hazard chart
Read the water before you sail it. Every recent exploit, plotted where it hit and kept on the chart for good, with the stablecoins that steady you shown as buoys. This is the honest half of a scam radar: it maps protocol wrecks, not the phishing you avoid with the Cast-Off Check.
In the last year, $1.47B was taken across 181 logged exploits. The largest wreck on the chart is Drift Trade at $295M, compromised admin + fake token price manipulation. 1 major stablecoin is off station.
| Wreck | Lost | Year | How | Where | Returned |
|---|---|---|---|---|---|
| Humanity | $32M | 2026 | Private Key Compromised | Ethereum, BSC | · |
| BonkDAO | $21.3M | 2026 | Malicious Governance Proposal | Solana | · |
| Syscoin Bridge | $8M | 2026 | Fake Proof Exploit | bridge · Syscoin | · |
| JaredFromSubway MEV Bot | $7.5M | 2026 | Reverse MEV Honeypot | Ethereum | · |
| Lazy Summer Protocol | $6M | 2026 | Donation Attack | Ethereum | · |
| Secret Network | $4.67M | 2026 | Unbacked Mint via ICS-20 | bridge · Secret | · |
| Polymarket International | $3M | 2026 | Front-end Vulnerability | Polygon | · |
| RetoSwap | $2.7M | 2026 | ACK Frontrun Attack | Monero | · |
| TSR | $2.5M | 2026 | Infinite Mint and Dump | BSC | · |
| SecondFi | $2.4M | 2026 | Predictable Private Key Exploit | Cardano | · |
| Aztec Connect | $2.1M | 2026 | ZK proof verification Exploit | bridge · Ethereum | · |
| Aztec Bridge | $2M | 2026 | escapeHatch Function Exploit | bridge · Ethereum | · |
Source: the DeFiLlama hacks ledger (api.llama.fi/hacks), read as open data and rendered as our own chart. Dollar figures are DeFiLlama's at-time-of-incident estimates. This is the protocol-exploit half of scam safety, it does not cover consumer phishing or wallet drainers, and “under the keel” is our derived read, not a sourced figure. See the Tide Table, the methodology, and the data sources. Information, not financial advice.