Ledger All ledgers
Crypto exchange hacks
120 attacks on CEX targets, with $13.04bn in known losses.
$13.04bn lost across 120 incidents, 9.0% of the ledger
Largest: Binance ($6.36bn), Bybit ($1.40bn), Coincheck ($534.0m).
2018
2019
2020
2021
2022
2023
2024
2025
$6.82bn2026
| Date | Target | Lost | Type | Method | Returned |
|---|---|---|---|---|---|
| 02 Nov 2026 | Mercado Bitcoin | $40.0m | CEX | Protocol Logic | — |
| 29 Oct 2026 | Binance | $6.36bn | CEX | Key Leaked via Infrastructure | — |
| 21 Oct 2026 | CoinDCX | $16.0m | CEX | Hot Wallet Key Compromised | — |
| 24 Sept 2026 | Bitget | $387.0m | CEX | Hot Wallet Key Compromised | — |
| 16 Apr 2026 | Grinex | $13.7m | CEX | Hot Wallet Key Compromised | — |
| 26 Nov 2025 | Upbit | $36.0m | CEX | Malware | — |
| 09 Sept 2025 | SwissBorg | $41.5m | CEX | API Key Compromised | — |
| 14 Aug 2025 | BtcTurk | $48.0m | CEX | Hot Wallet Key Compromised | — |
| 13 Aug 2025 | Coinbase | $300,000 | CEX | Token Approval Abuse | — |
| 24 Jul 2025 | WOO X | $14.0m | CEX | Phishing | — |
| 19 Jul 2025 | CoinDCX | $44.2m | CEX | Hot Wallet Key Compromised | — |
| 16 Jul 2025 | BigONE | $27.0m | CEX | Supply Chain Attack | — |
| 18 Jun 2025 | Nobitex | $82.0m | CEX | Malware | — |
| 08 May 2025 | BitoPro | $11.5m | CEX | Key Leaked via Infrastructure | — |
| 20 Apr 2025 | Bitget | $100.0m | CEX | Market Maker Bot Exploited | — |
| 21 Feb 2025 | Bybit | $1.40bn | CEX | Signer Phishing | $1.40bn |
| 23 Jan 2025 | Phemex | $85.0m | CEX | Hot Wallet Key Compromised | — |
| 28 Nov 2024 | XT Exchange | $1.7m | CEX | Hot Wallet Key Compromised | — |
| 31 Oct 2024 | M2 Exchange | $13.7m | CEX | Hot Wallet Key Compromised | — |
| 20 Sept 2024 | BingX | $43.3m | CEX | Hot Wallet Key Compromised | — |
| 10 Sept 2024 | Indodax | $25.2m | CEX | Key Leaked via Infrastructure | — |
| 18 Jul 2024 | WazirX: India | $234.9m | CEX | Signer Phishing | — |
| 22 Jun 2024 | BtcTurk | $54.0m | CEX | Hot Wallet Key Compromised | — |
| 20 Jun 2024 | OKX NFT Aggregator | $14,000 | CEX | Improper Access Control | — |
| 04 Jun 2024 | Lykke | $22.4m | CEX | Hot Wallet Key Compromised | — |
| 31 May 2024 | DMM Bitcoin | $305.0m | CEX | Phishing | $305.0m |
| 29 Apr 2024 | Rain | $14.8m | CEX | Private Key Compromised | — |
| 31 Mar 2024 | FixedFloat | $3.0m | CEX | Key Leaked via Infrastructure | — |
| 13 Feb 2024 | DuelBits | $4.6m | CEX | Malware | — |
| 06 Jan 2024 | CoinsPaid | $7.5m | CEX | Hot Wallet Key Compromised | — |
| 27 Dec 2023 | Thunder Terminal | $240,000 | CEX | Key Leaked via Infrastructure | — |
| 20 Dec 2023 | INX Digital Company | $1.6m | CEX | Key Leaked via Infrastructure | — |
| 22 Nov 2023 | HTX | $13.6m | CEX | Hot Wallet Key Compromised | — |
| 10 Nov 2023 | Poloniex | $126.0m | CEX | Malware | — |
| 09 Nov 2023 | CoinSpot | $2.4m | CEX | Hot Wallet Key Compromised | — |
| 25 Sept 2023 | HTX | $8.0m | CEX | Hot Wallet Key Compromised | — |
| 15 Sept 2023 | Remitano | $2.7m | CEX | Key Leaked via Infrastructure | — |
| 12 Sept 2023 | CoinEx | $55.0m | CEX | Hot Wallet Key Compromised | — |
| 07 Sept 2023 | Fortress Trust | $12.0m | CEX | Key Leaked via Infrastructure | — |
| 26 Jul 2023 | AlphaPo | $60.0m | CEX | Hot Wallet Key Compromised | — |
| 11 Jun 2023 | Floating Point Group | $15.0m | CEX | Key Leaked via Infrastructure | — |
| 26 May 2023 | Patricia | $2.0m | CEX | Database Breach | — |
| 24 Apr 2023 | KuCoin | $22,628 | CEX | Social Account Takeover | — |
| 14 Apr 2023 | Bitrue | $23.0m | CEX | Hot Wallet Key Compromised | — |
| 08 Apr 2023 | GDAC | $13.9m | CEX | Hot Wallet Key Compromised | — |
| 26 Jan 2023 | Robinhood | $8,200 | CEX | Social Account Takeover | — |
| 11 Dec 2022 | 3Commas | $20.0m | CEX | Database Breach | — |
| 12 Nov 2022 | FTX | $450.0m | CEX | Phishing | — |
| 01 Nov 2022 | Deribit | $28.0m | CEX | Hot Wallet Key Compromised | — |
| 13 Oct 2022 | FTX | $70,000 | CEX | API Key Compromised | — |
| 01 Aug 2022 | ZB Exchange | $4.8m | CEX | Hot Wallet Key Compromised | — |
| 12 Feb 2022 | IRA Financial / Gemini | $36.0m | CEX | API Key Compromised | — |
| 01 Feb 2022 | BNS | $7.5m | CEX | Key Leaked via Infrastructure | — |
| 18 Jan 2022 | Crypto-com | $33.7m | CEX | Session Key Compromised | — |
| 11 Dec 2021 | AscenDEX | $77.0m | CEX | Hot Wallet Key Compromised | — |
| 04 Dec 2021 | BitMart | $196.0m | CEX | Hot Wallet Key Compromised | — |
| 01 Oct 2021 | Coinbase | — | CEX | Session Key Compromised | — |
| 29 Aug 2021 | Bilaxy | $21.7m | CEX | Hot Wallet Key Compromised | — |
| 19 Aug 2021 | Liquid Global | $91.3m | CEX | Hot Wallet Key Compromised | — |
| 10 Jul 2021 | Multichain | $7.9m | CEX | Weak Key Generation | — |
| 06 Jun 2021 | Fetch.ai | $2.6m | CEX | Private Key Compromised | — |
| 01 Feb 2021 | Cryptopia | $45,000 | CEX | Hot Wallet Key Compromised | — |
| 26 Dec 2020 | Altilly | $750,000 | CEX | API Key Compromised | — |
| 24 Dec 2020 | Livecoin | $3.3m | CEX | API Key Compromised | — |
| 21 Dec 2020 | Exmo | $10.5m | CEX | Hot Wallet Key Compromised | — |
| 29 Sept 2020 | KuCoin | $281.0m | CEX | Hot Wallet Key Compromised | — |
| 08 Sept 2020 | Eterbase | $5.4m | CEX | Hot Wallet Key Compromised | — |
| 18 Aug 2020 | OKEx | $5.6m | CEX | Forged Proof | — |
| 31 Jul 2020 | 2gether | $1.2m | CEX | Key Leaked via Infrastructure | — |
| 11 Jul 2020 | Cashaa | $3.1m | CEX | Key Leaked via Infrastructure | — |
| 05 Feb 2020 | Altsbit | $70,000 | CEX | Key Leaked via Infrastructure | — |
| 27 Nov 2019 | Upbit | $49.3m | CEX | Hot Wallet Key Compromised | — |
| 08 Nov 2019 | VinDAX | $500,000 | CEX | Key Leaked via Infrastructure | — |
| 17 Aug 2019 | CoinTiger (PTT) | $9.2m | CEX | Key Leaked via Infrastructure | — |
| 12 Jul 2019 | BitPoint | $27.6m | CEX | Key Leaked via Infrastructure | — |
| 27 Jun 2019 | Bitrue | $4.7m | CEX | Improper Access Control | — |
| 06 Jun 2019 | GateHub | $9.5m | CEX | Private Key Compromised | — |
| 02 Jun 2019 | Kraken | $10.4m | CEX | Improper Access Control | — |
| 07 May 2019 | Binance | $40.0m | CEX | Hot Wallet Key Compromised | — |
| 29 Mar 2019 | Bithumb | $19.0m | CEX | Hot Wallet Key Compromised | — |
| 25 Mar 2019 | Coinbene | $40.0m | CEX | Improper Access Control | — |
| 24 Mar 2019 | DragonEx | $7.0m | CEX | Key Leaked via Infrastructure | — |
| 24 Mar 2019 | Etbox | $132,000 | CEX | Key Leaked via Infrastructure | — |
| 20 Feb 2019 | Coinbin | $26.0m | CEX | Admin Drain | — |
| 26 Jan 2019 | LocalBitcoins | $27,000 | CEX | Key Leaked via Infrastructure | — |
| 14 Jan 2019 | Cryptopia | $16.0m | CEX | Hot Wallet Key Compromised | — |
| 07 Nov 2018 | Gate | — | CEX | Supply Chain Attack | — |
| 14 Sept 2018 | Zaif | $60.0m | CEX | Hot Wallet Key Compromised | — |
| 21 Jun 2018 | Bithumb | $31.0m | CEX | Key Leaked via Infrastructure | — |
| 10 Jun 2018 | Coinrail | $37.2m | CEX | Improper Access Control | — |
| 21 Apr 2018 | Gate | $235.0m | CEX | Private Key Compromised | — |
| 12 Apr 2018 | Coinsecure | $3.3m | CEX | Private Key Compromised | — |
| 12 Feb 2018 | BitGrail | $170.0m | CEX | Improper Access Control | — |
| 26 Jan 2018 | Coincheck | $534.0m | CEX | Hot Wallet Key Compromised | — |
| 20 Dec 2017 | EtherDelta | $1.4m | CEX | DNS Hijack | — |
| 19 Dec 2017 | Youbit | — | CEX | Hot Wallet Key Compromised | — |
| 08 Dec 2017 | NiceHash | $64.0m | CEX | Key Leaked via Infrastructure | — |
| 27 Apr 2017 | Yapizon | $4.8m | CEX | Hot Wallet Key Compromised | — |
| 13 Oct 2016 | Bitcurex | $1.5m | CEX | Hot Wallet Key Compromised | — |
| 02 Aug 2016 | Bitfinex | $72.0m | CEX | Hot Wallet Key Compromised | — |
| 14 May 2016 | Gatecoin | $2.0m | CEX | Improper Access Control | — |
| 07 Apr 2016 | ShapeShift | $230,000 | CEX | Private Key Compromised | — |
| 15 Aug 2015 | BTER | $1.6m | CEX | Private Key Compromised | — |
| 22 May 2015 | Bitfinex | $329,000 | CEX | Hot Wallet Key Compromised | — |
| 18 Feb 2015 | KipCoin | $728,000 | CEX | Private Key Compromised | — |
| 17 Feb 2015 | BTER | $1.8m | CEX | Private Key Compromised | — |
| 27 Jan 2015 | 796 | $270,000 | CEX | Improper Access Control | — |
| 05 Jan 2015 | Bitstamp | $5.2m | CEX | Phishing | — |
| 29 Jul 2014 | Cryptsy | $9.6m | CEX | Private Key Compromised | — |
| 13 Jul 2014 | Mintpal | $2.0m | CEX | Improper Access Control | — |
| 04 Mar 2014 | Poloniex | $50,000 | CEX | Withdrawal Logic Flaw | — |
| 02 Mar 2014 | Flexcoin | $600,000 | CEX | Withdrawal Logic Flaw | — |
| 17 Feb 2014 | Picostocks | $4.4m | CEX | Private Key Compromised | — |
| 07 Feb 2014 | Mt. Gox | $470.0m | CEX | Private Key Compromised | — |
| 11 Nov 2013 | Bitcash | $100,000 | CEX | Improper Access Control | — |
| 23 Oct 2013 | Inputs.io | $1.2m | CEX | Key Leaked via Infrastructure | — |
| 05 Sept 2012 | Bitfloor | $250,000 | CEX | Key Stored Publicly | — |
| 11 May 2012 | Bitcoinica | $90,000 | CEX | Key Leaked via Infrastructure | — |
| 01 Mar 2012 | Bitcoinica | $228,000 | CEX | Key Leaked via Infrastructure | — |
| 19 Jun 2011 | Mt. Gox | $8.8m | CEX | Improper Access Control | — |
Amounts are DefiLlama’s estimates and can change as incidents are revalued. Its returned figure can include money a company repaid itself, not only funds recovered from attackers. Source: DefiLlama.
Cite this Bitminer.io, “Crypto exchange hacks”, data to 2 November 2026, https://bitminer.io/ledger/failures/type/cex/. How this is built