Every recorded crypto hack, exploit and theft
Hacks, exploits, phishing, scams, rug pulls, collapses and frauds since 2011, merged from five public sources, each incident checked across sources and, where an attack transaction is known, on chain. Filter it, open any row, download all of it.
How much was taken each year, and how
Dollar loss at the time of each incident, split by how the attacker got in. Follows the filters below (thefts by default). Click a year to filter everything to it.
The biggest incidents and the methods behind them
Both lists follow the filters in the incident list. Pick "Centralized exchange" as the target to see what goes wrong at exchanges.
Largest incidents
Methods by dollars lost
Who did it, when an authority has said so
Only attribution published by a law enforcement agency is shown, with the statement it comes from. Press and analytics firm attributions are left out.
Search the full list
Open a row for what happened, the sources that report it and how far they agree. "Thefts" covers hacks, exploits, phishing, scams and rug pulls; pick a kind to see collapses, frauds and costly mistakes.
Where this comes from and what was cleaned
Collected by script from five public sources, merged, then checked: across sources, on chain for every known attack transaction, and by repeating the whole run, which must agree with the last one before anything is published. Nothing is typed in by hand except attribution notes, each tied to its statement.
Sources
Checks, this release
Read the numbers carefully
Losses are US dollars at the time, as the sources give them; when sources disagree the range is shown and the incident is marked B. A single source for a loss of $500M or more is kept out of totals until a second source confirms it. "Returned" is what a source states, which can mix funds given back, frozen and covered by the victim. Attack transactions and addresses are checked but not published here.Query API
Free, no key. Same public data as the page; an hour of edge cache.
/api/incidents?kind=theft&year=2022&chain=Ethereum&min=1000000&sort=usd&limit=50
/api/incidents?q=ronin&kind=all/api/incidents?target=CEX&back=1/api/incidents?id=<incident id>
Filters: q, kind (theft, all, hack, phishing, scam, rugpull, collapse, fraud, other, followup), year, from, to, chain, target, family, min, conf (A, B, C), onchain=1, back=1, sort (date, usd), limit (up to 500), offset. Answers carry total, usd, next and a page link per incident.
Embed the latest hacks
A small live list for a news site, a blog or a community page. Options: n (1 to 10), theme (dark, light), chain, min.
<iframe src="https://swan-hack-tracker.pages.dev/embed/latest/?n=5&theme=dark" width="360" height="380" style="border:0;border-radius:12px" loading="lazy" title="Latest crypto hacks"></iframe>