Documenting the Attacks on Decentralized Finance, where the term "Post-Mortem" is a unfortunate norm
** No Rug Pulls & Scams Included
** Exploited/Lost calculates the lost value based on exchange rate at the time. Many times, the loss is presented in USD value since multiple tokens are lost.
** Any Loss over $10 million or 5000 ETH is bolded (calculated at $2000 per ETH)
** Some Post-Mortems are taken down after being released, so the links may not always work (in such case, use Wayback).
Last Update: Aug 30, 2021
Date | Targeted Protocol | Exploited/Lost | Post-Mortem | Analysis | Audited? |
---|---|---|---|---|---|
—— | [END OF 2021] | —— | —— | —— | |
TOTAL LOSS (so far) | *~ $720 mln* + $300 mln Venus |
||||
—— | [Aug 2021] | —— | —— | —— | |
30th | Cream Finance | $18.8 mln | Trail of Bits | ||
13th | Punk Protocol | $8.9 mln | Official | Halborn | No |
12th | DAO Maker | 2261 ETH ($7 mln) | Official | Symbolic | |
10th | Poly Network | (2858 ETH & 6610 BNB) |
Official Twitter | (Doxxed, returned) | No |
4th | Popsicle Finance | $25 mln | Official | Flash Loan | Certik |
TOTAL $41 mln | |||||
—— | [Jul 2021] | —— | —— | —— | |
22nd | THORChain (2nd) | $800k ($8 mln hacked, white hacker 10%) |
Official Twitter | Certik | |
16th | PancakeBunny (2nd) | $2.1 mln | Official | Haechi | |
15th | BONDLY (MantraDAO) | $22 mln | Official | Zokyo, Trustlook | |
THORChain | $5 mln (4000 ETH - slippage) | Certik | |||
11th | ChainSwap (2nd) | $4 mln | Official | No | |
10th | AnySwap | $7.9 mln | Official | SlowMist | |
2nd | ChainSwap (1st) | $800k | Official | No | |
TOTAL $40 mln | |||||
—— | [Jun 2021] | —— | —— | —— | |
29th | Merlin Labs (3th) | $330k [total $1.6 mln] |
gone? | PeckShield, rekt | |
28th | SafeDollar | $250k | Official | ||
23th | Eleven Finance (NRV) | $4.5 mln | Official | ||
21st | Impossible Finance | $500k | Official | Knownsec | |
19th | Visor Finance | $500k | Official | ||
3rd | PancakeHunny | $86k | Official | ||
TOTAL $6 mln | |||||
—— | [May 2021] | —— | —— | —— | |
30th | Belt Finance | $50 mln | Official | Knownsec, rekt | |
28th | Burgerswap | $7.2 mln | Decrypt | ||
JulSwap | $700k | Official | |||
27th | Merlin Labs (2nd) | 200+ ETH | rekt | ||
26th | Merlin Labs (1st) | $680k | Official | rekt | |
24th | Bogged Finance | $3.6 mln | Peckshield | ||
20th | PancakeBunny | $45 mln | Official | cmichel | |
19th | Venus Protocol | $200 mln liquidated + $100 mln bad loan |
Official | Igamberdiev | |
16th | VaultSX | $13.5 mln | Official | cmichel | |
bVaults (bEarn) | $11 mln | Official | |||
12th | xBNTa & xSNXa (xToken) | $24.5 mln | Official | ||
8th | Rari Capital | 2600 ETH | Official | ||
7th | Value DeFi [2nd] | $10 mln | Official | rekt | |
5th | Value DeFi [3rd] | $11 mln [total $28mln] |
gave up? | rekt | |
2nd | Spartan Protocol | $40+ mln | Official | rekt | |
TOTAL $233 mln + $300 mln Venus |
|||||
—— | [Apr 2021] | —— | —— | —— | |
28th | Uranium Finance | $50 mln | Official (Wayback) | CertiK | |
20th | EasyFi | $80 mln | Official (Wayback) | Halborn | |
5th | Polkatrian | $3 mln | Official Response | ||
4th | xFORCE (Force DAO) | 183 ETH (+ white hack) | Official | ||
TOTAL $133 mln | |||||
—— | [Mar 2021] | —— | —— | —— | |
14th | Social Money (Roll) | 2857 ETH | rekt | ||
9th | DODO Pool | $3.8 mln | Official | ||
5th | PAID Network | $160 mln | Official | Halborn | |
TOTAL $170 mln | |||||
—— | [Feb 2021] | —— | —— | —— | |
27th | Furucombo | $15 mln | Official | ||
13th | Alpha Homora (Cream Finance) |
$37.5 mln | Official | ||
8th | BT Finance | $1.7 mln | Official | ||
Growth DeFi (rAAVE) | $1.3 mln | Official | rekt | ||
4th | Yearn (v1 yDAI) | 11 mln DAI | Official | ||
TOTAL $66.5 mln | |||||
—— | [Jan 2021] | —— | —— | —— | |
19th | Saddle Finance | 7.9 BTC (slippage) | Official | rekt | |
2th | yCredit Finance | $11 mln | BlockSec, banteng | ||
TOTAL $11 mln | |||||
—— | [END OF 2020] | —— | —— | —— | |
TOTAL LOSS | ~ $158 mln + $103 mln Compound |
||||
—— | [Dec 2020] | —— | —— | —— | |
28th | Cover Protocol | $5 mln + more | Official | ||
17th | Warp Finance | $7.7 mln | Official | SlowMist | |
TOTAL $13.7 mln | |||||
—— | [Nov 2020] | —— | —— | —— | |
30th | SushiSwap | $150k | SlowMist | ||
27th | Compound | $103 mln liquidated | Bitcoin.com | ||
22th | Pickle Finance | $19 mln | Official | Banteg, rekt | |
17th | Origin Protocol (OUSD) | $7 mln | Official | ||
14th | Value DeFi [1st] | $7 mln | Official | rekt | |
12th | Akropolis | 2 mln DAI | Official | ||
TOTAL $35.1 mln + $103 mln Compound |
|||||
—— | [Oct 2020] | —— | —— | —— | |
26th | Harvest Finance | $33.8 mln | Official | TheBlock | |
TOTAL $33.8 mln | |||||
—— | [Sep 2020] | —— | —— | —— | |
29th | Eminence Finance | $15 mln | rekt | ||
15th | iToken (bZx) | $8.1 mln (returned) | Official | ||
11th | SushiSwap | $13.8 mln (price crash) | Chef Nomi | ZDNet | |
?? | SYFI | $300k | |||
TOTAL $29 mln | |||||
—— | [Aug 2020] | —— | —— | —— | |
30th | Chainlink | 700 ETH (spam attack) | CryptoBriefing | ||
10th | Opyn Protocol | $370k | Official | PeckShield | |
TOTAL $1.8 mln | |||||
—— | [Jun 2020] | —— | —— | —— | |
28th | Balancer Protocol | $500k | Official | ||
TOTAL $0.5 mln | |||||
—— | [Apr 2020] | —— | —— | —— | |
18th | LendF.me | $25 mln | PeckShield | ||
imBTC Uniswap Pool | $300k | pNetwork, DeFi Rate | |||
TOTAL $25.3 mln | |||||
—— | [Mar 2020] | —— | —— | —— | |
12th | MakerDAO | $9 mln | Official | Blocknative | |
TOTAL $9 mln | |||||
—— | [Feb 2020] | —— | —— | —— | |
17th | bZx | 4698.02 ETH | Official | PeckShield, palkeo | |
TOTAL $9.4 mln | |||||
—— | [END OF 2019] | —— | —— | —— | |
TOTAL LOSS | ~ $2.5 mln | ||||
—— | [Dec 2019] | —— | —— | —— | |
26th | Synthetix | $2.5 mln | TheBlock | ||
TOTAL $2.5 mln | |||||
—— | [Jun 2019] | —— | —— | —— | |
24th | Synthetix | 37 mln sETH ($74 bln @ $2,000/sETH) |
TheBlock, Etherscan | ||
TOTAL $74 bln |
Date | Targeted Protocol | Exploited/Lost | Post-Mortem | Analysis | Note |
---|---|---|---|---|---|
[Jun 2021] | |||||
21st | Alchemix | $6.5 mln | Official 1, Official 2 | SlowMist, rekt | Reward calcultion error, users received more |
16th | Iron Finance & TITAN | $2 bln (+ Mark Cuban) |
Official | rekt, Jeiwan | Bank-run |
[Feb 2020] | |||||
27th | Andre Cronje of yearn.finance | $562k | Andre Cronje |
Similar compilation: OpenBlockSec; OpenZeppelin Post-Mortems; rekt.news; Halborn
Interesting Hack Loss Leaderboard (from rekt.news)