Ledger All ledgers
Token exploits
99 attacks on Token targets, with $123.3m in known losses.
$123.3m lost across 99 incidents, 7.4% of the ledger
Largest: Tether ($31.0m), BonkDAO ($20.0m), SUPERFORTUNE AI ($15.2m).
2018
2019
2020
2021
2022
2023
2024
2025
2026
| Date | Target | Lost | Type | Method | Returned |
|---|---|---|---|---|---|
| 21 Sept 2026 | The Internet Token | $16,380 | Token | Arbitrary External Call | — |
| 19 Sept 2026 | NuNet | $462,730 | Token | Private Key Compromised | — |
| 27 Aug 2026 | CCC | $117,000 | Token | Swap Logic Flaw | — |
| 25 Aug 2026 | FH Token | $20,000 | Token | Swap Logic Flaw | — |
| 28 Jul 2026 | LULA | $578,000 | Token | Improper Access Control | — |
| 17 Jul 2026 | FlyCow | $65,300 | Token | Incorrect Share Accounting | — |
| 16 Jul 2026 | CrowdRingCircle | $209,100 | Token | Incorrect Share Accounting | — |
| 12 Jul 2026 | PHX | $89,500 | Token | Incorrect Share Accounting | — |
| 08 Jul 2026 | BFB | $197,800 | Token | Incorrect Share Accounting | — |
| 06 Jul 2026 | BonkDAO | $20.0m | Token | Malicious Proposal | — |
| 28 Jun 2026 | AIDC | $121,000 | Token | Arithmetic Error | — |
| 24 Jun 2026 | DLMC | $222,600 | Token | Spot Price Manipulation | — |
| 19 Jun 2026 | JB | $50,000 | Token | Spot Price Manipulation | — |
| 17 Jun 2026 | DIP | $111,000 | Token | Swap Logic Flaw | — |
| 17 Jun 2026 | Little Boy Plus | $367,000 | Token | Arithmetic Error | — |
| 09 Jun 2026 | Token of Power | $1.6m | Token | Malicious Proposal | — |
| 03 Jun 2026 | ATM | $243,000 | Token | Swap Logic Flaw | — |
| 01 Jun 2026 | TSR | $2.5m | Token | Infinite Mint | — |
| 31 May 2026 | AROS | $295,000 | Token | Spot Price Manipulation | — |
| 28 May 2026 | ONTR | $98,200 | Token | Ownership Takeover | — |
| 27 May 2026 | SUPERFORTUNE AI | $15.2m | Token | Improper Access Control | — |
| 17 May 2026 | SEA Token | $153,000 | Token | Spot Price Manipulation | — |
| 28 Apr 2026 | Quant | $138,000 | Token | Arbitrary External Call | — |
| 28 Apr 2026 | JUDAO | $228,000 | Token | Arithmetic Error | — |
| 13 Apr 2026 | MONA | $60,950 | Token | Incorrect Share Accounting | — |
| 20 Nov 2025 | Dexmax AI | $130,000 | Token | Token Approval Abuse | — |
| 21 Oct 2025 | DoodiPals | $171,000 | Token | Private Key Compromised | — |
| 07 Oct 2025 | TokenHolder | $26,000 | Token | Improper Access Control | — |
| 18 Sept 2025 | New Gold Protocol | $1.9m | Token | Spot Price Manipulation | — |
| 14 Sept 2025 | Yala | $7.6m | Token | Deployer Key Compromised | — |
| 05 Jul 2025 | RANT | $204,000 | Token | Incorrect Fee Accounting | — |
| 20 May 2025 | IRYS AI | $69,600 | Token | Backdoor Contract | — |
| 20 Mar 2025 | BBXToken | $12,000 | Token | Spot Price Manipulation | — |
| 16 Mar 2025 | WebKeyDAO | $73,000 | Token | Improper Access Control | — |
| 07 Jan 2025 | IPC AI | $590,000 | Token | Swap Logic Flaw | — |
| 18 Dec 2024 | HarryPotterObamaSonic10Inu | $243,000 | Token | Spot Price Manipulation | — |
| 18 Dec 2024 | SlurpyCoin | $3,000 | Token | Swap Logic Flaw | — |
| 14 Dec 2024 | JHY Token | $12,000 | Token | Incorrect Share Accounting | — |
| 12 Dec 2024 | BNBS | $20,300 | Token | Reentrancy | — |
| 10 Dec 2024 | LABUBU Token | $12,000 | Token | Donation Attack | — |
| 03 Dec 2024 | BYC Token | $100,000 | Token | Incorrect Fee Accounting | — |
| 07 Nov 2024 | VRug | $8,400 | Token | Liquidity Rug | — |
| 29 Oct 2024 | BUBAI | $131,000 | Token | Liquidity Rug | — |
| 24 Oct 2024 | Cryptobottle | $490,000 | Token | Spot Price Manipulation | — |
| 22 Oct 2024 | Erc20transfer | $14,800 | Token | Improper Access Control | — |
| 01 Oct 2024 | FireToken | $20,000 | Token | Spot Price Manipulation | — |
| 20 Sept 2024 | DOGGO | $7,000 | Token | Withdrawal Logic Flaw | — |
| 10 Sept 2024 | Caterpillar Coin | $1.4m | Token | Spot Price Manipulation | — |
| 12 Aug 2024 | iVest | $190,000 | Token | Protocol Logic | — |
| 21 Jul 2024 | UtopiaSphere | $521,000 | Token | Spot Price Manipulation | — |
| 16 Jun 2024 | WIFCOIN | — | Token | Protocol Logic | — |
| 29 May 2024 | Scroll Token | — | Token | Arithmetic Error | — |
| 26 May 2024 | NORMIE | $881,686 | Token | Protocol Logic | — |
| 22 May 2024 | YON | $118,000 | Token | Improper Access Control | — |
| 10 May 2024 | Galaxy Fox | $330,000 | Token | Improper Access Control | — |
| 08 May 2024 | GPU | $32,400 | Token | Arithmetic Error | — |
| 07 May 2024 | SATURN | $9,000 | Token | Spot Price Manipulation | — |
| 27 Apr 2024 | BNBX | — | Token | Arithmetic Error | — |
| 25 Apr 2024 | FENGSHOU | $191,000 | Token | Improper Access Control | — |
| 22 Apr 2024 | Z123 | $136,000 | Token | Spot Price Manipulation | — |
| 09 Apr 2024 | xBlast | $84,500 | Token | Hot Wallet Key Compromised | — |
| 08 Apr 2024 | SQUID | $87,000 | Token | Swap Logic Flaw | — |
| 28 Feb 2024 | Serenity Shield | $586,000 | Token | Phishing | — |
| 24 Feb 2024 | ZoomerCoin | $41,000 | Token | Flashloan Governance Attack | — |
| 21 Feb 2024 | DeezNutz 404 | $170,000 | Token | Infinite Mint | — |
| 21 Feb 2024 | Gain | $3.0m | Token | Infinite Mint | — |
| 15 Feb 2024 | Miner | $466,000 | Token | Missing Input Validation | — |
| 07 Dec 2023 | Xai | $845,800 | Token | Impersonation Scam | — |
| 06 Dec 2023 | TIME | $190,000 | Token | Missing Input Validation | — |
| 12 Oct 2023 | BlackHole Token | $1.3m | Token | Spot Price Manipulation | — |
| 29 Aug 2023 | EAC | $6,376 | Token | Spot Price Manipulation | — |
| 26 Aug 2023 | PEPE | $15.1m | Token | Admin Drain | — |
| 24 Aug 2023 | GSS | $25,000 | Token | Arithmetic Error | — |
| 28 Jul 2023 | Pond0x | $2.2m | Token | Arbitrary External Call | — |
| 20 Jul 2023 | FFIST | $110,000 | Token | Reward Logic Flaw | — |
| 20 Jul 2023 | Utopia | $119,300 | Token | Swap Logic Flaw | — |
| 30 Mar 2023 | Rocket Pool | $3.8m | Token | Phishing | — |
| 08 Mar 2023 | DKP | $80,000 | Token | Spot Price Manipulation | — |
| 10 Feb 2023 | Sheep | $3,000 | Token | Incorrect Share Accounting | — |
| 04 Feb 2023 | Sperax USD | $250,000 | Token | Unbacked Mint | — |
| 30 Jan 2023 | BEVO | $45,000 | Token | Incorrect Share Accounting | — |
| 10 Jan 2023 | BRA | $225,000 | Token | Incorrect Share Accounting | — |
| 12 Dec 2022 | BGLD | $18,000 | Token | Spot Price Manipulation | — |
| 10 Dec 2022 | MU&MUG | $57,000 | Token | Spot Price Manipulation | — |
| 10 Dec 2022 | TiFi | $43,500 | Token | Spot Price Manipulation | — |
| 09 Dec 2022 | NOVAToken | — | Token | Admin Drain | — |
| 07 Dec 2022 | AES | $61,608 | Token | Rounding Error | — |
| 05 Dec 2022 | BBOX | — | Token | Spot Price Manipulation | — |
| 01 Dec 2022 | APC | $6,000 | Token | Spot Price Manipulation | — |
| 29 Nov 2022 | SEAMAN | $7,000 | Token | Protocol Logic | — |
| 29 Nov 2022 | MBC & ZZSH | $5,900 | Token | Improper Access Control | — |
| 22 Nov 2022 | AUR Protocol | $13,000 | Token | Improper Access Control | — |
| 21 Nov 2022 | sDAO | $13,000 | Token | Protocol Logic | — |
| 17 May 2022 | FEG Token | $1.9m | Token | Improper Access Control | — |
| 11 Apr 2022 | CF Token | $1.9m | Token | Improper Access Control | — |
| 17 Mar 2022 | ApeCoin | $820,000 | Token | Flashloan Governance Attack | — |
| 24 Apr 2018 | SmartMesh | — | Token | Infinite Mint | — |
| 22 Apr 2018 | BeautyChain | — | Token | Infinite Mint | — |
| 19 Nov 2017 | Tether | $31.0m | Token | Private Key Compromised | — |
Amounts are DefiLlama’s estimates and can change as incidents are revalued. Its returned figure can include money a company repaid itself, not only funds recovered from attackers. Source: DefiLlama.
Cite this Bitminer.io, “Token exploits”, data to 2 November 2026, https://bitminer.io/ledger/failures/type/token/. How this is built