Crypto Hack Tracker: Exploits and Losses This Year
Every major hack and exploit of the year with the amount taken, how the attackers got in and where the stolen funds sit now.
Multi-chainReport · FolioPlanned
Crypto Hacks and Exploits: Monthly Report
Which crypto hacks and exploits happened this month, and how much was lost?
Every major hack, exploit and rug pull of the month: what was hit, how, how much was taken and where the funds went.
- Multi-chain
ShareEmail it
Blueprint
What the report will cover.
The report as it will open in Folio. Each figure is named here and arrives with its receipt; until its data is published, its place stays empty.
A monthly edition, dated and cited
Crypto Hacks and Exploits: Monthly Report
The month in one paragraph
How many incidents, the total taken and recovered, and the attack that mattered most.
- Incidents this month
- Total taken
- Total recovered
Every incident
Each incident with its date, chain, protocol, attack type, amount taken and the transactions behind it.
- Amount taken per incident
How attackers got in
Losses grouped by attack type: code flaws, compromised keys, oracle manipulation, phishing and rug pulls.
- Losses by attack type
Where the funds went
The paths stolen funds took through bridges, mixers and exchanges, and what was frozen or returned.
- Funds bridged
- Funds frozen or returned
What changed
Fixes, audits and policy changes that followed, and the patterns worth watching next month.
About
What it answers, and for whom.
Each month brings new exploits: a lending market drained through a price oracle, a bridge key compromised, a token whose deployer pulled the liquidity. This report collects the month's incidents in one dated document, with each loss traced to the transactions that moved the funds.
It is written for people who need the facts quickly and want to check them: security teams, risk desks, journalists and anyone exposed to the protocols involved. Every amount will be cited to its on-chain transactions, so a reader can open the receipt and follow the funds.
Method
How it will be measured.
Every figure will be read at a block, kept with its source and its exact read, and open a receipt anyone can re-check.
How receipts work →- An incident enters the report when an attack transaction is identified on-chain and a public source confirms it; both are recorded with the incident.
- Amounts lost are the token amounts that left the victim contracts in the attack transactions, valued at oracle prices at the attack block.
- Fund flows follow the attacker addresses forward through bridges, mixers and exchanges, and stop at labelled addresses.
- The report is dated: every figure is pinned to a block before its publication date, so later movements appear in the next edition.
The data it needs
Chain data, with some off-chain sources
- security_incidentsTo buildHacks and exploitsA registry of exploits, hacks and rug pulls: date, chain, protocol, attack type, amount lost and the transactions involved.
- address_labelsTo buildAddress labelsLabels for known addresses: exchanges, bridges, protocols, funds, treasuries, sanctioned addresses and known attackers.
- native_prices_dailyTo buildOracle prices by dayReference prices of major assets read from on-chain oracle feeds (Chainlink latestRoundData) at each day's last block, with each round's update time.
- Attack transactions and the token transfers out of victim contracts
- Attacker address flows through bridges, mixers and exchanges
- Public incident disclosures by the affected teams, recorded with their source
Questions
Questions people ask.
What counts as a hack or an exploit?
An incident where funds were taken from a protocol, bridge, exchange or wallet without the owners' consent, through a code flaw, a compromised key or a manipulated price. Rug pulls, where insiders remove liquidity, are listed separately.
How are losses valued?
Each stolen token amount is read from the attack transactions and valued at an on-chain oracle price at the block of the attack, so the value reflects what was taken at that moment rather than today's prices.
Are recovered funds subtracted?
Recoveries and bounties are shown beside each incident as their own transactions. The headline loss stays the amount taken, and the net figure shows what was not returned.
Where do stolen funds usually go?
Most attackers swap tokens into a liquid asset, bridge across chains and try to reach mixers or exchanges. The report follows those hops and names the labelled addresses where the trail stops.
- Oracle manipulation
- Moving the price a protocol reads, often with a flash loan, so it lends too much or liquidates wrongly.
- Rug pull
- When a token's creators or insiders withdraw its liquidity or dump their holdings, leaving buyers with tokens they cannot sell.
Related
More apps like this.
Stolen Crypto Tracker: Where Hacked Funds Went
Follow a hack's stolen funds hop by hop into bridges, swap protocols, mixers and exchanges, or see what still sits in attacker wallets.
Multi-chainBiggest Crypto Hacks of All Time, Ranked
The largest hacks and exploits on record, ranked by value taken at the time, with the attack type, the chain and how much came back.
Multi-chainNorth Korea Crypto Hacks: Lazarus Group Theft Tracker
Thefts attributed to North Korea-linked groups, what their attributed wallets still hold and how the funds move across chains.
Multi-chainEthereumBitcoinBitcoin Quantum Risk: BTC in Exposed Public Key Addresses
Bitcoin held in outputs whose public keys are already visible on-chain, split by script type and tracked day by day.
BitcoinWallet Drainer Tracker: Phishing Losses by Month
What wallet drainers take each month, on which chains and through which signatures: approvals, permits, NFT listings and delegations.
Multi-chainEthereumBuild Crypto Hacks and Exploits: Monthly Report on verified data.
Start free in Voltfin Studio: boards, tables and reports where every number opens its receipt. Tell us which data you need first and we will build it next.