Web3 HackHub: Gain Insights into Blockchain Hacks

Explore through all the hacks since 2011. Delve into a comprehensive database of blockchain breaches, providing insights into the evolution of cybersecurity challenges and the lessons learned from each incident since 2011.

$2.25 Billion

Total Amount Hacked

90

Total Hacks Recorded

Attack Trends

Token
30
Other
19
Borrowing and Lending
10
Yield Aggregator
7
CeFi
6
Exchange (DEX)
5
Gaming / Metaverse
5
Bridge
4
Stablecoin
2
NFT
2

Infini

Ethereum

Date: 2/24/2025

Amount: $50,000,000 USD

Method: Access Control

Category: Stablecoin

Description: On February 24, 2025, stablecoin payment platform Infini suffered a $50 million exploit, allegedly carried out by a developer who retained administrative privileges after contract deployment. The attacker withdrew $49.52 million in USDC, swapped it for DAI and then 17,696 ETH, using Tornado Cash for anonymity.

Ref: Link

Bybit

Ethereum

Date: 2/21/2025

Amount: $1,400,000,000 USD

Method: Compromised Infrastructure

Category: CeFi

Description: On February 21, 2025, Bybit suffered a $1.46 billion breach due to a multisig cold wallet vulnerability exploited via phishing and smart contract manipulation, resulting in the theft of 401,346 ETH and other assets.

Ref: Link

StepHeroNFTs

Binance

Date: 2/21/2025

Amount: $90,000 USD

Method: Reentrancy

Category: NFT

Description: On February 21, 2025, StepHeroNFTs on BSC lost $90,000 due to a reentrancy vulnerability in the claimReferral() function, allowing recursive fund drainage.

Ref: Link

LIBRA Meme

Solana

Date: 2/16/2025

Amount: $286,000,000 USD

Method: Rug Pull

Category: Token

Description: On February 16, 2025, LIBRA memecoin collapsed in a $286M rug pull orchestrated by insiders after promotion by Argentina’s President Javier Milei, wiping out $4.4 billion in market cap.

Ref: Link

zkLend

Ethereum

Date: 2/12/2025

Amount: $9,500,000 USD

Method: Precision Loss

Category: Borrowing and Lending

Description: On February 12, 2025, zkLend lost $9.5M (3,600 ETH) due to a rounding error in the mint() function, exploited to inflate balances via lending_accumulator manipulation.

Ref: Link

OpenOcean

Base

Date: 2/11/2025

Amount: $22,000 USD

Method: Logic Errors

Category: Exchange (DEX)

Description: On February 11, 2025, OpenOcean lost $22K in an attack on its Limit Order contract, mitigated by pausing the contract and securing user funds.

Ref: Link

Four.Meme

Binance

Date: 2/11/2025

Amount: $183,000 USD

Method: Logic Errors

Category: Gaming / Metaverse

Description: On February 11, 2025, Four.Meme lost $183K due to an exploit targeting its PancakeSwap LP, which was paused to prevent further losses.

Ref: Link