Qubic Weak-Seed Wallet Drain
An attacker emptied 1,404 Qubic wallets created with predictable seeds, taking about 2.94 trillion QU worth roughly $1.4 million before validators halted the chain.
Loss
1.4M
USD
Volume I · The catalog
Since 2009, more than $15.29B has been drained from blockchains and the businesses that touch them. This is the running ledger — citation-first, on-chain verifiable, and updated as we learn more.
Front page · The biggest№ 001
Bybit Heist
Malicious JavaScript injected into Safe{Wallet}'s signing UI drained 401,000 ETH ($1.46B) from a Bybit cold-wallet transfer, the largest crypto theft ever.
Recent filings
All →Cysic Bridge Unbacked CYS Mint
An attacker abused Cysic's bridge to mint 10 million unbacked CYS on BNB Chain, dumping most of it for about $727,000 in ETH before the token could be blacklisted.
Loss727.0KUSDPirate Chain Ironwood Unauthorized Mint
A validation flaw in Pirate Chain's Ironwood upgrade let an attacker mint roughly 39.8 million ARRR — about 20% of supply — and hide it in the shielded pool.
Loss0USDUNCX Vesting V2 Accounting Exploit
An accounting flaw in UNCX Network's shared Vesting V2 contracts let an attacker and copycats drain roughly $1.49 million in locked tokens across four chains.
Loss1.5MUSDGamdom Hot-Wallet Breach
A server intrusion drained crypto casino Gamdom's hot wallets across several chains for roughly $4.2 million in a suspected key compromise.
Loss4.2MUSDAutheo THEO Unbacked Cross-Chain Mint
An attacker minted 19 million unbacked THEO on Base through Autheo's Hyperlane cross-chain route and swapped them for about 700 ETH, crashing the token roughly 92%.
Loss1.8MUSD