Over $610 million in crypto was stolen in the last 12 months.
How exposed is your portfolio?

Attackers exploited a single point of trust in the cross-chain messaging infrastructure used by a major liquid-staking protocol, minting unbacked tokens and draining hundreds of millions in collateral.

Attackers used AI-driven social engineering in a long-running campaign to steal roughly $100K from the wallet provider's hot wallets — an early example of AI-augmented phishing succeeding against a security-aware team.

A decentralized trading platform was drained of roughly $280M in an exploit linked to North Korean threat actors.

An off-chain service holding a privileged private key was compromised, letting an attacker mint $25M of unbacked stablecoins.

An integer boundary bug in cross-chain message handling let an attacker manipulate transferred values and extract $7M.

Source-chain event leakage enabled MEV bots to sandwich cross-chain transactions on the destination chain, extracting $5.27M from users.

A flaw in a staking contract let an attacker repeatedly call back into it mid-transaction and drain $27M in ETH from the DeFi protocol.

A flash loan was used to manipulate the price of an asset within the protocol, letting the attacker artificially inflate collateral and extract funds.

Attackers used a flash loan to exploit logic flaws in the lending platform and steal roughly $13M in ETH.

An attacker chained flash loans with collateral-calculation flaws to drain $197M from a major lending protocol — funds were later largely returned after negotiation.

A flaw in a token-swap function let an attacker repeatedly re-enter the contract and drain liquidity from the trading platform.

Attackers gained access to an admin's private keys and drained the cross-chain swap service of $1.4M.

An exploit in the cross-chain bridge let attackers mint roughly $100M in unauthorized tokens; the chain itself was paused as an emergency response.

An internal bug in a swap contract on a multichain DEX aggregator let attackers steal $21M; partial recovery followed.

An attacker took a massive flash loan to gain a supermajority of governance votes and instantly passed a proposal that drained $182M from the protocol's treasury.

96 user private keys were stolen from a crypto gaming ecosystem, allowing the attacker to drain $140M from affected wallets.

Attackers compromised the protocol's frontend to inject malicious approval requests, draining roughly $120M from users who unknowingly signed away wallet permissions.

Flash-loan-driven price manipulation on the lending protocol's collateral price feed let an attacker borrow $130M against artificially inflated collateral.

An attacker used a series of flash loans to manipulate the protocol's pricing logic and mint massive quantities of the native token, dumping it for $45M.

$60M was drained from the first major on-chain investment fund, forcing the Ethereum chain to split. Historical, but still the canonical case study.