Incident All ledgers
3Commas: $20.0m
3Commas lost $20.0m on 11 December 2022. Ranked 138th of 1,272 crypto failures, with method, returned funds and comparable incidents.
- Date
- 11 December 2022
- Lost
- $20.0m
- Returned or repaid
- None recorded
- Target
- CEX
- Category
- Frontend & Infrastructure
- Method
- Database Breach
- Chains
- Multi-Chain
Around 100K API keys from 3Commas' database were breached and leaked on December 28, 2022. Attackers used them to make unauthorized trades on linked exchange accounts, including Binance and KuCoin, draining about $20 million.
Against the ledger
- It ranks 138th of the 1,272 incidents with a known loss, and 20th in 2022.
- It accounts for 36.9% of the $54.2m in known losses in December 2022.
- 93 incidents in the ledger are classified as Frontend & Infrastructure, for $7.49bn in total. This one is 0.3% of that.
- The ledger records no returned funds.
Closest in size by the same method
| Date | Target | Lost | Type | Method | Returned |
|---|---|---|---|---|---|
| 18 Feb 2024 | FixedFloat | $26.1m | DeFi Protocol | Key Leaked via Infrastructure | — |
| 18 Nov 2023 | Kronos Research | $26.0m | Other | API Key Compromised | — |
| 10 Sept 2024 | Indodax | $25.2m | CEX | Key Leaked via Infrastructure | — |
| 21 Mar 2026 | Resolv USR | $24.5m | DeFi Protocol | Key Leaked via Infrastructure | — |
| 03 Apr 2023 | MEV-Boost Relay | $20.0m | Other | Key Leaked via Infrastructure | — |
All failures in 2022 · The failures ledger
Amounts are DefiLlama’s estimates and can change as incidents are revalued. Its returned figure can include money a company repaid itself, not only funds recovered from attackers. Source: DefiLlama.
Cite this Bitminer.io, “3Commas, failures ledger”, data to 2 November 2026, https://bitminer.io/ledger/incident/3commas-2022-12-11/. How this is built