Ledger All ledgers
NFT finance hacks
25 attacks on NFTfi targets, with $42.7m in known losses.
$42.7m lost across 25 incidents, 1.9% of the ledger
Largest: Lympo ($18.7m), Remilia ($6.0m), ParaSpace Lending V1 ($5.0m).
2018
2019
2020
2021
2022
2023
2024
2025
2026
| Date | Target | Lost | Type | Method | Returned |
|---|---|---|---|---|---|
| 24 Sept 2026 | Limit Break Payment Processor | $1.8m | NFTfi | Token Approval Abuse | — |
| 21 Sept 2026 | DoinGud | $35,486 | NFTfi | Swap Logic Flaw | — |
| 25 Aug 2026 | Enjin | $162,000 | NFTfi | Ownership Takeover | — |
| 23 Jun 2026 | Royal.io | $263,000 | NFTfi | Incorrect Share Accounting | — |
| 09 Jun 2026 | Asterix | $40,000 | NFTfi | Token Approval Abuse | — |
| 08 Jun 2026 | Flooring Protocol | $500,000 | NFTfi | Infinite Mint | — |
| 09 Mar 2026 | Gondi V3 | $230,000 | NFTfi | Token Approval Abuse | — |
| 29 May 2024 | MetaDragon | $181,000 | NFTfi | Improper Access Control | — |
| 17 Mar 2024 | Remilia | $6.0m | NFTfi | Private Key Compromised | — |
| 15 Mar 2024 | NFPrompt | $3.0m | NFTfi | Private Key Compromised | — |
| 13 Jul 2023 | Ethscriptions | $2,828 | NFTfi | Improper Access Control | — |
| 17 Mar 2023 | ParaSpace Lending V1 | $5.0m | NFTfi | Spot Price Manipulation | $5.0m |
| 17 Oct 2022 | LiveArtX | $39,000 | NFTfi | Hot Wallet Key Compromised | — |
| 02 Sept 2022 | Bad Guys by RPF | — | NFTfi | Incorrect Share Accounting | — |
| 17 Jul 2022 | Premint | $375,000 | NFTfi | Frontend Compromise | — |
| 01 Jul 2022 | Quixotic | $100,000 | NFTfi | Signature Verification Flaw | — |
| 04 Jun 2022 | BAYC/Otherside | $257,000 | NFTfi | Phishing | — |
| 20 May 2022 | Llamascape | $70,000 | NFTfi | Signer Phishing | — |
| 18 May 2022 | Seth Green NFTs | $300,000 | NFTfi | Phishing | — |
| 11 May 2022 | X2Y2 | $200,000 | NFTfi | Phishing | — |
| 20 Feb 2022 | OpenSea | $2.0m | NFTfi | Phishing | — |
| 25 Jan 2022 | OpenSea | $1.0m | NFTfi | Withdrawal Logic Flaw | — |
| 10 Jan 2022 | Lympo | $18.7m | NFTfi | Hot Wallet Key Compromised | — |
| 23 Dec 2021 | Monkey Kingdom | $1.3m | NFTfi | Phishing | — |
| 19 Nov 2021 | Phantom Galaxies | $1.1m | NFTfi | Malware | — |
Amounts are DefiLlama’s estimates and can change as incidents are revalued. Its returned figure can include money a company repaid itself, not only funds recovered from attackers. Source: DefiLlama.
Cite this Bitminer.io, “NFT finance hacks”, data to 2 November 2026, https://bitminer.io/ledger/failures/type/nftfi/. How this is built