Registry
Incidents
Browse bridge incident cases with evidence-backed outcome tracking.
| Incident | Date | Bridge | Type | Reported loss | Recovery | Reimbursement | Outcome | Resolution | Maturity | Freshness |
|---|---|---|---|---|---|---|---|---|---|---|
Symbiosis 2026 BridgeV2 syBTC incidentOn September 11, 2026, Blockaid-derived reports identif… | 2026-09-11 | Symbiosis | Exploit | About $336,000 realized; final loss unresolved | Unknown | Unknown | Unknown | Unresolved | reviewed | current |
ICON–SODAX 2026 withdrawal-message replay exploitOn August 27, 2026, an attacker replayed two previously… | 2026-08-27 | ICON–SODAX Migration Bridge | Exploit | 150.2 ETH + 31,204 USDC confirmed net loss | Partial Recovery | Unknown | Active After Incident | Unresolved | reviewed | current |
SKALE IMA Bridge 2026 validator-infrastructure compromiseAt approximately 21:00 UTC on August 27, 2026, infrastr… | 2026-08-27 | SKALE IMA Bridge | Exploit | Unknown — under assessment | Unknown | Unknown | Unknown | Unresolved | reviewed | current |
The Sandbox 2026 Base/BSC bridge-configuration exploitBeginning around 23:41 UTC on August 21, 2026, an attac… | 2026-08-21 | The Sandbox SAND Bridge | Exploit | 14,742,341.84 SAND (about $697,000) | Unknown | In Progress | Unknown | Unresolved | reviewed | current |
MAYAChain 2026 chained accounting exploitOn August 18, 2026, an attacker used a single transacti… | 2026-08-18 | Maya Protocol / MAYAChain | Exploit | Approximately $1.7 million direct extraction | Unknown | Unknown | Unknown | Unresolved | reviewed | current |
XRPL-TX Bridge August 2026 XRP lossIndependent reproducible on-chain analysis supports a g… | 2026-08-09 | XRPL-TX Bridge | Exploit | 199,916.3 XRP were independently reproduced as the gross total of 94 successful outgoing XRP payments over about 87 minutes. | Unknown | Unknown | Unknown | Unresolved | reviewed | current |
Oraichain August 2026 unauthorized cross-chain ORAI mintDuring August 8–9, 2026, Oraichain detected abnormal ma… | Approx. 2026-08-08 | Oraichain EVM cross-chain transfer path | Exploit | No canonical USD loss is assigned. Oraichain later reported approximately 3.9 million unauthorized ORAI still traced to centralized exchanges; that quantity is an outstanding-assets claim, not a gross-loss valuation. | Unknown | Unknown | Limited After Incident | Unresolved | reviewed | current |
ChainConnect 2026 Alien Proxy callback exploitOn July 26, 2026, missing sender verification in a Chai… | 2026-07-26 | ChainConnect | Exploit | SlowMist reports an approximately USD 650,000 incident estimate. Venom separately reports ~USD 615,000 as the returned 82.9%; BIR does not treat either as an exact canonical gross loss because claim scope and valuation timing differ. | Partial Recovery | Unknown | Unknown | Unresolved | reviewed | current |
Verus-Ethereum Bridge July 2026 import verification exploitOn July 23, 2026, the Verus-Ethereum Bridge was exploit… | 2026-07-23 | Verus-Ethereum Bridge | Exploit | about $7.54 million | Unknown | Unknown | Paused Long Term | Unresolved | reviewed | current |
AFX Bridge 2026 validator infrastructure compromiseOn July 22, 2026, a software-supply-chain and internal-… | 2026-07-22 | AFX Bridge | Exploit | about $24.15 million | Unknown | Unknown | Unknown | Unresolved | reviewed | current |
WanBridge 2026 Cardano–BNB NIGHT exploitApproximately 515 million NIGHT were reported drained f… | 2026-07-20 | WanBridge | Exploit | Independent security and technical reporting records approximately 515 million NIGHT drained from the Cardano side of the bridge. | Unknown | Unknown | Unknown | Unresolved | reviewed | current |
Allbridge Core 2026 Solana pool exploitOn July 19, 2026, Allbridge Core's Solana stablecoin li… | 2026-07-19 | Allbridge Core | Exploit | $1.65 million | Unknown | Unknown | Active After Incident | Unresolved | reviewed | current |
Taiko Bridge June 2026 forged proof/state exploitOn June 21, 2026, an attacker used an exposed SGX prove… | 2026-06-21 | Taiko Bridge | Exploit | about $1.75 million | Partial Recovery | Completed | Active After Incident | Unresolved | reviewed | current |
Axelar–Secret IBC Bridge 2026 source-channel validation exploitOn June 10, 2026, the Secret-side ics20-for-axelar cont… | 2026-06-10 | Axelar–Secret IBC Bridge | Exploit | about USD 4.67 million | None | Announced | Paused Long Term | Unresolved | reviewed | current |
Syscoin UTXO–NEVM Bridge 2026 exploitOn June 7, 2026, the Syscoin UTXO-to-NEVM bridge was ex… | 2026-06-07 | Syscoin UTXO–NEVM Bridge | Exploit | about $10 million | Full Recovery | Not Applicable | Paused Long Term | Unresolved | reviewed | current |
Alephium Bridge 2026 forged-message exploitAn attacker deployed a fake-event contract on Alephium… | 2026-05-30 | Alephium Bridge | Exploit | about $815,000 | None | Unknown | Paused Long Term | Unresolved | reviewed | current |
Butter Bridge V3.1 2026 unauthorized MAPO mint exploitA flaw in Butter Bridge V3.1’s OmniServiceProxy cross-c… | 2026-05-20 | Butter Bridge V3.1 | Exploit | about $180,000 extracted liquidity | Unknown | Announced | Limited After Incident | Unresolved | reviewed | current |
Verus-Ethereum Bridge May 2026 import verification exploitIn May 2026, the Verus-Ethereum Bridge suffered a separ… | Approx. 2026-05-18 | Verus-Ethereum Bridge | Exploit | about $11.4–11.6 million | Partial Recovery | In Progress | Active After Incident | Unresolved | reviewed | current |
THORChain 2026 GG20 TSS vault exploitIn May 2026, a newly churned node operator exploited a… | 2026-05-15 | THORChain | Exploit | $10.7 million official estimate; more than $11 million later analytics estimate | Unknown | Unknown | Paused Long Term | Unresolved | reviewed | current |
TAC Inner Bridge 2026 jetton verification exploitOn May 11, 2026, TAC's TON-to-TAC sequencer path accept… | 2026-05-11 | TAC Inner Bridge | Exploit | about $2.85 million | Partial Recovery | Announced | Paused Long Term | Unresolved | reviewed | current |
Cellframe Bridge 2026 hack and illegal token issuanceIn a May 14, 2026 AMA, Cellframe said the team had anno… | 2026-05 | Cellframe Bridge | Exploit | Approximately $2,000 was cited for illegal token issuance; total incident damage was explicitly not yet calculated. | Partial | Unknown | Limited After Incident | Unresolved | reviewed | current |
Commons Bridge 2026 proxy compromiseThe Commons Bridge proxy on Base was compromised and ap… | 2026-04-29 | Commons Bridge | Exploit | Approximately USD 330,000–400,000 realized proceeds | None | Completed | Dead After Incident | Final outcome known | reviewed | current |
KelpDAO 2026 rsETH bridge RPC/DVN compromiseOn April 18, 2026, attackers compromised LayerZero Labs… | 2026-04-18 | KelpDAO rsETH Bridge | Exploit | 116,500 rsETH (approximately $292 million) | Unknown | Unknown | Unknown | Unresolved | reviewed | current |
Hyperbridge Token Gateway 2026 MMR verifier exploitAn attacker submitted a forged Merkle Mountain Range pr… | 2026-04-13 | Hyperbridge | Exploit | over $2 million | Partial Recovery | Unknown | Migrated After Incident | Unresolved | reviewed | current |
Dusk to EVM Bridge 2026 signing-wallet compromiseAn unauthorized actor gained access to a Dusk signing w… | 2026-01-16 | Dusk to EVM Bridge | Exploit | The reviewed first-party post-mortem enumerates stolen DUSK amounts but does not establish a canonical USD loss total. | Unknown | Unknown | Active After Incident | Unresolved | reviewed | current |
Garden Finance 2025 solver infrastructure compromiseAn attacker gained unauthorized access to an independen… | 2025-10-30 | Garden Finance | Hack | about $11.4 million | None | Not Applicable | Active After Incident | Unresolved | reviewed | current |
Ronin Bridge 2024 operator-weight initialization incidentOn August 6, 2024, a Ronin Bridge upgrade left bridge-o… | 2024-08-06 | Ronin Bridge | Security Misconfiguration | 4,000 ETH + 2M USDC temporarily withdrawn; returned | Whitehat Recovery | Not Required | Active After Incident | Final outcome known | reviewed | current |
LI.FI 2024 facet approval exploitA newly deployed smart-contract facet omitted validatio… | 2024-07-16 | LI.FI | Exploit | Approximately $11.6 million | Unknown | Announced | Active After Incident | Unresolved | reviewed | current |
Holograph 2024 unauthorized HLG mintA malicious actor exploited the Holograph Operator cont… | 2024-06-13 | Holograph Protocol | Unauthorized Token Mint | 1 billion HLG unauthorized mint; realized loss not fixed | Partial Freeze And Burn Plan | Not Announced | Historical Protocol Inactive | Unresolved | reviewed | current |
Magpie Protocol 2024 MagpieRouterV2 exploitA selector-position validation flaw in MagpieRouterV2 a… | 2024-04-23 | Magpie Protocol | Exploit | USD 129,000 from 221 wallets | None | Completed | Active After Incident | Final outcome known | full | current |
Unizen 2024 external-call approval exploitAn unsafe external-call path in an Ethereum Unizen trad… | 2024-03-08 | Unizen | Exploit | Approximately USD 2.1–2.18 million | Partial Recovery | In Progress | Active After Incident | Unresolved | reviewed | current |
SOCKET 2024 Gateway approval exploitAn attacker used an incomplete input-validation path in… | 2024-01-16 | SOCKET Protocol | Exploit | Approximately $3.3 million | Partial Recovery | Announced | Active After Incident | Unresolved | reviewed | current |
Orbit Bridge 2024 Ethereum vault exploitOn January 1, 2024, an unidentified attacker removed ap… | 2024-01-01 | Orbit Bridge | Exploit | $81.5 million | Unknown | In Progress | Limited After Incident | Unresolved | reviewed | current |
HECO Bridge 2023 operator-key compromiseOn November 22, 2023, HECO Bridge was drained after the… | 2023-11-22 | HECO Bridge | Exploit | Approximately $86.6 million | Unknown | Unknown | Unknown | Unresolved | reviewed | current |
Multichain 2023 abnormal MPC asset outflowsIn July 2023, more than $125 million in assets moved ou… | 2023-07-06 | Multichain | Abnormal Transfers | More than $125 million in abnormal outflows | Unknown | Unknown | Dead After Incident | Unresolved | reviewed | current |
Poly Network 2023 validator-key exploitIn July 2023, Poly Network suffered a second major cros… | 2023-07-02 | Poly Network | Exploit | Notional unauthorized minting was extremely large, but realized loss/profit estimates vary materially by source and liquidity; no single canonical USD loss is asserted. | Unknown | Unknown | Limited After Incident | Unresolved | reviewed | current |
Allbridge Core 2023 BNB Chain pool exploitAttackers used flash-loan-funded deposits, withdrawals,… | 2023-04-02 | Allbridge Core | Exploit | Approximately $650,000 official postmortem; about $573,000 initial estimate | Partial Recovery | Completed | Active After Incident | Final outcome known | reviewed | current |
Rubic 2022 RubicProxy approval exploitA RubicProxy routing flaw allowed arbitrary calls throu… | 2022-12-25 | Rubic | Exploit | Approximately USD 1.4–1.5 million | None | Unknown | Active After Incident | Unresolved | reviewed | current |
pNetwork 2022 pGALA contract-control incidentA deployment misconfiguration allowed covert takeover o… | 2022-11-03 | pNetwork | Security Misconfiguration | No bridge collateral loss reported | Whitehat Recovery | Announced | Affected Token Deprecated | Unresolved | reviewed | current |
Rubic 2022 RBC/BRBC bridge wallet compromiseA private key for an administrative wallet used by Rubi… | 2022-11-02 | Rubic | Abnormal Transfers | 35 million RBC/BRBC sold; approximately 138 ETH proceeds reported | Unknown | Not Applicable | Deprecated After Incident | Unresolved | reviewed | current |
QANplatform QANX Bridge 2022 wallet hackQANplatform states that its bridge wallet was hacked be… | 2022-10-11 | QANplatform QANX Bridge | Exploit | No reviewed canonical source supports one reconciled stolen USD amount. | None Confirmed | Announced | Affected Token Deprecated | Unresolved | reviewed | current |
BSC Token Hub 2022 forged-proof exploitIn October 2022, an attacker exploited BSC Token Hub by… | 2022-10-06 | BSC Token Hub | Exploit | Nearly $570 million minted; about $100 million unrecovered | Partial Recovery | Not Applicable | Deprecated After Incident | Unresolved | reviewed | current |
Transit Swap 2022 routing and approval exploitAn input-validation flaw in Transit Swap routing and pe… | 2022-10-01 | Transit Swap | Exploit | USD 21 million initial technical estimate; USD 28.9 million later scope | Partial Recovery | Not Announced | Active After Incident | Unresolved | reviewed | current |
BXH Cross-chain Bridge 2022 security incidentBXH states that its DeFi platform was hacked on Septemb… | 2022-09-21 | BXH Cross-chain Bridge | Exploit | No reviewed first-party source supports one bridge-only USD loss total. | None Confirmed | Announced | Limited After Incident | Unresolved | reviewed | current |
Rainbow Bridge August 2022 fabricated-block attack attemptAn attacker submitted a fabricated NEAR block to the Ra… | 2022-08-20 | Rainbow Bridge | Attempted Exploit | No user-fund loss reported | Not Required | Not Applicable | Attack Thwarted | Final outcome known | reviewed | current |
Celer cBridge 2022 DNS hijackingA DNS cache-poisoning attack redirected some cBridge fr… | 2022-08-17 | Celer cBridge | Frontend Compromise | Approximately $240,000 reported | None | Announced | Active After Incident | Unresolved | reviewed | current |
Nomad Bridge 2022 message verification exploitIn August 2022, Nomad Bridge was exploited after a mess… | 2022-08-01 | Nomad Bridge | Exploit | $190 million | Partial Recovery | In Progress | Limited After Incident | Unresolved | reviewed | current |
Harmony Horizon Bridge 2022 exploitIn June 2022, Harmony's Horizon Bridge was exploited fo… | 2022-06-24 | Harmony Horizon Bridge | Exploit | $100 million | Partial Recovery | In Progress | Dead After Incident | Unresolved | reviewed | current |
Rainbow Bridge May 2022 fabricated-block attack attemptAn attacker attempted to submit a fabricated NEAR block… | 2022-05-01 | Rainbow Bridge | Attempted Exploit | No user-fund loss reported | Not Required | Not Applicable | Attack Thwarted | Final outcome known | reviewed | current |
Ronin Bridge validator-key compromiseIn March 2022, Ronin Bridge was exploited after validat… | 2022-03-29 | Ronin Bridge | Exploit | $620 million | Partial Recovery | Completed | Active After Incident | Final outcome known | reviewed | current |
LI.FI 2022 approval-drain exploitAn unchecked external-call path in LI.FI's pre-bridge s… | 2022-03-20 | LI.FI | Exploit | Approximately $600,000 | None | Completed | Active After Incident | Final outcome known | reviewed | current |
Meter Passport 2022 false-deposit exploitAn attacker directly called a modified ERC-20 deposit h… | 2022-02-05 | Meter Passport | Exploit | $4.25 million official estimate; about $4.4 million secondary estimate | Unknown | In Progress | Active After Incident | Unresolved | reviewed | current |
Wormhole 2022 wrapped ETH mint exploitIn February 2022, Wormhole was exploited through a vuln… | 2022-02-02 | Wormhole | Exploit | $320 million | Not Applicable | Completed | Active After Incident | Final outcome known | reviewed | current |
QBridge 2022 zero-value deposit exploitIn January 2022, a logic flaw in QBridge allowed an att… | 2022-01-27 | QBridge | Exploit | $80 million stolen; $90.8 million later damage estimate | Unknown | In Progress | Dead After Incident | Unresolved | reviewed | current |
Multichain 2022 router approval vulnerabilityIn January 2022, attackers exploited vulnerable Multich… | 2022-01-18 | Multichain | Exploit | Stolen, rescued, at-risk and later reimbursed amounts are distinct; this bounded record does not collapse them into a single USD loss. | Partial Recovery | Announced | Limited After Incident | Unresolved | reviewed | current |
Nerve Bridge 2021 metapool exploitAn attacker exploited an inconsistent exchange-amount c… | 2021-11-15 | NerveNetwork | Metapool Exploit | Approximately 900 BNB attacker profit | Unknown | Unknown | Protocol Active After Incident | Unresolved | reviewed | current |
Synapse 2021 nUSD metapool exploitAn attacker manipulated the Avalanche nUSD metapool vir… | 2021-11-06 | Synapse Protocol | Exploit | No ultimate fund loss reported; approximately $8.2 million nUSD protected | Funds Protected | In Progress | Active After Incident | Unresolved | reviewed | current |
pNetwork 2021 pBTC-on-BSC exploitA bug in pNetwork's Rust event-log extraction caused ma… | 2021-09-19 | pNetwork | Exploit | 277 BTC | None Confirmed | Announced | Bridge Family Later Deprecated | Unresolved | reviewed | current |
Poly Network 2021 cross-chain exploitIn August 2021, Poly Network was exploited for more tha… | 2021-08-10 | Poly Network | Exploit | $610 million | Full Recovery | Not Applicable | Active After Incident | Final outcome known | reviewed | current |
THORChain 2021 ETH Router exploit 2A second July 2021 attack used a fake router and malici… | 2021-07-22 | THORChain | Exploit | Approximately $8 million | Unknown | Completed | Active After Incident | Final outcome known | reviewed | current |
THORChain 2021 ETH Router exploit 1In July 2021, an attacker used a contract positioned in… | 2021-07-15 | THORChain | Exploit | $8 million official estimate; $5 million secondary estimate | Unknown | Completed | Active After Incident | Final outcome known | reviewed | current |
Anyswap / Multichain Router V3 2021 MPC key exploitAnyswap disclosed exploitation of prototype V3 cross-ch… | 2021-07-10 | Multichain | Exploit | 2,398,496.02 USDC and 5,509,222.73 MIM reported stolen; no USD aggregate is asserted here. | None Confirmed | Announced | Limited After Incident | Unresolved | reviewed | current |
ChainSwap July 10–11, 2021 quota exploitA logic flaw in ChainSwap's cross-chain quota code allo… | 2021-07-10 | ChainSwap | Exploit | Approximately $4 million | None | In Progress | Active After Incident | Unresolved | reviewed | current |
ChainSwap July 2, 2021 exploitAn attacker exploited the ChainSwap bridge and withdrew… | 2021-07-02 | ChainSwap | Exploit | Approximately $800,000 | Partial Recovery | In Progress | Active After Incident | Unresolved | reviewed | current |
No matching incident cases.
Clear or change the current search and filter settings.