Live crypto hacks and incidents

This page lists every reported crypto hack and exploit, newest first, with the amount stolen, the chains involved and the attack technique. Data comes from DefiLlama's public hacks database, refreshed every 30 minutes, plus live anomalies spotted by CryptGuard Exchange Watch on major exchange hot wallets. The largest incident of 2026 so far is the October 29 Binance hot-wallet drain. Read our analysis.

Most money is lost in three ways. Private keys or signers get compromised through leaked infrastructure keys, malware or a signer approving a disguised transaction, as in the Bybit and Binance incidents. Smart contracts have bugs such as broken access control, price-oracle manipulation or reentrancy. And users get phished into signing approvals, permits or EIP-7702 authorizations that hand over their wallet. Bridges and rug pulls make up much of the rest.

Stop interacting with it and do not click links claiming to offer refunds or "migrations"; those are usually follow-up scams. Revoke any token approvals you gave the protocol with the token approval checker, and check your wallet for unexpected EIP-7702 delegations with the wallet scanner. If funds left your wallet, follow the wallet hacked emergency kit. Watch only the protocol's official channels for compensation updates.

CryptGuard checks watched wallets every 30 seconds on 7 chains for new EIP-7702 delegations, risky token approvals, Safe multisig changes and sudden outflows, and alerts you in the console and on Telegram, Discord or Slack. Exchange Watch snapshots major exchange hot and cold wallets every minute and flags the takeover pattern behind the Binance drain. Before you sign, the Signature Inspector decodes and simulates the request so a disguised drain is caught first.