Digital Asset
Intelligence

Hacked Event Broadcast

Live source archive

Verified blockchain security incidents with original evidence and historical event dates.

Filters

Historical events use their original event dates. Latest event dates first. Severity follows existing archive classifications.

Jun 2, 2018

1 verified update
The ZenCash encountered a 51% cyber attack or double-spend attack at around 8:26 PM on June 2nd (June 3rd 00:26 UTC). This attack resulted in the loss of Zen encrypted tokens worth approximately US $550,000. The ZenCash team responded immediately and implemented preventive mitigation measures, which greatly increased the difficulty of future cyber attacks.ExpandCollapse

The ZenCash encountered a 51% cyber attack or double-spend attack at around 8:26 PM on June 2nd (June 3rd 00:26 UTC). This attack resulted in the loss of Zen encrypted tokens worth approximately US $550,000. The ZenCash team responded immediately and implemented preventive mitigation measures, which greatly increased the difficulty of future cyber attacks.

Amount of loss
$ 550,000
Attack method
51% attack
BlockchainSecurity

May 29, 2018

1 verified update
The last repair was bypassed, resulting in another 51% attack and a loss of approximately US$4.82 million.ExpandCollapse

The last repair was bypassed, resulting in another 51% attack and a loss of approximately US$4.82 million.

Amount of loss
$ 4,820,000
Attack method
51% attack
BlockchainSecurity

May 24, 2018

2 verified updates
According to the SlowMist Zone disclosure, the BAI smart contract has the same vulnerabilities as the EDU, and can transfer the BAI Token in any account. There are also a large number of robbery.ExpandCollapse

According to the SlowMist Zone disclosure, the BAI smart contract has the same vulnerabilities as the EDU, and can transfer the BAI Token in any account. There are also a large number of robbery.

Attack method
Logic Vulnerability
OtherSecurity
EDU smart contract has critical vulnerability , and can transfer the EDU Token in any account.ExpandCollapse

EDU smart contract has critical vulnerability , and can transfer the EDU Token in any account.

Attack method
Logic Vulnerability
OtherSecurity

May 22, 2018

1 verified update
The attacker discovers and manipulates errors in the Verge code, causing false timestamps to be set on the block and then dig out new blocks quickly. The protocol of Verge is uses five mining algorithms in turn, and the attacker increases control over two of them: scrypt and lyra2re. The attack should be between block 2155850 and block 2206272. Within a few hours of the attack, the 35 million XVGs, which cost about $1.75 million, were stolen at the prevailing exchange rate.ExpandCollapse

The attacker discovers and manipulates errors in the Verge code, causing false timestamps to be set on the block and then dig out new blocks quickly. The protocol of Verge is uses five mining algorithms in turn, and the attacker increases control over two of them: scrypt and lyra2re. The attack should be between block 2155850 and block 2206272. Within a few hours of the attack, the 35 million XVGs, which cost about $1.75 million, were stolen at the prevailing exchange rate.

Amount of loss
35,000,000 XVG
Attack method
51% attack
ExchangeSecurity

May 21, 2018

1 verified update
TAYLOR’ve been hacked and all of our funds have been stolen. Not only the balance in ETH (2,578.98 ETH), but also the TAY tokens from the Team and Bounty pools. The only tokens that were not stolen are the ones from the Founders’ and Advisors’ pools, because there’s a vesting contract making them inaccessible for now.ExpandCollapse

TAYLOR’ve been hacked and all of our funds have been stolen. Not only the balance in ETH (2,578.98 ETH), but also the TAY tokens from the Team and Bounty pools. The only tokens that were not stolen are the ones from the Founders’ and Advisors’ pools, because there’s a vesting contract making them inaccessible for now.

Amount of loss
2,578.98 ETH
Attack method
1Password file stolen
ETH EcosystemSecurity

May 18, 2018

1 verified update
On May 18, a Reddit netizen posted that Monacoin suffered a 51% computing power attack, a selfish mining attack, and a time stamp attack. The exact time occurred from May 13 to May 15. Some exchanges that support Monacoin trading, such as Bittrex, Livecoin have closed Monacoin recharge.ExpandCollapse

On May 18, a Reddit netizen posted that Monacoin suffered a 51% computing power attack, a selfish mining attack, and a time stamp attack. The exact time occurred from May 13 to May 15. Some exchanges that support Monacoin trading, such as Bittrex, Livecoin have closed Monacoin recharge.

Amount of loss
$ 90,000
Attack method
51% attack
BlockchainSecurity

May 16, 2018

1 verified update
Bitcoin Gold was 51% attacked by an unknown attacker. This type of attack allows an attacker to manipulate the blockchain ledger that records transactions. During the attack, 388,000 BTG (worth approximately US$18 million) was stolen from several cryptocurrency exchanges. After the team refused to help pay for some of the losses, Bitcoin Gold was subsequently delisted from Bittrex.ExpandCollapse

Bitcoin Gold was 51% attacked by an unknown attacker. This type of attack allows an attacker to manipulate the blockchain ledger that records transactions. During the attack, 388,000 BTG (worth approximately US$18 million) was stolen from several cryptocurrency exchanges. After the team refused to help pay for some of the losses, Bitcoin Gold was subsequently delisted from Bittrex.

Amount of loss
388,201 BTG
Attack method
51% attack
WalletSecurity

Apr 25, 2018

2 verified updates
After logging in to the website for 10s, the user's wallet is emptied, the hacker hijacks the DNS server, and the user logs in to MyEtherWallet to force a redirect to the malicious website. The user was forced to redirect to a malicious website when logging in to MyEtherWallet.ExpandCollapse

After logging in to the website for 10s, the user's wallet is emptied, the hacker hijacks the DNS server, and the user logs in to MyEtherWallet to force a redirect to the malicious website. The user was forced to redirect to a malicious website when logging in to MyEtherWallet.

Amount of loss
$ 13,000,000
Attack method
DNS hijacking
WalletSecurity

Apr 22, 2018

1 verified update
Hacker exploited the data overflow to attack the smart contract of BeautyChain, successfully transferred the BEC token to the two addresses resulted in the massive BEC being sold in the market, and the value of the digital currency was almost zero, which brought a crushing blow to BEC market.ExpandCollapse

Hacker exploited the data overflow to attack the smart contract of BeautyChain, successfully transferred the BEC token to the two addresses resulted in the massive BEC being sold in the market, and the value of the digital currency was almost zero, which brought a crushing blow to BEC market.

Amount of loss
$ 1,000,000,000
Attack method
Overflow
OtherSecurity

Apr 12, 2018

1 verified update
A failed cold storage restoration exercise seems to have exposed private keys intended for offline storage (effectively making them online). However, the CEO has expressed an insider’s involvement. Police found private keys exposed online for more than 12 hours.ExpandCollapse

A failed cold storage restoration exercise seems to have exposed private keys intended for offline storage (effectively making them online). However, the CEO has expressed an insider’s involvement. Police found private keys exposed online for more than 12 hours.

Amount of loss
438 BTC
Attack method
Private Key Leakage
OtherSecurity

Apr 4, 2018

1 verified update
The Verge network was attacked by 51% for the first time. According to Bitcointalk forum user ocminer, a malicious miner can use forged timestamps to mine blocks, thereby tricking the network into thinking that the new block was mined one hour ago, so that when the next mined block is immediately added to the network, it also added to the blockchain. This allowed the attacker to mine one block per second, which is said to have mined 250,000 XVG.ExpandCollapse

The Verge network was attacked by 51% for the first time. According to Bitcointalk forum user ocminer, a malicious miner can use forged timestamps to mine blocks, thereby tricking the network into thinking that the new block was mined one hour ago, so that when the next mined block is immediately added to the network, it also added to the blockchain. This allowed the attacker to mine one block per second, which is said to have mined 250,000 XVG.

Amount of loss
250,000 XVG
Attack method
51% attack
BlockchainSecurity

Apr 2, 2018

1 verified update

Mar 7, 2018

1 verified update
Binance security incident occurred in March 2018 when a phishing campaign impacted a large number of Binance users. At the time, Binance offered a $250,000 reward for any information that would have led to the arrest of those involved in the phishing campaign.ExpandCollapse

Binance security incident occurred in March 2018 when a phishing campaign impacted a large number of Binance users. At the time, Binance offered a $250,000 reward for any information that would have led to the arrest of those involved in the phishing campaign.

Attack method
Unknown
OtherSecurity

Feb 19, 2018

1 verified update
A hacking organization in Ukraine has stolen cryptocurrencies worth more than $50 million from the Blockchain.info by purchasing keyword advertisements related to cryptocurrencies in the Google search engine and masquerading as malicious websites of legitimate websites.ExpandCollapse

A hacking organization in Ukraine has stolen cryptocurrencies worth more than $50 million from the Blockchain.info by purchasing keyword advertisements related to cryptocurrencies in the Google search engine and masquerading as malicious websites of legitimate websites.

Amount of loss
$ 50,000,000
Attack method
Phishing attack
BlockchainSecurity

Feb 12, 2018

1 verified update
BitGrail claims that $195 million of customers have stolen cryptocurrencies in Nano (XRB).ExpandCollapse

BitGrail claims that $195 million of customers have stolen cryptocurrencies in Nano (XRB).

Amount of loss
195,000,000 USD
Attack method
Unknown
OtherSecurity

Jan 26, 2018

1 verified update
Unidentified assailants stole 523 million NEM coins (about $534 million) from the exchange's hot wallet. According to Coincheck, NEM coins are kept on a single-signature hot wallet instead of a more secure multi-signature wallet, and the stolen coins are confirmed to be Coincheck customers.ExpandCollapse

Unidentified assailants stole 523 million NEM coins (about $534 million) from the exchange's hot wallet. According to Coincheck, NEM coins are kept on a single-signature hot wallet instead of a more secure multi-signature wallet, and the stolen coins are confirmed to be Coincheck customers.

Amount of loss
534,000,000 USD
Attack method
Wallet Stolen
WalletSecurity

Jan 13, 2018

1 verified update
User orbit84 posted on Reddit that a hacker entered his hosting provider account and changed the DNS settings to his own hosted version of BlackWallet. The attacker's wallet seems to have accumulated about $400,000 worth of cryptocurrency, and its market value has almost tripled in the past month. In a statement, the founder of BlackWallet claimed that the open source online "star wallet" BlackWallet had been hacked.ExpandCollapse

User orbit84 posted on Reddit that a hacker entered his hosting provider account and changed the DNS settings to his own hosted version of BlackWallet. The attacker's wallet seems to have accumulated about $400,000 worth of cryptocurrency, and its market value has almost tripled in the past month. In a statement, the founder of BlackWallet claimed that the open source online "star wallet" BlackWallet had been hacked.

Amount of loss
$ 400,000
Attack method
DNS hijacking
WalletSecurity

Dec 19, 2017

1 verified update
In the wee hours of December 19, Youbit was dealt a death blow in the form of another hack. The exchange, which was also hit in April, is closing down in the fallout of the most recent attack. As revealed on its website, they had been forced to terminate its services after suffering another hack. The hackers ran off with 17% of Youbit’s funds, enough to drive the exchange into bankruptcy.ExpandCollapse

In the wee hours of December 19, Youbit was dealt a death blow in the form of another hack. The exchange, which was also hit in April, is closing down in the fallout of the most recent attack. As revealed on its website, they had been forced to terminate its services after suffering another hack. The hackers ran off with 17% of Youbit’s funds, enough to drive the exchange into bankruptcy.

Attack method
Unknown
ExchangeSecurity