Ledger All ledgers
Governance hacks
23 incidents classified as Governance, with $250.0m in known losses.
$250.0m lost across 23 incidents, 1.7% of the ledger
Largest: Beanstalk ($181.0m), BonkDAO ($20.0m), TermFinance Vaults ($8.5m).
2018
2019
2020
2021
$191.3m2022
2023
2024
2025
2026
| Date | Target | Lost | Type | Method | Returned |
|---|---|---|---|---|---|
| 28 Oct 2026 | Hifi Finance | — | DeFi Protocol | Malicious Proposal | — |
| 25 Oct 2026 | Yapeswap | $21,900 | DeFi Protocol | Malicious Proposal | — |
| 24 Oct 2026 | X100 | $4.8m | DeFi Protocol | Flashloan Governance Attack | — |
| 22 Sept 2026 | Drop | $4.4m | DeFi Protocol | Malicious Proposal | — |
| 22 Sept 2026 | Astroport | $4.9m | DeFi Protocol | Malicious Proposal | — |
| 23 Aug 2026 | TermFinance Vaults | $8.5m | DeFi Protocol | Malicious Proposal | — |
| 06 Aug 2026 | Panther Protocol | $7,578 | DeFi Protocol | Malicious Proposal | — |
| 14 Jul 2026 | BarnBridge | $776,000 | DeFi Protocol | Malicious Proposal | — |
| 06 Jul 2026 | BonkDAO | $20.0m | Token | Malicious Proposal | — |
| 16 Jun 2026 | RetoSwap | $2.7m | DeFi Protocol | Malicious Proposal | — |
| 09 Jun 2026 | Token of Power | $1.6m | Token | Malicious Proposal | — |
| 16 Dec 2025 | FutureSwap | $270,000 | DeFi Protocol | Flashloan Governance Attack | — |
| 24 Feb 2024 | ZoomerCoin | $41,000 | Token | Flashloan Governance Attack | — |
| 19 Oct 2023 | Synthetify | $230,000 | DeFi Protocol | Malicious Proposal | — |
| 20 May 2023 | Tornado Cash | $2.2m | DAO | Malicious Proposal | — |
| 25 Mar 2023 | Swerve | $1.3m | DeFi Protocol | Malicious Proposal | — |
| 09 Oct 2022 | Xave Finance | — | DeFi Protocol | Malicious Proposal | — |
| 25 Jul 2022 | Audius | $6.0m | DeFi Protocol | Malicious Proposal | — |
| 08 May 2022 | Fortress Loans | $3.0m | DeFi Protocol | Malicious Proposal | — |
| 17 Apr 2022 | Beanstalk | $181.0m | DeFi Protocol | Flashloan Governance Attack | — |
| 17 Mar 2022 | ApeCoin | $820,000 | Token | Flashloan Governance Attack | — |
| 15 Feb 2022 | Build Finance | $470,000 | DeFi Protocol | Malicious Proposal | — |
| 15 Mar 2021 | TSD (True Seigniorage Dollar) | $7.1m | DeFi Protocol | Malicious Proposal | — |
Amounts are DefiLlama’s estimates and can change as incidents are revalued. Its returned figure can include money a company repaid itself, not only funds recovered from attackers. Source: DefiLlama.
Cite this Bitminer.io, “Governance hacks”, data to 2 November 2026, https://bitminer.io/ledger/failures/method/governance/. How this is built