124 publicly reported attacks on centralised exchanges, about $13.32B stolen in total. Amounts are estimates at the time of each incident.
Other
2026-11-02
Source: DefiLlama · 2026-11-09 · Also reported by: coindesk.com, decrypt.co, cointelegraph.com, theblock.co, coinpost.jpUpdate 2026-11-03: Some funds frozen or recovered (chainalysis.com, chainalysis.com)Update 2026-11-03 – 2026-11-04: Exchange says it will cover losses (coindesk.com, decrypt.co, coinpost.jp)Update 2026-11-06: Investigation findings (decrypt.co)
Wallet keys compromised
2026-10-29
Source: DefiLlama · 2026-11-09 · Also reported by: trmlabs.com, coinpost.jpUpdate 2026-10-30 – 2026-11-05: Exchange says it will cover losses (binance.com, binance.com, coindesk.com, )Update 2026-10-31 – 2026-11-06: Investigation findings (fbi.gov, coinpost.jp, coindesk.com, )Update 2026-10-31 – 2026-11-07: Withdrawals resuming (Binance (x.com), coindesk.com, cointelegraph.com, )Update 2026-10-31 – 2026-11-03: Some funds frozen or recovered (decrypt.co, coindesk.com)Update 2026-11-02 – 2026-11-03: Withdrawals resumed (theblock.co, cointelegraph.com, cointelegraph.com, )
Wallet keys compromised
2026-10-21
Source: DefiLlama · 2026-11-09 · Also reported by: decrypt.coUpdate 2026-10-26: Exchange says it will cover losses (coinpost.jp)
BitgetWallet keys compromised
2026-09-24
Source: Bitget · 2026-11-09 · Also reported by: DefiLlama, theblock.co, coindesk.com, trmlabs.com, coindesk.com, cointelegraph.comUpdate 2026-09-28: Withdrawals resuming (theblock.co)Update 2026-09-28: Withdrawals resumed (cointelegraph.com)Update 2026-09-28 – 2026-10-04: Investigation findings (coindesk.com, cointelegraph.com, theblock.co, )Update 2026-09-29: Some funds frozen or recovered (cointelegraph.com)
| Date | Exchange | How it happened | Estimated loss |
|---|---|---|---|
| 2026-11-02 Source: DefiLlama · 2026-11-09 · Also reported by: coindesk.com, decrypt.co, cointelegraph.com, theblock.co, coinpost.jpUpdate 2026-11-03: Some funds frozen or recovered (chainalysis.com, chainalysis.com)Update 2026-11-03 – 2026-11-04: Exchange says it will cover losses (coindesk.com, decrypt.co, coinpost.jp)Update 2026-11-06: Investigation findings (decrypt.co) | Other | ≈ $40.0M | |
| 2026-11-02 Source: DefiLlama · 2026-11-09 · Also reported by: cointelegraph.com | Other | ≈ $391.0K | |
| 2026-10-29 Source: DefiLlama · 2026-11-09 · Also reported by: trmlabs.com, coinpost.jpUpdate 2026-10-30 – 2026-11-05: Exchange says it will cover losses (binance.com, binance.com, coindesk.com, )Update 2026-10-31 – 2026-11-06: Investigation findings (fbi.gov, coinpost.jp, coindesk.com, )Update 2026-10-31 – 2026-11-07: Withdrawals resuming (Binance (x.com), coindesk.com, cointelegraph.com, )Update 2026-10-31 – 2026-11-03: Some funds frozen or recovered (decrypt.co, coindesk.com)Update 2026-11-02 – 2026-11-03: Withdrawals resumed (theblock.co, cointelegraph.com, cointelegraph.com, ) | Wallet keys compromised | ≈ $6.36B | |
| 2026-10-21 Source: DefiLlama · 2026-11-09 · Also reported by: decrypt.coUpdate 2026-10-26: Exchange says it will cover losses (coinpost.jp) | CoinDCX | Wallet keys compromised | ≈ $16.0M |
| 2026-09-24 Source: Bitget · 2026-11-09 · Also reported by: DefiLlama, theblock.co, coindesk.com, trmlabs.com, coindesk.com, cointelegraph.comUpdate 2026-09-28: Withdrawals resuming (theblock.co)Update 2026-09-28: Withdrawals resumed (cointelegraph.com)Update 2026-09-28 – 2026-10-04: Investigation findings (coindesk.com, cointelegraph.com, theblock.co, )Update 2026-09-29: Some funds frozen or recovered (cointelegraph.com) | Bitget | Wallet keys compromised | ≈ $387.5M |
| 2026-04-16 Source: DefiLlama · 2026-11-09 | Grinex | Wallet keys compromised | ≈ $13.7M |
| 2025-11-26 Source: DefiLlama · 2026-11-09 |  Upbit | Malware or supply chain | ≈ $36.0M |
| 2025-09-09 Source: DefiLlama · 2026-11-09 | SwissBorg | API or session keys stolen | ≈ $41.5M |
| 2025-08-14 Source: DefiLlama · 2026-11-09 |  BtcTurk | Wallet keys compromised | ≈ $48.0M |
| 2025-08-13 Source: DefiLlama · 2026-11-09 | Other | ≈ $300.0K | |
| 2025-07-24 Source: DefiLlama · 2026-11-09 |  WOO X | Phishing or social engineering | ≈ $14.0M |
| 2025-07-19 Source: DefiLlama · 2026-10-09 | CoinDCX CEX | Wallet keys compromised | ≈ $44.2M |
| 2025-07-19 Source: DefiLlama · 2026-11-09 | CoinDCX | Wallet keys compromised | ≈ $44.2M |
| 2025-07-16 Source: DefiLlama · 2026-11-09 | Malware or supply chain | ≈ $27.0M | |
| 2025-06-18 Source: DefiLlama · 2026-11-09 | Nobitex | Malware or supply chain | ≈ $82.0M |
| 2025-05-08 Source: DefiLlama · 2026-11-09 | Wallet keys compromised | ≈ $11.5M | |
| 2025-04-20 Source: DefiLlama · 2026-11-09 | Bitget | System flaw | ≈ $100.0M |
| 2025-02-21 Source: DefiLlama · 2026-11-09 | Wallet keys compromised | ≈ $1.40B | |
| 2025-01-23 Source: DefiLlama · 2026-11-09 | Wallet keys compromised | ≈ $85.0M | |
| 2024-11-28 Source: DefiLlama · 2026-11-09 | Wallet keys compromised | ≈ $1.7M | |
| 2024-10-31 Source: DefiLlama · 2026-11-09 | M2 | Wallet keys compromised | ≈ $13.7M |
| 2024-09-20 Source: DefiLlama · 2026-11-09 | Wallet keys compromised | ≈ $43.3M | |
| 2024-09-10 Source: DefiLlama · 2026-11-09 |  Indodax | Wallet keys compromised | ≈ $25.2M |
| 2024-07-18 Source: DefiLlama · 2026-11-09 |  WazirX | Wallet keys compromised | ≈ $234.9M |
| 2024-06-22 Source: DefiLlama · 2026-11-09 | BtcTurk | Wallet keys compromised | ≈ $54.0M |
| 2024-06-20 Source: DefiLlama · 2026-11-09 | OKX NFT Aggregator | System flaw | ≈ $14.0K |
| 2024-06-04 Source: DefiLlama · 2026-11-09 | Lykke | Wallet keys compromised | ≈ $22.4M |
| 2024-05-31 Source: DefiLlama · 2026-11-09 | DMM Bitcoin | Phishing or social engineering | ≈ $305.0M |
| 2024-04-29 Source: DefiLlama · 2026-11-09 | Rain | Wallet keys compromised | ≈ $14.8M |
| 2024-03-31 Source: DefiLlama · 2026-11-09 | FixedFloat | Wallet keys compromised | ≈ $3.0M |
| 2024-02-13 Source: DefiLlama · 2026-11-09 | DuelBits | Malware or supply chain | ≈ $4.6M |
| 2024-01-06 Source: DefiLlama · 2026-11-09 | CoinsPaid | Wallet keys compromised | ≈ $7.5M |
| 2023-12-27 Source: DefiLlama · 2026-11-09 | Thunder Terminal | Wallet keys compromised | ≈ $240.0K |
| 2023-12-20 Source: DefiLlama · 2026-11-09 | INX Digital Company | Wallet keys compromised | ≈ $1.6M |
| 2023-11-22 Source: DefiLlama · 2026-11-09 |  HTX | Wallet keys compromised | ≈ $13.6M |
| 2023-11-10 Source: DefiLlama · 2026-11-09 |  Poloniex | Malware or supply chain | ≈ $126.0M |
| 2023-11-09 Source: DefiLlama · 2026-11-09 | CoinSpot | Wallet keys compromised | ≈ $2.4M |
| 2023-09-25 Source: DefiLlama · 2026-11-09 | HTX | Wallet keys compromised | ≈ $8.0M |
| 2023-09-15 Source: DefiLlama · 2026-11-09 | Remitano | Wallet keys compromised | ≈ $2.7M |
| 2023-09-12 Source: DefiLlama · 2026-11-09 |  CoinEx | Wallet keys compromised | ≈ $55.0M |
Source: the public hacks database maintained by DefiLlama. We link each exchange that we track; we do not edit the figures. A hack DefiLlama has not listed yet can appear earlier, linked to the reports. At first it is marked as reported and not verified by us: it does not affect the score, and it is shown publicly only once a second independent source reports it. It is confirmed and counted once DefiLlama lists it, the exchange itself confirms it, or two independent major outlets report it. Until DefiLlama lists it, the amount is the one the reports give, and the smallest figure when they differ. A report not confirmed within 72 hours is withdrawn, and the exchange page says so. Once DefiLlama lists it, its figures replace ours. defillama.com/hacks