Skip to content

Latest commit

 

History

History
166 lines (140 loc) · 40.2 KB

README.md

File metadata and controls

166 lines (140 loc) · 40.2 KB

All the Gutted DeFi Projects

Documenting the Attacks on Decentralized Finance, where the term "Post-Mortem" is a unfortunate norm

Table of Content

** No Rug Pulls & Scams Included

** Exploited/Lost calculates the lost value based on exchange rate at the time. Many times, the loss is presented in USD value since multiple tokens are lost.

** Any Loss over $10 million or 5000 ETH is bolded (calculated at $2000 per ETH)

** Some Post-Mortems are taken down after being released, so the links may not always work (in such case, use Wayback).

DeFi Attacks

Last Update: Aug 30, 2021

Date Targeted Protocol Exploited/Lost Post-Mortem Analysis Audited?
—— [END OF 2021] —— —— ——
TOTAL LOSS (so far) *~ $720 mln*
+ $300 mln Venus
—— [Aug 2021] —— —— ——
30th Cream Finance $18.8 mln Trail of Bits
13th Punk Protocol $8.9 mln Official Halborn No
12th DAO Maker 2261 ETH ($7 mln) Official Symbolic
10th Poly Network $600 mln
(2858 ETH & 6610 BNB)
Official Twitter (Doxxed, returned) No
4th Popsicle Finance $25 mln Official Flash Loan Certik
TOTAL $41 mln
—— [Jul 2021] —— —— ——
22nd THORChain (2nd) $800k ($8 mln hacked,
white hacker 10%)
Official Twitter Certik
16th PancakeBunny (2nd) $2.1 mln Official Haechi
15th BONDLY (MantraDAO) $22 mln Official Zokyo, Trustlook
THORChain $5 mln (4000 ETH - slippage) Twitter Certik
11th ChainSwap (2nd) $4 mln Official No
10th AnySwap $7.9 mln Official SlowMist
2nd ChainSwap (1st) $800k Official No
TOTAL $40 mln
—— [Jun 2021] —— —— ——
29th Merlin Labs (3th) $330k
[total $1.6 mln]
gone? PeckShield, rekt
28th SafeDollar $250k Official
23th Eleven Finance (NRV) $4.5 mln Official
21st Impossible Finance $500k Official Knownsec
19th Visor Finance $500k Official
3rd PancakeHunny $86k Official
TOTAL $6 mln
—— [May 2021] —— —— ——
30th Belt Finance $50 mln Official Knownsec, rekt
28th Burgerswap $7.2 mln Decrypt
JulSwap $700k Official
27th Merlin Labs (2nd) 200+ ETH rekt
26th Merlin Labs (1st) $680k Official rekt
24th Bogged Finance $3.6 mln Peckshield
20th PancakeBunny $45 mln Official cmichel
19th Venus Protocol $200 mln liquidated
+ $100 mln bad loan
Official Igamberdiev
16th VaultSX $13.5 mln Official cmichel
bVaults (bEarn) $11 mln Official
12th xBNTa & xSNXa (xToken) $24.5 mln Official
8th Rari Capital 2600 ETH Official
7th Value DeFi [2nd] $10 mln Official rekt
5th Value DeFi [3rd] $11 mln
[total $28mln]
gave up? rekt
2nd Spartan Protocol $40+ mln Official rekt
TOTAL $233 mln
+ $300 mln Venus
—— [Apr 2021] —— —— ——
28th Uranium Finance $50 mln Official (Wayback) CertiK
20th EasyFi $80 mln Official (Wayback) Halborn
5th Polkatrian $3 mln Official Response
4th xFORCE (Force DAO) 183 ETH (+ white hack) Official
TOTAL $133 mln
—— [Mar 2021] —— —— ——
14th Social Money (Roll) 2857 ETH rekt
9th DODO Pool $3.8 mln Official
5th PAID Network $160 mln Official Halborn
TOTAL $170 mln
—— [Feb 2021] —— —— ——
27th Furucombo $15 mln Official
13th Alpha Homora
(Cream Finance)
$37.5 mln Official
8th BT Finance $1.7 mln Official
Growth DeFi (rAAVE) $1.3 mln Official rekt
4th Yearn (v1 yDAI) 11 mln DAI Official
TOTAL $66.5 mln
—— [Jan 2021] —— —— ——
19th Saddle Finance 7.9 BTC (slippage) Official rekt
2th yCredit Finance $11 mln BlockSec, banteng
TOTAL $11 mln
—— [END OF 2020] —— —— ——
TOTAL LOSS ~ $158 mln
+ $103 mln Compound
—— [Dec 2020] —— —— ——
28th Cover Protocol $5 mln + more Official
17th Warp Finance $7.7 mln Official SlowMist
TOTAL $13.7 mln
—— [Nov 2020] —— —— ——
30th SushiSwap $150k SlowMist
27th Compound $103 mln liquidated Bitcoin.com
22th Pickle Finance $19 mln Official Banteg, rekt
17th Origin Protocol (OUSD) $7 mln Official
14th Value DeFi [1st] $7 mln Official rekt
12th Akropolis 2 mln DAI Official
TOTAL $35.1 mln
+ $103 mln Compound
—— [Oct 2020] —— —— ——
26th Harvest Finance $33.8 mln Official TheBlock
TOTAL $33.8 mln
—— [Sep 2020] —— —— ——
29th Eminence Finance $15 mln rekt
15th iToken (bZx) $8.1 mln (returned) Official
11th SushiSwap $13.8 mln (price crash) Chef Nomi ZDNet
?? SYFI $300k
TOTAL $29 mln
—— [Aug 2020] —— —— ——
30th Chainlink 700 ETH (spam attack) CryptoBriefing
10th Opyn Protocol $370k Official PeckShield
TOTAL $1.8 mln
—— [Jun 2020] —— —— ——
28th Balancer Protocol $500k Official
TOTAL $0.5 mln
—— [Apr 2020] —— —— ——
18th LendF.me $25 mln PeckShield
imBTC Uniswap Pool $300k pNetwork, DeFi Rate
TOTAL $25.3 mln
—— [Mar 2020] —— —— ——
12th MakerDAO $9 mln Official Blocknative
TOTAL $9 mln
—— [Feb 2020] —— —— ——
17th bZx 4698.02 ETH Official PeckShield, palkeo
TOTAL $9.4 mln
—— [END OF 2019] —— —— ——
TOTAL LOSS ~ $2.5 mln
—— [Dec 2019] —— —— ——
26th Synthetix $2.5 mln TheBlock
TOTAL $2.5 mln
—— [Jun 2019] —— —— ——
24th Synthetix 37 mln sETH
($74 bln @ $2,000/sETH)
TheBlock, Etherscan
TOTAL $74 bln

Miscellaneous

Date Targeted Protocol Exploited/Lost Post-Mortem Analysis Note
[Jun 2021]
21st Alchemix $6.5 mln Official 1, Official 2 SlowMist, rekt Reward calcultion error,
users received more
16th Iron Finance & TITAN $2 bln
(+ Mark Cuban)
Official rekt, Jeiwan Bank-run
[Feb 2020]
27th Andre Cronje of yearn.finance $562k Andre Cronje

Other Resources

Similar compilation: OpenBlockSec; OpenZeppelin Post-Mortems; rekt.news; Halborn

Interesting Hack Loss Leaderboard (from rekt.news)