Access Control
20423.7% of all incidents
$452M reported in deep dives
- Nomad Bridge$190M
- Compound$147M
- Infini$49.5M
Intelligence
Attack-class intelligence
How often each root cause hits, how much it cost, and how the attack classes moved from year to year.
Root-cause classes
Oracle / Price Manipulation
15818.4% of all incidents
$406M reported in deep dives
- BonqDAO$120M
- PancakeBunny$45M
- Harvest Finance$33.8M
Business Logic
15718.3% of all incidents
$42.1M reported in deep dives
- Team Finance$15.8M
- Abracadabra (II)$13M
- dYdX v3$9M
Token Logic
738.5% of all incidents
- EST / BNBDepositMar 2026
- LAXO TokenFeb 2026
- MT TokenJan 2026
Reentrancy
546.3% of all incidents
$92.3M reported in deep dives
- Hedgey Finance$44.7M
- Cream Finance (1st)$18.8M
- Agave DAO & Hundred Finance$11.7M
Key Compromise
374.3% of all incidents
$2.2B reported in deep dives
- Poly Network$611M
- WazirX$235M
- Wintermute (II)$160M
Flash Loan
323.7% of all incidents
$657M reported in deep dives
- Euler Finance$197M
- Beanstalk$181M
- Cream Finance (2nd)$130M
Rounding / Precision
242.8% of all incidents
$21M reported in deep dives
- KiiChain$9.7M
- Abracadabra (I)$6.5M
- Radiant Capital$4.5M
Signature Validation
212.4% of all incidents
$361M reported in deep dives
- Wormhole$326M
- Wintermute (I)$27.6M
- KiloEx$7.5M
Input Validation
192.2% of all incidents
$27.8M reported in deep dives
- Transit Swap$21M
- TempleDAO$2.3M
- Aztec Connect$2.3M
Infinite Mint
172.0% of all incidents
$109M reported in deep dives
- Qubit Finance$80M
- Yearn (II)$10M
- Cover Protocol$9.4M
Bridge
151.7% of all incidents
$1.1B reported in deep dives
- Ronin Network$624M
- KelpDAO (rsETH / LayerZero DVN)$290M
- Multichain (II)$126M
Arithmetic
131.5% of all incidents
$71M reported in deep dives
Open the incidentsRug Pull
111.3% of all incidents
$43.9M reported in deep dives
- ZKasino$33M
- Kokomo Finance$4M
- Lucky Star Currency / FSL$2.8M
MEV / Slippage
60.7% of all incidents
$9.7M reported in deep dives
- Jimbo's Protocol$7.5M
- Platypus Finance (II)$2.2M
- Peapods FinanceFeb 2025
Misconfiguration
60.7% of all incidents
$49.3M reported in deep dives
- Pickle Finance$19.7M
- Furucombo$14M
- Punk Protocol$9M
Frontend / Web2
60.7% of all incidents
$325M reported in deep dives
- Mixin Network$200M
- Badger DAO$120M
- JayPegs Automart (Sushi MISO)$3.1M
Governance
40.5% of all incidents
$21M reported in deep dives
Open the incidentsDoS / Griefing
20.2% of all incidents
- Saturn Protocol (sUSDat)Apr 2026
- AkutarApr 2022
Other
10.1% of all incidents
$11.1M reported in deep dives
- Rari Capital$11.1M
Intelligence
Attack classes over the years
Incidents per class and year. Darker = more incidents. Click a cell to open them.
| Class | 2017 | 2018 | 2020 | 2021 | 2022 | 2023 | 2024 | 2025 | 2026 |
|---|---|---|---|---|---|---|---|---|---|
| Access Control | 2 | 3 | 12 | 41 | 51 | 66 | 26 | 3 | |
| Oracle / Price Manipulation | 5 | 14 | 29 | 53 | 30 | 20 | 7 | ||
| Business Logic | 9 | 12 | 48 | 52 | 31 | 5 | |||
| Token Logic | 1 | 19 | 24 | 15 | 11 | 3 | |||
| Reentrancy | 1 | 3 | 7 | 11 | 23 | 7 | 1 | 1 | |
| Key Compromise | 1 | 11 | 5 | 7 | 5 | 5 | 3 | ||
| Flash Loan | 5 | 14 | 5 | 7 | 1 | ||||
| Rounding / Precision | 1 | 2 | 11 | 7 | 2 | 1 | |||
| Signature Validation | 2 | 7 | 3 | 4 | 4 | 1 | |||
| Input Validation | 4 | 9 | 2 | 1 | 3 | ||||
| Infinite Mint | 2 | 2 | 4 | 2 | 3 | 3 | 1 | ||
| Bridge | 2 | 4 | 5 | 4 | |||||
| Arithmetic | 2 | 2 | 2 | 1 | 3 | 3 | |||
| Rug Pull | 4 | 1 | 3 | 3 | |||||
| MEV / Slippage | 1 | 4 | 1 | ||||||
| Misconfiguration | 1 | 2 | 1 | 2 | |||||
| Frontend / Web2 | 3 | 1 | 2 | ||||||
| Governance | 1 | 1 | 2 | ||||||
| DoS / Griefing | 1 | 1 | |||||||
| Other | 1 |