Hack Database
27 ARTICLESEvery major crypto hack, exploit, and heist. The biggest thefts in digital history, dissected.
Mt. Gox 2011: The Hack Nobody Noticed
The first major crypto exchange hack. $8.75M stolen. BTC crashed to one cent. Nobody learned a thing.
Mt. Gox 2014: 850,000 Bitcoin Vanish Forever
850,000 Bitcoin vanished. The biggest heist in crypto history.
The DAO: The $60M Hack That Split Ethereum in Two
The exploit that split Ethereum in two
Coincheck: Japan's $530 Million Wake-Up Call
$530 million stolen from a hot wallet. In Japan. Again.
Poly Network: The $611M Hack With a Plot Twist
Stole $611 million. Then gave it all back.
Ronin Bridge: North Korea's $625M Payday
North Korea stole $625M from a video game. Nobody noticed for six days.
Wormhole: $320M Stolen, Then Counter-Exploited Back
120,000 ETH minted from thin air. Jump Crypto bailed it out the next day. Then they hacked the hacker to get it back.
The FTX Hack: $477M Vanishes as the Empire Falls
$477M stolen from FTX as the exchange was already dying
Mixin Network: The $200M Cloud Heist
The cloud provider got hacked. $200M walked out the door.
Bybit: The $1.5 Billion Heist That Shook Crypto
The largest crypto hack ever. $1.5 billion. One transaction.
MEV Sandwich Attacks: The Invisible Tax on Every Trade
$220,764 in USDC became $5,271 of USDT in eight seconds. The trader thought stablecoins were safe. The bot knew better.
EIP-7702: Ethereum's Feature That Drains Wallets
Ethereum's Pectra upgrade gave users batch transactions. It gave attackers a way to drain 15,000+ wallets for $12 million in two months.
Bithumb: The $44 Billion Typo That Almost Broke an Exchange
One employee typed 'BTC' instead of 'KRW.' 620,000 ghost Bitcoins appeared. Chaos followed.
Resolv: The $25 Million Stablecoin That Minted Itself to Death
One compromised private key. 80 million unbacked stablecoins minted. $25 million drained. The code worked perfectly. The humans did not.
Drift Protocol: $285M Solana DeFi Exploit
Solana's biggest perps exchange lost $285M in minutes through compromised admin keys.
Drift Protocol Update: North Korea Confirmed, Circle's Six-Hour Silence Exposed
Lazarus Group stole $285M in 12 minutes. Bridged $230M through Circle's CCTP during business hours. Circle did nothing for six hours.
Kelp DAO: The $292M Hack That Broke Restaking
Lazarus Group spoofed a LayerZero message and walked off with 18% of all rsETH. Aave triggered a $9B panic withdrawal. Circle got sued.
Grinex: The 'Hack' That Looked Like an Exit
$13.74M drained across 54 wallets. Grinex blamed hostile foreign intelligence. Chainalysis hinted at a false flag exit scam.
TrustedVolumes: The $6.7M Function Anyone Could Call
A custom RFQ swap proxy let anyone whitelist themselves as an authorized signer. The hacker drained $6.7M, swapped to ETH, and walked.
Echo Protocol: The $77M Admin Key That Minted eBTC
A compromised admin key let an attacker mint 1,000 eBTC worth $77 million on Monad. The hacker borrowed $3.45M in WBTC and laundered $822K through Tornado Cash before Echo burned the rest.
THORChain: The $10.8M Key Leak That Broke the Vault
A freshly churned validator node exploited a flaw in THORChain’s GG20 threshold signature scheme, reconstructing a vault private key and draining $10.8M across Bitcoin, Ethereum, BNB Chain, and Base. 12,847 wallets got hit.
Volo Protocol: The $3.5M Hack That Ended With $60K Lost
Someone stole $3.5 million from Volo Protocol. Volo got almost all of it back. In DeFi, that almost never happens.
Wasabi Protocol: One Key, No Multisig, $5.9M Gone in Three Minutes
Wasabi Protocol had one admin key controlling every vault across four blockchains. No backup. No delay. No protection. Someone got the key.
New Market Trading: The Missing Check That Drained 86 Wallets
86 crypto wallets. Two hours. $3.2 million gone. The code that made it possible was publicly readable on the blockchain the whole time.
StakeDAO: Someone Minted 5.4 Trillion Tokens and Got $91K
On paper, the attacker had $763 billion worth of tokens. In practice, they extracted $91,000. The gap between those two numbers is the whole story.
Rhea Finance: 423 Fake Wallets, Two Days of Prep, $18.4 Million Gone
Someone spent two days building 423 fake wallets before robbing NEAR's biggest DeFi protocol. $18.4 million gone. Half came back. The person who took the other half has never been caught.
Hyperbridge: They Said It Could Not Be Hacked. It Got Hacked.
Hyperbridge joked about being unhackable on April Fools Day. Twelve days later someone minted $1.19 billion in fake tokens on their bridge. The attacker walked away with $237,000. The jokes were deleted. Nobody has been caught.