Every major crypto hack, documented & tracked

$9.4M

A disguised 'AI governance experiment' proposal (Proposal 9) carried 11 MsgUpdateAdmin messages that reassigned admin of live Astroport and Drop contracts on Neutron. The attacker bought 31.6M NTRN and delegated it 11 minutes before voting closed; ~$9.4M was drained, and Cosmos Hub validators halted ~25 hours to contain ~$2.1M in ATOM.

$16.8M

A single attacker used compromised off-chain signing and mint keys to drain 8.72M FET (~$1.55M) and mint 408.53M NTX, 260M AGIX and 53.838M WMTx across the Fetch.ai/SingularityNET/NuNet/World Mobile cluster, with ~$16.77M held by the attacker.

$3.5M

An attacker created a fake NSTR/SolvBTC pool, wash-traded it, and hijacked GeckoTerminal's pool-selection logic to print NSTR at ~$49.5 (an ~8,000x pump), then borrowed ~$3.5M from Nostra Finance on Starknet. Nostra fully paused supply, borrow, withdrawal and liquidation.

$580K

SlowMist and the OKX security team found two malicious modules in FomoPeek versions 1.1 and 1.2 distributed through the official Apple App Store, including an iOS kernel exploitation framework covering iOS 12.0-18.7.2 and 26.0-26.1. The attacker's primary address received ~579,984 USDT.

$7.7M

An Ethereum Gnosis Safe wallet lost ~$7.73M (~2,900 rsETH) after an attacker used a public keeper multicall to route the wallet's custom Uniswap v4 liquidity module into an attacker-controlled hooked pool. An MEV bot named 'Yoink' front-ran the attacker and captured the rsETH; Kelp DAO placed the receiving address under a 24-hour pause.

$336K

Two flaws in Symbiosis's BridgeV2 contract let an attacker mint ~46.1B fake syBTC (>2,000x Bitcoin's max supply) from 12 bogus deposits in ~4 minutes, though only ~4.39 WBTC (~$336K) was sold. Symbiosis recovered ~15 BTC (~$1.15M) and offered a 20% white-hat bounty.

$170K

Cozy Finance suffered a sustained attack on its Optimism deployment, with ~163K USDC.e drained and bridged out (~$170K).

$320.0M

Blockstream's Liquid Network Bitcoin sidechain federation wallet was drained of ~$320M (~4,000 BTC) via the SideSwap Peg-out Authorization Key (PAK) mechanism / an Elements node software bug, with purported white-hat actors involved. The network was paused and exchanges halted L-BTC deposits and withdrawals. On September 7, 2026, ~3,400 BTC (~$272M) was returned, leaving ~602 BTC (~$47M) still outstanding.