Aggregated · The data
By the numbers
Computed across 273 catalogued incidents. Where loss figures were disputed, conservative public estimates are used.
Incidents
273
Total losses
$13.99B
Recovered
$1.85B
Partially recovered
$4.05B
Annual totals
Losses by year
Where the money flowed
Losses by chain
- Ethereum$10.26B161 incidents
- BNB Chain$2.70B58 incidents
- Bitcoin$2.36B26 incidents
- Solana$1.53B16 incidents
- Polygon$1.47B18 incidents
- Ronin$637.0M2 incidents
- NEM$530.0M1 incident
- Tron$467.7M8 incidents
- Avalanche$424.7M11 incidents
- Arbitrum$394.8M28 incidents
- Sui$226.5M2 incidents
- Optimism$201.8M10 incidents
- Moonbeam$190.0M1 incident
- Fantom$165.2M4 incidents
- Base$145.8M10 incidents
- Ripple$134.0M2 incidents
- Harmony$100.0M1 incident
- HECO$99.0M1 incident
- Terra$96.4M2 incidents
- Klaytn$82.0M1 incident
- Blast$67.6M2 incidents
- Litecoin$46.0M2 incidents
- Dogecoin$24.0M1 incident
- NEAR$21.6M2 incidents
- zkSync Era$14.1M4 incidents
- Stacks$12.7M2 incidents
- Gnosis$11.0M1 incident
- Stellar$10.2M1 incident
- Starknet$9.5M1 incident
- UniChain$8.4M1 incident
- Celo$8.4M1 incident
- Bittensor$8.0M1 incident
- Linea$7.2M2 incidents
- Saga$7.0M1 incident
- Mode$6.9M1 incident
- PulseChain$5.0M1 incident
- IoTeX$4.4M1 incident
- Meter$4.4M1 incident
- Fuse$4.0M1 incident
- Algorand$3.0M1 incident
- Shibarium$2.6M1 incident
- Cronos$2.0M1 incident
- Osmosis$1.1M1 incident
- RSK$1.1M1 incident
- Hedera$515.0K1 incident
How they got in
Losses by attack vector
- Private Key Compromise$4.30B60 incidents
- Smart Contract Bug$2.38B79 incidents
- Frontend Hijack$2.16B7 incidents
- Bridge Exploit$1.72B19 incidents
- Phishing / Social Engineering$1.04B13 incidents
- Centralized Exchange Failure$712.0M3 incidents
- Flash Loan Attack$630.0M28 incidents
- Oracle Manipulation$482.3M20 incidents
- Reentrancy$283.3M23 incidents
- Rug Pull$180.0M15 incidents
- Compiler Bug$73.0M1 incident
- Governance Attack$28.0M5 incidents