Ledger All ledgers
Crypto failures in 2025
148 crypto hacks, exploits and thefts in 2025, with $2.72bn in known losses.
$2.72bn lost across 148 incidents
The largest crypto hack of 2025 was Bybit, at $1.40bn. $1.45bn is recorded as returned or repaid.
Jan
$1.48bnFeb
Mar
Apr
May
Jun
Jul
Aug
Sept
Oct
Nov
Dec
| Date | Target | Lost | Type | Method | Returned |
|---|---|---|---|---|---|
| 30 Dec 2025 | Unleash Protocol | $3.9m | DeFi Protocol | Private Key Compromised | — |
| 28 Dec 2025 | MSCST | $129,900 | DeFi Protocol | Improper Access Control | — |
| 27 Dec 2025 | Flow | $3.9m | Layer 1 | Infinite Mint | — |
| 26 Dec 2025 | FilDA | $166,800 | DeFi Protocol | Spot Price Manipulation | — |
| 25 Dec 2025 | Trust Wallet Wallet | $8.5m | Wallet | Supply Chain Attack | — |
| 18 Dec 2025 | Rari Capital | $2.0m | DeFi Protocol | Uninitialized Proxy | — |
| 16 Dec 2025 | Yearn Finance | $300,000 | DeFi Protocol | Donation Attack | — |
| 16 Dec 2025 | FutureSwap | $270,000 | DeFi Protocol | Flashloan Governance Attack | — |
| 14 Dec 2025 | Mars Perps | $960,000 | DeFi Protocol | Funding Rate Arbitrage | — |
| 12 Dec 2025 | ZEROBASE | $250,000 | DeFi Protocol | Token Approval Abuse | — |
| 12 Dec 2025 | Ribbon | $2.7m | DeFi Protocol | Improper Access Control | — |
| 11 Dec 2025 | 0G Labs | $516,000 | DeFi Protocol | Withdrawal Logic Flaw | — |
| 04 Dec 2025 | US Permissionless Dollar | $1.0m | DeFi Protocol | Proxy Upgrade Hijack | — |
| 02 Dec 2025 | Goldfinch | $330,000 | DeFi Protocol | Token Approval Abuse | — |
| 30 Nov 2025 | Yearn Ether | $9.0m | DeFi Protocol | Incorrect Share Accounting | — |
| 26 Nov 2025 | Upbit | $36.0m | CEX | Malware | — |
| 24 Nov 2025 | Agentic FoF | $531,000 | DeFi Protocol | Protocol Logic | — |
| 23 Nov 2025 | Port3 Network | $166,000 | DeFi Protocol | Infinite Mint | — |
| 22 Nov 2025 | Raga Finance | $18,500 | DeFi Protocol | Protocol Logic | — |
| 21 Nov 2025 | Aerodrome V1 | $700,000 | DeFi Protocol | DNS Hijack | — |
| 20 Nov 2025 | GANA Payment | $3.1m | DeFi Protocol | Phishing | — |
| 20 Nov 2025 | Dexmax AI | $130,000 | Token | Token Approval Abuse | — |
| 11 Nov 2025 | Impermax V3 | $380,000 | DeFi Protocol | Liquidation Logic Flaw | — |
| 11 Nov 2025 | Polymarket | $500,000 | DeFi Protocol | Phishing | — |
| 10 Nov 2025 | DRLVaultV3 | $100,000 | DeFi Protocol | Spot Price Manipulation | — |
| 07 Nov 2025 | DIMO | $40,000 | DeFi Protocol | Deployer Key Compromised | — |
| 04 Nov 2025 | Moonwell Lending | $1.0m | DeFi Protocol | Spot Price Manipulation | — |
| 03 Nov 2025 | Balancer V2 | $128.0m | DeFi Protocol | Rounding Error | — |
| 30 Oct 2025 | Garden | $11.4m | DeFi Protocol | Key Leaked via Infrastructure | — |
| 27 Oct 2025 | 402bridge | $17,693 | DeFi Protocol | Key Stored Publicly | — |
| 21 Oct 2025 | DoodiPals | $171,000 | Token | Private Key Compromised | — |
| 20 Oct 2025 | Sharwa.Finance | $146,000 | DeFi Protocol | Swap Logic Flaw | — |
| 19 Oct 2025 | Astra Nova | $9.1m | AI Agent | Private Key Compromised | — |
| 15 Oct 2025 | Typus Perp | $3.4m | DeFi Protocol | Oracle Misconfiguration | — |
| 09 Oct 2025 | Astera.fi | $573,000 | DeFi Protocol | Incorrect Share Accounting | — |
| 07 Oct 2025 | TokenHolder | $26,000 | Token | Improper Access Control | — |
| 04 Oct 2025 | Abracadabra Spell | $1.7m | DeFi Protocol | Improper Access Control | — |
| 28 Sept 2025 | dTRINITY | $56,000 | DeFi Protocol | Improper Access Control | — |
| 27 Sept 2025 | Hyperdrive HL Lending | $782,000 | DeFi Protocol | Arbitrary External Call | — |
| 26 Sept 2025 | HyperVault | $3.6m | DeFi Protocol | Admin Drain | — |
| 24 Sept 2025 | GriffinAI | $3.0m | DeFi Protocol | Cross-Chain Message Spoofing | — |
| 24 Sept 2025 | SBI Crypto | $21.0m | Other | Hot Wallet Key Compromised | — |
| 23 Sept 2025 | Seedify | $1.2m | DeFi Protocol | Private Key Compromised | — |
| 23 Sept 2025 | Corepound | $400,000 | DeFi Protocol | Admin Drain | — |
| 22 Sept 2025 | UXLINK | $11.3m | DeFi Protocol | Delegatecall Hijack | — |
| 18 Sept 2025 | New Gold Protocol | $1.9m | Token | Spot Price Manipulation | — |
| 14 Sept 2025 | Yala | $7.6m | Token | Deployer Key Compromised | — |
| 13 Sept 2025 | Shibarium | $4.1m | DeFi Protocol | Validator Key Compromised | — |
| 12 Sept 2025 | Kame Aggregator | $1.3m | DeFi Protocol | Swap Logic Flaw | — |
| 10 Sept 2025 | Evoq Finance | $420,000 | DeFi Protocol | Private Key Compromised | — |
| 09 Sept 2025 | SwissBorg | $41.5m | CEX | API Key Compromised | — |
| 08 Sept 2025 | Nemo Yield Trading | $2.6m | DeFi Protocol | Improper Access Control | — |
| 02 Sept 2025 | Bunni V2 | $8.4m | DeFi Protocol | Rounding Error | — |
| 01 Sept 2025 | OlaXBT | $2.0m | DeFi Protocol | Signer Phishing | — |
| 30 Aug 2025 | Cozy V2 | $427,000 | DeFi Protocol | Missing Input Validation | — |
| 26 Aug 2025 | BetterBank | $5.0m | DeFi Protocol | Reward Logic Flaw | — |
| 25 Aug 2025 | Panoptic V1.1 | $0 | DeFi Protocol | Hash Collision | — |
| 14 Aug 2025 | BtcTurk | $48.0m | CEX | Hot Wallet Key Compromised | — |
| 13 Aug 2025 | Grizzifi | $61,000 | DeFi Protocol | Reward Logic Flaw | — |
| 13 Aug 2025 | Coinbase | $300,000 | CEX | Token Approval Abuse | — |
| 12 Aug 2025 | Odin.Fun | $7.0m | DeFi Protocol | Spot Price Manipulation | — |
| 10 Aug 2025 | numa. | $313,000 | DeFi Protocol | Incorrect Share Accounting | — |
| 04 Aug 2025 | CrediX | $4.5m | DeFi Protocol | Private Key Compromised | — |
| 28 Jul 2025 | SuperRare | $730,000 | DeFi Protocol | Merkle Proof Forgery | — |
| 24 Jul 2025 | WOO X | $14.0m | CEX | Phishing | — |
| 20 Jul 2025 | Stepp2p | $43,000 | DeFi Protocol | Protocol Logic | — |
| 19 Jul 2025 | CoinDCX | $44.2m | CEX | Hot Wallet Key Compromised | — |
| 16 Jul 2025 | BigONE | $27.0m | CEX | Supply Chain Attack | — |
| 15 Jul 2025 | Arcadia V2 | $2.5m | DeFi Protocol | Reentrancy | — |
| 10 Jul 2025 | Kinto Bridge | $1.6m | DeFi Protocol | Uninitialized Proxy | — |
| 09 Jul 2025 | GMX V1 EVM | $42.0m | DeFi Protocol | Reentrancy | $40.0m |
| 09 Jul 2025 | Texture | $2.2m | DeFi Protocol | Improper Access Control | — |
| 09 Jul 2025 | ZKSwap | $5.0m | DeFi Protocol | Forged Proof | — |
| 08 Jul 2025 | Peapods Finance | $207,000 | DeFi Protocol | Oracle Misconfiguration | — |
| 05 Jul 2025 | RANT | $204,000 | Token | Incorrect Fee Accounting | — |
| 02 Jul 2025 | Future Protocol | $4.6m | DeFi Protocol | Incorrect Share Accounting | — |
| 25 Jun 2025 | Resupply | $9.6m | DeFi Protocol | Donation Attack | — |
| 25 Jun 2025 | Silo Finance | $546,000 | DeFi Protocol | Missing Input Validation | — |
| 20 Jun 2025 | Hacken Token | $250,000 | Other | Private Key Compromised | — |
| 19 Jun 2025 | Bankroll Network | $65,000 | DeFi Protocol | Arithmetic Error | — |
| 18 Jun 2025 | Nobitex | $82.0m | CEX | Malware | — |
| 17 Jun 2025 | Meta Pool | $130,000 | DeFi Protocol | Infinite Mint | — |
| 15 Jun 2025 | FixedTokenBSwap | $2,200 | DeFi Protocol | Spot Price Manipulation | — |
| 06 Jun 2025 | ALEX | $8.4m | DeFi Protocol | Caller Impersonation | — |
| 06 Jun 2025 | ForceBridge | $3.9m | DeFi Protocol | Improper Access Control | — |
| 28 May 2025 | Cork V1 | $12.0m | DeFi Protocol | Improper Access Control | — |
| 27 May 2025 | Usual USD0 | $43,000 | DeFi Protocol | Missing Input Validation | — |
| 26 May 2025 | Dexodus Finance | $300,000 | DeFi Protocol | Stale Oracle Price | $300,000 |
| 22 May 2025 | Cetus CLMM | $223.0m | DeFi Protocol | Arithmetic Error | — |
| 20 May 2025 | IRYS AI | $69,600 | Token | Backdoor Contract | — |
| 16 May 2025 | Demex | $950,559 | DeFi Protocol | Spot Price Manipulation | — |
| 15 May 2025 | Zunami Protocol | $500,000 | DeFi Protocol | Private Key Compromised | — |
| 11 May 2025 | Mobius Token | $2.1m | DeFi Protocol | Decimal Miscalculation | — |
| 09 May 2025 | LND | $1.2m | DeFi Protocol | Improper Access Control | — |
| 08 May 2025 | BitoPro | $11.5m | CEX | Key Leaked via Infrastructure | — |
| 27 Apr 2025 | QuantMaster | $100,000 | DeFi Protocol | Backdoor Contract | — |
| 27 Apr 2025 | Aventa | $7,000 | DeFi Protocol | Protocol Logic | — |
| 26 Apr 2025 | Term Finance | $1.6m | DeFi Protocol | Oracle Misconfiguration | — |
| 26 Apr 2025 | Loopscale | $5.8m | DeFi Protocol | Spot Price Manipulation | — |
| 26 Apr 2025 | Impermax V3 | $300,000 | DeFi Protocol | Incorrect Fee Accounting | — |
| 24 Apr 2025 | ACB | $22,804 | DeFi Protocol | Spot Price Manipulation | — |
| 22 Apr 2025 | Bitcoin Mission | $1.3m | DeFi Protocol | Improper Access Control | — |
| 20 Apr 2025 | Bitget | $100.0m | CEX | Market Maker Bot Exploited | — |
| 18 Apr 2025 | Numa | $506,000 | DeFi Protocol | Spot Price Manipulation | — |
| 16 Apr 2025 | R0AR | $780,000 | DeFi Protocol | Improper Access Control | — |
| 15 Apr 2025 | ZKsync | $5.0m | Other | Private Key Compromised | — |
| 14 Apr 2025 | KiloEx | $7.5m | DeFi Protocol | Spot Price Manipulation | $6.8m |
| 07 Apr 2025 | Tenderize V2 | $10,850 | DeFi Protocol | Protocol Logic | — |
| 04 Apr 2025 | AIRWA | $33,600 | DeFi Protocol | Improper Access Control | — |
| 01 Apr 2025 | Zapper | — | DeFi Protocol | DNS Hijack | — |
| 01 Apr 2025 | UPCX | $70.0m | DeFi Protocol | Proxy Upgrade Hijack | — |
| 30 Mar 2025 | SIR | $355,000 | DeFi Protocol | Proxy Upgrade Hijack | — |
| 29 Mar 2025 | Venus Core Pool | $902,000 | DeFi Protocol | Donation Attack | — |
| 28 Mar 2025 | Alkimiya | $95,500 | DeFi Protocol | Arithmetic Error | — |
| 27 Mar 2025 | Vicuna Lending | $700,000 | DeFi Protocol | Spot Price Manipulation | — |
| 25 Mar 2025 | Abracadabra Spell | $13.0m | DeFi Protocol | Liquidation Logic Flaw | — |
| 21 Mar 2025 | Zoth ZeUSD | $8.8m | DeFi Protocol | Private Key Compromised | — |
| 20 Mar 2025 | BBXToken | $12,000 | Token | Spot Price Manipulation | — |
| 18 Mar 2025 | four.meme | $80,000 | DeFi Protocol | Improper Access Control | — |
| 18 Mar 2025 | Voltage V3 | $322,113 | DeFi Protocol | Improper Access Control | — |
| 16 Mar 2025 | WebKeyDAO | $73,000 | Token | Improper Access Control | — |
| 14 Mar 2025 | Berally | $90,000 | DeFi Protocol | Deployer Key Compromised | — |
| 07 Mar 2025 | 1inch Swap | $5.0m | DeFi Protocol | Arbitrary External Call | — |
| 05 Mar 2025 | Pond.fun | $145,000 | DeFi Protocol | Admin Drain | — |
| 01 Mar 2025 | Hegic(old contract) | $80,000 | DeFi Protocol | Withdrawal Logic Flaw | — |
| 01 Mar 2025 | Zoth ZeUSD | $285,000 | DeFi Protocol | Swap Logic Flaw | — |
| 28 Feb 2025 | Wemix | $6.2m | DeFi Protocol | Private Key Compromised | — |
| 24 Feb 2025 | Infini | $49.5m | DeFi Protocol | Private Key Compromised | — |
| 22 Feb 2025 | Unverified_35bc | $6,700 | DeFi Protocol | Reentrancy | — |
| 21 Feb 2025 | StepHeroNFTs | $90,000 | DeFi Protocol | Reentrancy | — |
| 21 Feb 2025 | Bybit | $1.40bn | CEX | Signer Phishing | $1.40bn |
| 18 Feb 2025 | Cardex | $400,000 | DeFi Protocol | Signature Verification Flaw | — |
| 11 Feb 2025 | zkLend | $9.6m | DeFi Protocol | First Depositor Attack | — |
| 11 Feb 2025 | four.meme | $183,000 | DeFi Protocol | Swap Logic Flaw | — |
| 04 Feb 2025 | Ionic Protocol | $8.6m | DeFi Protocol | Impersonation Scam | — |
| 01 Feb 2025 | Sirio Finance | $2.0m | DeFi Protocol | Spot Price Manipulation | — |
| 28 Jan 2025 | DogWifTools | $10.0m | Other | Key Stored Publicly | — |
| 23 Jan 2025 | Phemex | $85.0m | CEX | Hot Wallet Key Compromised | — |
| 14 Jan 2025 | The Idols | $324,000 | DeFi Protocol | Reward Logic Flaw | — |
| 13 Jan 2025 | Mosca2 | $37,600 | DeFi Protocol | Incorrect Share Accounting | — |
| 12 Jan 2025 | Unilend V2 | $197,600 | DeFi Protocol | Redeem Logic Flaw | — |
| 08 Jan 2025 | Orange Finance | $840,000 | DeFi Protocol | Private Key Compromised | — |
| 08 Jan 2025 | Moby | $1.5m | DeFi Protocol | Private Key Compromised | — |
| 07 Jan 2025 | IPC AI | $590,000 | Token | Swap Logic Flaw | — |
| 06 Jan 2025 | Mosca | $37,600 | DeFi Protocol | Incorrect Share Accounting | — |
| 04 Jan 2025 | Sorra Finance | $41,000 | DeFi Protocol | Reward Logic Flaw | — |
| 02 Jan 2025 | MoonHacker | $300,000 | DeFi Protocol | Token Approval Abuse | — |
| 01 Jan 2025 | NoOnes | $7.9m | DeFi Protocol | Cross-Chain Message Spoofing | — |
Amounts are DefiLlama’s estimates and can change as incidents are revalued. Its returned figure can include money a company repaid itself, not only funds recovered from attackers. Source: DefiLlama.
Cite this Bitminer.io, “Crypto failures in 2025”, data to 2 November 2026, https://bitminer.io/ledger/failures/2025/. How this is built