Awesome
All the Gutted DeFi Projects
Documenting the Attacks on Decentralized Finance, where the term "Post-Mortem" is a unfortunate norm
Table of Content
** No Rug Pulls & Scams Included
** Exploited/Lost calculates the lost value based on exchange rate at the time. Many times, the loss is presented in USD value since multiple tokens are lost.
** Any Loss over $10 million or 5000 ETH is bolded (calculated at $2000 per ETH)
** Some Post-Mortems are taken down after being released, so the links may not always work (in such case, use Wayback).
DeFi Attacks<a id="attacks"></a>
Last Update: Aug 30, 2021
| Date | Targeted Protocol | Exploited/Lost | Post-Mortem | Analysis | Audited? |
|---|---|---|---|---|---|
| —— | [END OF 2021] | —— | —— | —— | |
| TOTAL LOSS (so far) | ~ $720 mln <br />+ $300 mln Venus | ||||
| —— | [Aug 2021] | —— | —— | —— | |
| 30th | Cream Finance | $18.8 mln | Trail of Bits | ||
| 13th | Punk Protocol | $8.9 mln | Official | Halborn | No |
| 12th | DAO Maker | 2261 ETH ($7 mln) | Official | Symbolic | |
| 10th | Poly Network | Official Twitter | (Doxxed, returned) | No | |
| 4th | Popsicle Finance | $25 mln | Official | Flash Loan | Certik |
| TOTAL $41 mln | |||||
| —— | [Jul 2021] | —— | —— | —— | |
| 22nd | THORChain (2nd) | $800k ($8 mln hacked, <br />white hacker 10%) | Official Twitter | Certik | |
| 16th | PancakeBunny (2nd) | $2.1 mln | Official | Haechi | |
| 15th | BONDLY (MantraDAO) | $22 mln | Official | Zokyo, Trustlook | |
| THORChain | $5 mln (4000 ETH - slippage) | Certik | |||
| 11th | ChainSwap (2nd) | $4 mln | Official | No | |
| 10th | AnySwap | $7.9 mln | Official | SlowMist | |
| 2nd | ChainSwap (1st) | $800k | Official | No | |
| TOTAL $40 mln | |||||
| —— | [Jun 2021] | —— | —— | —— | |
| 29th | Merlin Labs (3th) | $330k<br />[total $1.6 mln] | gone? | PeckShield, rekt | |
| 28th | SafeDollar | $250k | Official | ||
| 23th | Eleven Finance (NRV) | $4.5 mln | Official | ||
| 21st | Impossible Finance | $500k | Official | Knownsec | |
| 19th | Visor Finance | $500k | Official | ||
| 3rd | PancakeHunny | $86k | Official | ||
| TOTAL $6 mln | |||||
| —— | [May 2021] | —— | —— | —— | |
| 30th | Belt Finance | $50 mln | Official | Knownsec, rekt | |
| 28th | Burgerswap | $7.2 mln | Decrypt | ||
| JulSwap | $700k | Official | |||
| 27th | Merlin Labs (2nd) | 200+ ETH | rekt | ||
| 26th | Merlin Labs (1st) | $680k | Official | rekt | |
| 24th | Bogged Finance | $3.6 mln | Peckshield | ||
| 20th | PancakeBunny | $45 mln | Official | cmichel | |
| 19th | Venus Protocol | $200 mln liquidated<br />+ $100 mln bad loan | Official | Igamberdiev | |
| 16th | VaultSX | $13.5 mln | Official | cmichel | |
| bVaults (bEarn) | $11 mln | Official | |||
| 12th | xBNTa & xSNXa (xToken) | $24.5 mln | Official | ||
| 8th | Rari Capital | 2600 ETH | Official | ||
| 7th | Value DeFi [2nd] | $10 mln | Official | rekt | |
| 5th | Value DeFi [3rd] | $11 mln <br />[total $28mln] | gave up? | rekt | |
| 2nd | Spartan Protocol | $40+ mln | Official | rekt | |
| TOTAL $233 mln<br />+ $300 mln Venus | |||||
| —— | [Apr 2021] | —— | —— | —— | |
| 28th | Uranium Finance | $50 mln | Official (Wayback) | CertiK | |
| 20th | EasyFi | $80 mln | Official (Wayback) | Halborn | |
| 5th | Polkatrian | $3 mln | Official Response | ||
| 4th | xFORCE (Force DAO) | 183 ETH (+ white hack) | Official | ||
| TOTAL $133 mln | |||||
| —— | [Mar 2021] | —— | —— | —— | |
| 14th | Social Money (Roll) | 2857 ETH | rekt | ||
| 9th | DODO Pool | $3.8 mln | Official | ||
| 5th | PAID Network | $160 mln | Official | Halborn | |
| TOTAL $170 mln | |||||
| —— | [Feb 2021] | —— | —— | —— | |
| 27th | Furucombo | $15 mln | Official | ||
| 13th | Alpha Homora <br />(Cream Finance) | $37.5 mln | Official | ||
| 8th | BT Finance | $1.7 mln | Official | ||
| Growth DeFi (rAAVE) | $1.3 mln | Official | rekt | ||
| 4th | Yearn (v1 yDAI) | 11 mln DAI | Official | ||
| TOTAL $66.5 mln | |||||
| —— | [Jan 2021] | —— | —— | —— | |
| 19th | Saddle Finance | 7.9 BTC (slippage) | Official | rekt | |
| 2th | yCredit Finance | $11 mln | BlockSec, banteng | ||
| TOTAL $11 mln | |||||
| —— | [END OF 2020] | —— | —— | —— | |
| TOTAL LOSS | ~ $158 mln<br />+ $103 mln Compound | ||||
| —— | [Dec 2020] | —— | —— | —— | |
| 28th | Cover Protocol | $5 mln + more | Official | ||
| 17th | Warp Finance | $7.7 mln | Official | SlowMist | |
| TOTAL $13.7 mln | |||||
| —— | [Nov 2020] | —— | —— | —— | |
| 30th | SushiSwap | $150k | SlowMist | ||
| 27th | Compound | $103 mln liquidated | Bitcoin.com | ||
| 22th | Pickle Finance | $19 mln | Official | Banteg, rekt | |
| 17th | Origin Protocol (OUSD) | $7 mln | Official | ||
| 14th | Value DeFi [1st] | $7 mln | Official | rekt | |
| 12th | Akropolis | 2 mln DAI | Official | ||
| TOTAL $35.1 mln<br />+ $103 mln Compound | |||||
| —— | [Oct 2020] | —— | —— | —— | |
| 26th | Harvest Finance | $33.8 mln | Official | TheBlock | |
| TOTAL $33.8 mln | |||||
| —— | [Sep 2020] | —— | —— | —— | |
| 29th | Eminence Finance | $15 mln | rekt | ||
| 15th | iToken (bZx) | $8.1 mln (returned) | Official | ||
| 11th | SushiSwap | $13.8 mln (price crash) | Chef Nomi | ZDNet | |
| ?? | SYFI | $300k | |||
| TOTAL $29 mln | |||||
| —— | [Aug 2020] | —— | —— | —— | |
| 30th | Chainlink | 700 ETH (spam attack) | CryptoBriefing | ||
| 10th | Opyn Protocol | $370k | Official | PeckShield | |
| TOTAL $1.8 mln | |||||
| —— | [Jun 2020] | —— | —— | —— | |
| 28th | Balancer Protocol | $500k | Official | ||
| TOTAL $0.5 mln | |||||
| —— | [Apr 2020] | —— | —— | —— | |
| 18th | LendF.me | $25 mln | PeckShield | ||
| imBTC Uniswap Pool | $300k | pNetwork, DeFi Rate | |||
| TOTAL $25.3 mln | |||||
| —— | [Mar 2020] | —— | —— | —— | |
| 12th | MakerDAO | $9 mln | Official | Blocknative | |
| TOTAL $9 mln | |||||
| —— | [Feb 2020] | —— | —— | —— | |
| 17th | bZx | 4698.02 ETH | Official | PeckShield, palkeo | |
| TOTAL $9.4 mln | |||||
| —— | [END OF 2019] | —— | —— | —— | |
| TOTAL LOSS | ~ $2.5 mln | ||||
| —— | [Dec 2019] | —— | —— | —— | |
| 26th | Synthetix | $2.5 mln | TheBlock | ||
| TOTAL $2.5 mln | |||||
| —— | [Jun 2019] | —— | —— | —— | |
| 24th | Synthetix | 37 mln sETH <br />($74 bln @ $2,000/sETH) | TheBlock, Etherscan | ||
| TOTAL $74 bln |
Miscellaneous<a id="misc"></a>
| Date | Targeted Protocol | Exploited/Lost | Post-Mortem | Analysis | Note |
|---|---|---|---|---|---|
| [Jun 2021] | |||||
| 21st | Alchemix | $6.5 mln | Official 1, Official 2 | SlowMist, rekt | Reward calcultion error,<br />users received more |
| 16th | Iron Finance & TITAN | $2 bln<br />(+ Mark Cuban) | Official | rekt, Jeiwan | Bank-run<br /> |
| [Feb 2020] | |||||
| 27th | Andre Cronje of yearn.finance | $562k | Andre Cronje |
Other Resources<a id="other"></a>
Similar compilation: OpenBlockSec; OpenZeppelin Post-Mortems; rekt.news; Halborn
Interesting Hack Loss Leaderboard (from rekt.news)