
CMZ publishes new hack investigations within days of major incidents. The 2026 tracker above is updated continuously.
Citing This Data
Journalists and researchers are welcome to use these figures with attribution. Preferred citation format:
For tips, corrections, or new incident submissions: editor@cryptomediazone.com
Full Investigative Archive
Every entry above links to CMZ's full report with timeline, key figures, on-chain evidence, and aftermath.