BTC—ETH—

Ledger All ledgers

Access Control hacks

228 incidents classified as Access Control, with $1.96bn in known losses.

$1.96bn lost across 228 incidents, 17.1% of the ledger

Largest: Poly Network ($611.0m), Drift Trade ($295.0m), BitGrail ($170.0m).

Known losses by year: Access Control
DateTargetLostTypeMethodReturned
31 Oct 2026Troves$666,935DeFi ProtocolImproper Access Control—
06 Oct 2026MakerDAO ETH-A Liquidation Keeper Bot$538,000DeFi ProtocolImproper Access Control—
01 Oct 2026FlashLoopAdapter$305,000DeFi ProtocolImproper Access Control—
24 Sept 2026Limit Break Payment Processor$1.8mNFTfiToken Approval Abuse—
21 Sept 2026The Internet Token$16,380TokenArbitrary External Call—
16 Sept 2026Startale$2,876DeFi ProtocolImproper Access Control—
15 Sept 2026Bonfire$47,400DeFi ProtocolImproper Access Control—
11 Sept 2026ether.fi Liquid$43,260DeFi ProtocolArbitrary External Call—
31 Aug 2026Aquifer$2.5mDeFi ProtocolArbitrary External Call—
31 Aug 2026Radix$1.2mChainImproper Access Control—
25 Aug 2026Enjin$162,000NFTfiOwnership Takeover—
22 Aug 2026The Sandbox$675,000DeFi ProtocolImproper Access Control—
21 Aug 2026MANTRA Chain$0ChainImproper Access Control—
19 Aug 2026BounceBit$3.0mChainImproper Access Control—
09 Aug 2026Coinsbuy$7.9mWalletImproper Access Control—
05 Aug 2026Unistreets$17,750DeFi ProtocolArbitrary External Call—
03 Aug 2026RISEx$673,012ChainImproper Access Control—
28 Jul 2026Crypto DAO$8.2mDeFi ProtocolImproper Access Control—
28 Jul 2026LULA$578,000TokenImproper Access Control—
26 Jul 2026WEMIX.FI Lend$737,000DeFi ProtocolImproper Access Control—
26 Jul 2026ChainConnect$650,000DeFi ProtocolImproper Access Control—
09 Jun 2026Asterix$40,000NFTfiToken Approval Abuse—
01 Jun 2026TesseraDAO$2.4mDeFi ProtocolImproper Access Control—
28 May 2026ONTR$98,200TokenOwnership Takeover—
27 May 2026SUPERFORTUNE AI$15.2mTokenImproper Access Control—
25 May 2026New Market Trading$4.0mOtherImproper Access Control—
25 May 2026Bitmor$6,000DeFi ProtocolToken Approval Abuse—
13 May 2026ShapeShift FOX Colony$132,700DeFi ProtocolArbitrary External Call—
13 May 2026Transit Finance$1.9mDeFi ProtocolImproper Access Control—
12 May 2026Aurellion$456,442RWAUninitialized Proxy—
12 May 2026SQ Protocol$346,137DeFi ProtocolImproper Access Control—
11 May 2026Huma$101,400DeFi ProtocolImproper Access Control—
11 May 2026INK Finance$140,000DeFi ProtocolCaller Impersonation—
10 May 2026Renegade$209,000DeFi ProtocolUninitialized Proxy$209,000
07 May 2026TrustedVolumes$6.7mOtherCaller Impersonation—
05 May 2026Ekubo$1.4mDeFi ProtocolToken Approval Abuse—
04 May 2026SquidRouterModule$3.2mDeFi ProtocolImproper Access Control—
28 Apr 2026Quant$138,000TokenArbitrary External Call—
28 Apr 2026YieldCore-3rd-deal$398,764DeFi ProtocolImproper Access Control—
27 Apr 2026ZetaChain$333,868ChainToken Approval Abuse—
25 Apr 2026Purrlend$1.5mDeFi ProtocolCaller Impersonation—
19 Apr 2026Custom sAVAX Rebalancer$64,000DeFi ProtocolArbitrary External Call—
12 Apr 2026SubQuery Network$134,000DeFi ProtocolImproper Access Control—
09 Apr 2026Aethir$400,000DeFi ProtocolImproper Access Control—
07 Apr 2026SquidMulticall$517,000DeFi ProtocolImproper Access Control—
04 Apr 2026BSC TMM/USDT$1.7mDeFi ProtocolImproper Access Control—
01 Apr 2026Drift Trade$295.0mDeFi ProtocolProxy Upgrade Hijack—
16 Mar 2026CheckoutPool$85,700DeFi ProtocolImproper Access Control—
12 Mar 2026Stake DAO Yield$176,000DeFi ProtocolCaller Impersonation—
09 Mar 2026Gondi V3$230,000NFTfiToken Approval Abuse—
07 Mar 2026Molt EVM$127,000OtherImproper Access Control—
28 Feb 2026Wise Lending V2$66,000DeFi ProtocolImproper Access Control—
25 Jan 2026Aperture LM$3.7mDeFi ProtocolToken Approval Abuse—
06 Jan 2026IPOR Fusion$336,000DeFi ProtocolArbitrary External Call$336,000
28 Dec 2025MSCST$129,900DeFi ProtocolImproper Access Control—
18 Dec 2025Rari Capital$2.0mDeFi ProtocolUninitialized Proxy—
12 Dec 2025ZEROBASE$250,000DeFi ProtocolToken Approval Abuse—
12 Dec 2025Ribbon$2.7mDeFi ProtocolImproper Access Control—
04 Dec 2025US Permissionless Dollar$1.0mDeFi ProtocolProxy Upgrade Hijack—
02 Dec 2025Goldfinch$330,000DeFi ProtocolToken Approval Abuse—
20 Nov 2025Dexmax AI$130,000TokenToken Approval Abuse—
07 Oct 2025TokenHolder$26,000TokenImproper Access Control—
04 Oct 2025Abracadabra Spell$1.7mDeFi ProtocolImproper Access Control—
28 Sept 2025dTRINITY$56,000DeFi ProtocolImproper Access Control—
27 Sept 2025Hyperdrive HL Lending$782,000DeFi ProtocolArbitrary External Call—
22 Sept 2025UXLINK$11.3mDeFi ProtocolDelegatecall Hijack—
08 Sept 2025Nemo Yield Trading$2.6mDeFi ProtocolImproper Access Control—
13 Aug 2025Coinbase$300,000CEXToken Approval Abuse—
28 Jul 2025SuperRare$730,000DeFi ProtocolMerkle Proof Forgery—
10 Jul 2025Kinto Bridge$1.6mDeFi ProtocolUninitialized Proxy—
09 Jul 2025Texture$2.2mDeFi ProtocolImproper Access Control—
06 Jun 2025ALEX$8.4mDeFi ProtocolCaller Impersonation—
06 Jun 2025ForceBridge$3.9mDeFi ProtocolImproper Access Control—
28 May 2025Cork V1$12.0mDeFi ProtocolImproper Access Control—
09 May 2025LND$1.2mDeFi ProtocolImproper Access Control—
22 Apr 2025Bitcoin Mission$1.3mDeFi ProtocolImproper Access Control—
16 Apr 2025R0AR$780,000DeFi ProtocolImproper Access Control—
04 Apr 2025AIRWA$33,600DeFi ProtocolImproper Access Control—
01 Apr 2025UPCX$70.0mDeFi ProtocolProxy Upgrade Hijack—
30 Mar 2025SIR$355,000DeFi ProtocolProxy Upgrade Hijack—
18 Mar 2025four.meme$80,000DeFi ProtocolImproper Access Control—
18 Mar 2025Voltage V3$322,113DeFi ProtocolImproper Access Control—
16 Mar 2025WebKeyDAO$73,000TokenImproper Access Control—
07 Mar 20251inch Swap$5.0mDeFi ProtocolArbitrary External Call—
02 Jan 2025MoonHacker$300,000DeFi ProtocolToken Approval Abuse—
16 Dec 2024BTC24H$85,700DeFi ProtocolImproper Access Control—
01 Dec 2024Spectral Labs$250,000DeFi ProtocolToken Approval Abuse—
26 Nov 2024NFTG$10,000DeFi ProtocolImproper Access Control—
23 Nov 2024AK1111$31,500DeFi ProtocolImproper Access Control—
20 Nov 2024MainnetSettler$66,000DeFi ProtocolToken Approval Abuse—
09 Nov 2024X319$12,900DeFi ProtocolImproper Access Control—
07 Nov 2024CoW$59,000DeFi ProtocolImproper Access Control—
22 Oct 2024Erc20transfer$14,800TokenImproper Access Control—
16 Sept 2024WXETA$110,000DeFi ProtocolUninitialized Proxy—
28 Aug 2024Aave$56,000DeFi ProtocolArbitrary External Call—
13 Aug 2024Vowcurrency$1.2mDeFi ProtocolImproper Access Control—
06 Aug 2024Ronin Bridge$12.0mDeFi ProtocolUninitialized Proxy—
26 Jul 2024Solrise Finance$6.7mDeFi ProtocolImproper Access Control—
24 Jul 2024Spectra Finance$73,000DeFi ProtocolArbitrary External Call—
23 Jul 2024DeltaPrime$1.0mDeFi ProtocolOwnership Takeover—
16 Jul 2024LiFi Finance$9.7mDeFi ProtocolToken Approval Abuse—
12 Jul 2024Dough Finance$2.0mDeFi ProtocolArbitrary External Call—
20 Jun 2024OKX NFT Aggregator$14,000CEXImproper Access Control—
11 Jun 2024YOLO Games$1.5mDeFi ProtocolCaller Impersonation—
31 May 2024MixedSwapRouter$16,000DeFi ProtocolArbitrary External Call—
29 May 2024MetaDragon$181,000NFTfiImproper Access Control—
28 May 2024Orion Protocol$645,000DeFi ProtocolImproper Access Control—
22 May 2024YON$118,000TokenImproper Access Control—
14 May 2024Predy Finance$464,000DeFi ProtocolImproper Access Control—
10 May 2024Galaxy Fox$330,000TokenImproper Access Control—
06 May 2024Perpy$132,000DeFi ProtocolUninitialized Proxy—
30 Apr 2024Pike V1$1.6mDeFi ProtocolProxy Upgrade Hijack—
25 Apr 2024FENGSHOU$191,000TokenImproper Access Control—
24 Apr 2024XBridge$1.4mDeFi ProtocolImproper Access Control—
20 Apr 2024Rico—DeFi ProtocolArbitrary External Call—
15 Apr 2024Chainge Finance$716,000DeFi ProtocolArbitrary External Call—
29 Mar 2024ETHFIN$1,200DeFi ProtocolImproper Access Control—
26 Mar 2024Munchables$62.5mGamingProxy Upgrade Hijack—
25 Mar 2024Curio$16.0mDeFi ProtocolDelegatecall Hijack—
20 Mar 2024ParaSwap$300,000DeFi ProtocolImproper Access Control—
20 Mar 2024Dolomite$1.8mDeFi ProtocolImproper Access Control—
08 Mar 2024Unizen$2.1mDeFi ProtocolArbitrary External Call$2.1m
06 Mar 2024ALP$10,000DeFi ProtocolImproper Access Control—
28 Feb 2024Seneca$6.4mDeFi ProtocolToken Approval Abuse—
22 Feb 2024Swarm Markets$472,892DeFi ProtocolImproper Access Control—
27 Jan 2024Citadel.one$93,000DeFi ProtocolImproper Access Control—
17 Jan 2024BasketDAO$1.2mDeFi ProtocolArbitrary External Call—
16 Jan 2024Hector Network$2.7mDeFi ProtocolImproper Access Control—
25 Dec 2023Telcoin$1.3mPaymentsUninitialized Proxy—
17 Dec 2023Flooring Protocol$1.6mDeFi ProtocolArbitrary External Call—
07 Nov 2023Curve Finance MEV Bot$2.0mDeFi ProtocolImproper Access Control—
06 Nov 2023TrustPad$155,000DeFi ProtocolImproper Access Control—
31 Oct 2023Unibot$640,000DeFi ProtocolToken Approval Abuse—
23 Oct 2023Maestro$500,000DeFi ProtocolArbitrary External Call$465,000
02 Sept 2023DAppSocial$16,000DeFi ProtocolImproper Access Control—
01 Sept 2023SharedStake$175,000DeFi ProtocolOwnership Takeover—
18 Aug 2023Exactly$7.6mDeFi ProtocolImproper Access Control—
01 Aug 2023LeetSwap$620,000DeFi ProtocolImproper Access Control—
31 Jul 2023GYM Network$1,193DeFi ProtocolImproper Access Control—
28 Jul 2023Pond0x$2.2mTokenArbitrary External Call—
25 Jul 2023MetaLabz—DeFi ProtocolImproper Access Control—
18 Jul 2023BNO$500,000DeFi ProtocolImproper Access Control—
13 Jul 2023Ethscriptions$2,828NFTfiImproper Access Control—
10 Jul 2023Arcadia V1$455,000DeFi ProtocolImproper Access Control—
09 Jul 2023CivFund$180,000DeFi ProtocolToken Approval Abuse—
08 Jul 2023CIVNFT$180,000DeFi ProtocolImproper Access Control—
30 Jun 2023Biswap$72,000DeFi ProtocolImproper Access Control—
19 Jun 2023Ara Finance$125,000DeFi ProtocolToken Approval Abuse—
15 Jun 2023Hashflow$605,000DeFi ProtocolToken Approval Abuse—
10 Jun 2023Atlantis Loans$2.5mDeFi ProtocolImproper Access Control—
02 Jun 2023Hector Lending$653,000DeFi ProtocolToken Approval Abuse—
24 May 2023Local Traders$118,000DeFi ProtocolImproper Access Control—
10 May 2023SNK (Snooker)$197,725DeFi ProtocolImproper Access Control—
06 May 2023Melo$90,000DeFi ProtocolImproper Access Control—
12 Apr 2023MetaPoint$820,000DeFi ProtocolToken Approval Abuse—
10 Apr 2023Terraport$4.0mDeFi ProtocolImproper Access Control—
28 Mar 2023Safemoon$8.9mDeFi ProtocolImproper Access Control—
10 Mar 2023Hedera$600,000DeFi ProtocolImproper Access Control—
27 Feb 2023LaunchZone$700,000DeFi ProtocolImproper Access Control—
27 Feb 2023DungeonSwap$728,000DeFi ProtocolImproper Access Control—
27 Feb 2023swapX$1.0mDeFi ProtocolImproper Access Control—
20 Feb 2023Dexible V2$2.0mDeFi ProtocolArbitrary External Call—
20 Feb 2023Hope Finance$2.0mDeFi ProtocolArbitrary External Call—
20 Feb 2023Revert Finance$29,000DeFi ProtocolArbitrary External Call—
07 Feb 2023CoWSwap$180,000DeFi ProtocolArbitrary External Call—
26 Dec 2022Amun$300,000DeFi ProtocolImproper Access Control—
25 Dec 2022Rubic$1.4mDeFi ProtocolArbitrary External Call—
14 Dec 2022FPR$29,000DeFi ProtocolImproper Access Control—
02 Dec 2022Ankr$5.0mDeFi ProtocolImproper Access Control$5.0m
29 Nov 2022MBC & ZZSH$5,900TokenImproper Access Control—
22 Nov 2022AUR Protocol$13,000TokenImproper Access Control—
09 Nov 2022Brahma Finance$89,343DeFi ProtocolArbitrary External Call—
27 Oct 2022UvToken$1.5mDeFi ProtocolImproper Access Control—
25 Oct 2022ULME$250,000DeFi ProtocolImproper Access Control—
11 Oct 2022TempleDAO$2.3mDeFi ProtocolImproper Access Control—
08 Sept 2022Ragnarok Online Invasion$44,000GamingImproper Access Control—
05 Sept 2022DAO Swap$580,000DeFi ProtocolImproper Access Control—
02 Sept 2022ShadowFi$301,000DeFi ProtocolImproper Access Control—
01 Aug 2022Reaper Farm$1.7mDeFi ProtocolImproper Access Control—
02 Jul 2022Crema Finance$8.8mDeFi ProtocolImproper Access Control—
08 Jun 2022Gym Network$2.1mDeFi ProtocolImproper Access Control—
05 Jun 2022Wintermute$17.6mDeFi ProtocolImproper Access Control—
30 May 2022Mirror$2.0mDeFi ProtocolImproper Access Control—
24 May 2022HackDao$65,000DeFi ProtocolImproper Access Control—
18 May 2022Feminist Metaverse$540,000DeFi ProtocolImproper Access Control—
17 May 2022FEG Token$1.9mTokenImproper Access Control—
15 Apr 2022Rikkei Finance$1.1mDeFi ProtocolImproper Access Control—
11 Apr 2022CF Token$1.9mTokenImproper Access Control—
30 Mar 2022BasketDAO$1.2mDeFi ProtocolArbitrary External Call—
26 Mar 2022Auctus$726,000DeFi ProtocolArbitrary External Call—
21 Mar 2022One Ring Finance$1.4mDeFi ProtocolImproper Access Control—
21 Mar 2022LI.FI$600,000DeFi ProtocolToken Approval Abuse—
20 Mar 2022Umbrella Network$700,000DeFi ProtocolImproper Access Control—
09 Mar 2022Pirate X$78,000DeFi ProtocolImproper Access Control—
18 Feb 2022Rigoblock$464,000DeFi ProtocolImproper Access Control—
18 Jan 2022Crosswise$879,000DeFi ProtocolImproper Access Control—
17 Jan 2022Crypto Burger$770,000GamingImproper Access Control—
03 Dec 2021Polygon$2.0mDeFi ProtocolImproper Access Control—
07 Nov 2021ChainSwap$4.4mDeFi ProtocolCaller Impersonation—
08 Oct 2021Mirror$90.0mDeFi ProtocolImproper Access Control—
04 Sept 2021DAO Maker Vesting$4.0mDeFi ProtocolImproper Access Control—
19 Aug 2021Solend$16,000DeFi ProtocolImproper Access Control—
13 Aug 2021NEKO$2.2mDeFi ProtocolImproper Access Control—
12 Aug 2021DAO Maker Vesting$7.0mDeFi ProtocolImproper Access Control—
10 Aug 2021Poly Network$611.0mDeFi ProtocolImproper Access Control—
10 Aug 2021Punk Protocol$8.9mDeFi ProtocolDelegatecall Hijack—
24 Jun 2021SharedStake$500,000DeFi ProtocolImproper Access Control—
19 Jun 2021Visor Finance$504,845DeFi ProtocolImproper Access Control—
08 May 2021Rari Capital$10.0mDeFi ProtocolArbitrary External Call—
05 May 2021ValueDefi$10.0mDeFi ProtocolImproper Access Control—
12 Apr 2021PancakeSwap$1.8mDeFi ProtocolImproper Access Control—
09 Mar 2021DODO AMM$3.8mDeFi ProtocolImproper Access Control—
27 Feb 2021Furucombo$14.0mDeFi ProtocolDelegatecall Hijack—
30 Nov 2020SushiSwap$15,000DeFi ProtocolImproper Access Control—
01 Jul 2020Vether$450,000DeFi ProtocolImproper Access Control—
18 Jun 2020Bancor V3$544,885DeFi ProtocolImproper Access Control—
27 Jun 2019Bitrue$4.7mCEXImproper Access Control—
02 Jun 2019Kraken$10.4mCEXImproper Access Control—
25 Mar 2019Coinbene$40.0mCEXImproper Access Control—
10 Jun 2018Coinrail$37.2mCEXImproper Access Control—
12 Feb 2018BitGrail$170.0mCEXImproper Access Control—
09 Nov 2017Parity Multisig$150.0mDeFi ProtocolUninitialized Proxy—
01 Jul 2017Parity$30.0mWalletUninitialized Proxy—
14 May 2016Gatecoin$2.0mCEXImproper Access Control—
27 Jan 2015796$270,000CEXImproper Access Control—
13 Jul 2014Mintpal$2.0mCEXImproper Access Control—
11 Nov 2013Bitcash$100,000CEXImproper Access Control—
19 Jun 2011Mt. Gox$8.8mCEXImproper Access Control—

Amounts are DefiLlama’s estimates and can change as incidents are revalued. Its returned figure can include money a company repaid itself, not only funds recovered from attackers. Source: DefiLlama.

Cite this Bitminer.io, “Access Control hacks”, data to 2 November 2026, https://bitminer.io/ledger/failures/method/access-control/. How this is built