{
  "source": "DeFiLlama hacks database, https://api.llama.fi/hacks",
  "filter": "targetType == 'DeFi Protocol' and bridgeHack == false",
  "fetched": "2026-07-22",
  "note": "Corrected 2026-07-22 after reader feedback. The prior version (fetched 2026-07-15) filtered on targetType only, which let seven cross-chain bridge hacks into the top twenty, led by Ronin Bridge at $624M; several of those bridges are custodial designs and none are DeFi protocols. The source's own bridgeHack flag now excludes them (51 of 487 DeFi-typed entries carry it). The largest excluded bridge hacks are kept below for reference. Remaining rows inherit DeFiLlama's protocol labels.",
  "rows": [
    {
      "name": "Drift Trade",
      "date": "2026-04-01",
      "amountUsd": 295000000,
      "classification": "Infrastructure",
      "technique": "Compromised Admin + Fake Token Price Manipulation",
      "chains": ["Solana"],
      "returnedFundsUsd": null
    },
    {
      "name": "Cetus CLMM",
      "date": "2025-05-22",
      "amountUsd": 223000000,
      "classification": "Protocol Logic",
      "technique": "Spoof Token Exploit",
      "chains": ["Sui"],
      "returnedFundsUsd": null
    },
    {
      "name": "Euler V1",
      "date": "2023-03-13",
      "amountUsd": 197000000,
      "classification": "Protocol Logic",
      "technique": "Flashloan Donate Function Logic Exploit",
      "chains": ["Ethereum"],
      "returnedFundsUsd": 240000000
    },
    {
      "name": "Beanstalk",
      "date": "2022-04-17",
      "amountUsd": 181000000,
      "classification": "Ecosystem",
      "technique": "Flashloan Governance Attack",
      "chains": ["Ethereum"],
      "returnedFundsUsd": null
    },
    {
      "name": "Parity Multisig",
      "date": "2017-11-09",
      "amountUsd": 150000000,
      "classification": "Protocol Logic",
      "technique": "Contract Not Initialized",
      "chains": ["Ethereum"],
      "returnedFundsUsd": null
    },
    {
      "name": "Compound V2",
      "date": "2021-09-29",
      "amountUsd": 147000000,
      "classification": "Protocol Logic",
      "technique": "Math Mistake Exploit",
      "chains": ["Ethereum"],
      "returnedFundsUsd": null
    },
    {
      "name": "Vulcan Forged",
      "date": "2021-12-13",
      "amountUsd": 140000000,
      "classification": "Infrastructure",
      "technique": "Private Key Compromised (Unknown Method)",
      "chains": ["Ethereum", "Polygon"],
      "returnedFundsUsd": null
    },
    {
      "name": "CREAM Lending",
      "date": "2021-10-27",
      "amountUsd": 130000000,
      "classification": "Ecosystem",
      "technique": "Flashloan Price Oracle Attack",
      "chains": ["Ethereum"],
      "returnedFundsUsd": null
    },
    {
      "name": "Balancer V2",
      "date": "2025-11-03",
      "amountUsd": 128000000,
      "classification": "Protocol Logic",
      "technique": "Composable Stable Pools Exploit",
      "chains": ["Ethereum", "Arbitrum", "Base", "Polygon", "Sonic", "Optimism"],
      "returnedFundsUsd": null
    },
    {
      "name": "Badger DAO",
      "date": "2021-12-02",
      "amountUsd": 120000000,
      "classification": "Infrastructure",
      "technique": "Cloudflare Key Compromised",
      "chains": ["Ethereum"],
      "returnedFundsUsd": null
    },
    {
      "name": "Mango Markets V3",
      "date": "2022-10-11",
      "amountUsd": 115000000,
      "classification": "Ecosystem",
      "technique": "Price Oracle Attack",
      "chains": ["Solana"],
      "returnedFundsUsd": null
    },
    {
      "name": "Mirror",
      "date": "2021-10-08",
      "amountUsd": 90000000,
      "classification": "Smart Contract Language",
      "technique": "Duplicate Call Exploit",
      "chains": ["Terra"],
      "returnedFundsUsd": null
    },
    {
      "name": "Rari Capital",
      "date": "2022-05-01",
      "amountUsd": 80000000,
      "classification": "Ecosystem",
      "technique": "Flashloan Reentrancy Attack",
      "chains": ["Ethereum", "Arbitrum"],
      "returnedFundsUsd": null
    },
    {
      "name": "Curve DEX",
      "date": "2023-07-30",
      "amountUsd": 61700000,
      "classification": "Infrastructure",
      "technique": "Vyper Compiler Bug",
      "chains": ["Ethereum"],
      "returnedFundsUsd": null
    },
    {
      "name": "The DAO",
      "date": "2016-06-17",
      "amountUsd": 60000000,
      "classification": "Protocol Logic",
      "technique": "Reentrancy",
      "chains": ["Ethereum"],
      "returnedFundsUsd": null
    },
    {
      "name": "AnubisDAO",
      "date": "2021-10-29",
      "amountUsd": 60000000,
      "classification": "Rugpull",
      "technique": "Drained Contracts",
      "chains": ["Ethereum"],
      "returnedFundsUsd": null
    },
    {
      "name": "EasyFi",
      "date": "2021-04-19",
      "amountUsd": 59000000,
      "classification": "Infrastructure",
      "technique": "Private Key Compromised (Unknown Method)",
      "chains": ["Polygon"],
      "returnedFundsUsd": null
    },
    {
      "name": "Uranium Finance",
      "date": "2021-04-28",
      "amountUsd": 57200000,
      "classification": "Protocol Logic",
      "technique": "Math Mistake Exploit",
      "chains": ["BSC"],
      "returnedFundsUsd": null
    },
    {
      "name": "Ooki",
      "date": "2021-11-05",
      "amountUsd": 55000000,
      "classification": "Infrastructure",
      "technique": "Private Key Compromised (Phishing)",
      "chains": ["Polygon", "BSC"],
      "returnedFundsUsd": null
    },
    {
      "name": "Radiant V2",
      "date": "2024-10-16",
      "amountUsd": 53000000,
      "classification": "Protocol Logic",
      "technique": "Access Control Exploit",
      "chains": ["BSC", "Arbitrum"],
      "returnedFundsUsd": null
    }
  ],
  "excluded_bridge_hacks": [
    {
      "name": "Ronin Bridge",
      "date": "2022-03-23",
      "amountUsd": 624000000,
      "classification": "Infrastructure",
      "technique": "Private Key Compromised (Social Engineering)",
      "chains": ["Ethereum"],
      "returnedFundsUsd": null
    },
    {
      "name": "Poly Network",
      "date": "2021-08-10",
      "amountUsd": 611000000,
      "classification": "Protocol Logic",
      "technique": "Access Control Exploit",
      "chains": ["Ethereum", "BSC", "Polygon"],
      "returnedFundsUsd": null
    },
    {
      "name": "Binance Bridge",
      "date": "2022-10-06",
      "amountUsd": 570000000,
      "classification": "Protocol Logic",
      "technique": "Proof Verifier Bug",
      "chains": ["BSC"],
      "returnedFundsUsd": null
    },
    {
      "name": "Portal",
      "date": "2022-02-02",
      "amountUsd": 326000000,
      "classification": "Protocol Logic",
      "technique": "Signature Exploit",
      "chains": ["Solana"],
      "returnedFundsUsd": 326000000
    },
    {
      "name": "Kelp",
      "date": "2026-04-18",
      "amountUsd": 293000000,
      "classification": "Infrastructure",
      "technique": "LayerZero OFT bridge exploit",
      "chains": ["Ethereum", "Arbitrum"],
      "returnedFundsUsd": null
    },
    {
      "name": "Nomad",
      "date": "2022-08-01",
      "amountUsd": 190000000,
      "classification": "Protocol Logic",
      "technique": "Trusted Root Exploit",
      "chains": ["Ethereum"],
      "returnedFundsUsd": null
    },
    {
      "name": "Multichain",
      "date": "2023-07-07",
      "amountUsd": 126000000,
      "classification": "Infrastructure",
      "technique": "Private Key Compromised (Unknown Method)",
      "chains": ["Moonriver", "BSC", "Fantom"],
      "returnedFundsUsd": null
    },
    {
      "name": "Harmony Bridge",
      "date": "2022-06-23",
      "amountUsd": 100000000,
      "classification": "Infrastructure",
      "technique": "Private Key Compromised (Unknown Method)",
      "chains": ["Ethereum", "BSC"],
      "returnedFundsUsd": null
    }
  ]
}