Crypto Hacks and Security
This page collects every CryptoTicker.io report on attacks and fraud in the crypto market: hacked exchanges, exploits in DeFi protocols and bridges, stolen NFTs, wallet drainers, phishing, abused token approvals and rug pulls. The newest cases are at the top.
A hack is rarely over after one day. Funds get moved, exchanges freeze accounts, projects announce reimbursements. We therefore keep ongoing cases up to date with dated updates, the latest one always at the top of the article.
The biggest crypto hacks in history
| Victim | Damage at the time | Date | What happened next |
|---|---|---|---|
| Binance | about $6.3Bper Binance | October 2026 | more than $2.83B frozen, Binance to cover all losses per Yi He |
| Bybit | about $1.5B | February 2025 | attributed to North Korea by the FBI, customer funds covered |
| Ronin Network (Axie Infinity) | about $620M | March 2022 | attributed to North Korea, users reimbursed |
| Poly Network | about $610M | August 2021 | almost fully returned by the attacker |
| Coincheck | about $530M | January 2018 | customers compensated in yen |
| FTX | about $477M | November 2022 | outflow on the day of the bankruptcy |
| Bitget | about $352M | September 2026 | covered from its protection fund |
Damage at the time of the attack. As of October 30, 2026.
How to protect yourself
Coins in your own hardware wallet stay untouched when an exchange is hacked. Our guide shows step by step how to keep crypto safe, and our comparisons help you choose the right hardware wallet and a regulated exchange.
- Revoke approvals. Most wallet drainers and many protocol exploits reach your funds through approvals you once granted to a contract. Check them regularly, for example with revoke.cash or in the approvals section of your block explorer, and revoke what you no longer need.
- A hardware wallet protects your key, not your approvals. It stops anyone from stealing your private key. It does not stop an approval you signed yourself if the contract behind it is exploited later. Only sign what you can read and understand on the device. Best hardware wallets compared
- Check your exchange balance. After an exchange hack, what matters is whether the exchange covers customer losses and whether withdrawals work. Keep only what you need for trading on an exchange and look for a MiCA licence.
- Never enter your seed phrase. No support agent, airdrop page or wallet update will ask for it. Links from direct messages and sponsored search results are a common way onto phishing sites.
All reports
Ongoing cases are kept up to date with dated updates.
Gnosis Pay data breach: card customer data exposed ahead of the December 20 shutdown
Gnosis Pay confirmed on November 6, 2026 that attackers accessed the system behind its crypto debit cards and exposed customer data. Funds are not affected, according to the company, but cardholders now face phishing with genuine data and must find a new card by December 20.
5 hours ago
Polygon Hard Fork: Binance and Polymarket Seek Return of 70 Million POL
Analysis: Binance and Polymarket are asking for a hard fork that would move roughly 70.49 million frozen POL from five attacker addresses back to them. Ordinary holders are unaffected, but on the Polygon forum concern is growing about the precedent it would set.
2 days ago
Crédit Mutuel Arkéa hack: French bank confirms cyberattack as ZachXBT traces $133 million
French bank Crédit Mutuel Arkéa has confirmed a cyberattack involving fraudulent operations and says customer assets were not affected. Investigator ZachXBT is tracing more than $133 million that allegedly left via crypto exchanges and Monero.
2 days ago
Liquid Network closes the 602 BTC gap: L-BTC is fully backed again
Two months after the exploit of September 6, every L-BTC is once again backed by a bitcoin, with the last 550 BTC arriving on November 2. Direct peg-outs through the Federation remain restricted for now, so redemptions run through swap providers.
4 days ago
Binance hack: the attack began with a fake job interview
Binance has released its first incident report on the $6.3 billion hack: a fake hiring process, a tampered Homebrew package and an internal AI tool opened the way to the hot wallets for the attackers. The scheme also targets developers and retail investors, and five habits protect against it.
4 days ago
Suspected crypto theft in the EU: Kraken and Crypto.com freeze funds after $133 million outflow
Blockchain investigator ZachXBT is tracing allegedly stolen crypto worth $133 million from an unnamed entity in the EU. Kraken and Crypto.com have frozen linked accounts and funds and say their customers are not at risk.
4 days ago
Crypto data breach: under the GDPR, compensation starts at around €100, according to Germany's top court
After the data breaches at Wagyu and Chainalysis, crypto investors are asking about their rights. Germany's Federal Court of Justice accepts the mere loss of control as damage; what matters are access requests, evidence and secure custody.
4 days ago
Name.com domains hijacked: drainer on twelve DeFi sites, approvals from October 31 should be revoked
Attackers redirected the DNS records of at least twelve DeFi sites at registrar Name.com during the night to October 31 and sent visitors to copies running Step Drainer. The damage is between $138,000 and $202,000; anyone who signed there should revoke their approvals now.
4 days ago
Agent wallets: nine out of ten AI models raised their own spending limit
Nine out of ten AI models tested raised the spending limit of a crypto wallet themselves and fetched the approval code from the owner's inbox. What the Cornell Tech and Yale study means for anyone who gives an agent wallet access.
4 days ago