The incident wall
The industry's biggest smart-contract exploits — $2.9B in publicly reported losses across 32 incidents — each mapped to the vulnerability class behind it and tracked through our re-proof pipeline. A page flips from queued to re-proven only after the exploit executes on a forked chain.
| Incident | Loss | Year | Chain | Class | Re-proof |
|---|---|---|---|---|---|
| Poly Network | $611M | 2021 | multiple chains | Access control | ◷ queued |
| Wormhole bridge | $326M | 2022 | Solana | Signature verification | ◷ queued |
| PancakeBunny | $200M | 2021 | BNB Chain | Price manipulation | ◷ queued |
| Euler Finance | $197M | 2023 | Ethereum | Accounting / share-price | ◷ queued |
| Nomad bridge | $190M | 2022 | Ethereum | Cross-chain bridge | ◷ queued |
| Beanstalk governance | $182M | 2022 | Ethereum | Governance takeover | ◷ queued |
| Parity multisig freeze | $150M | 2017 | Ethereum | Access control | ◷ queued |
| Cream Finance | $130M | 2021 | Ethereum | Reentrancy | ◷ queued |
| BonqDAO | $120M | 2023 | Gnosis Chain | Oracle manipulation | ◷ queued |
| Mango Markets | $114M | 2022 | Solana | Oracle manipulation | ◷ queued |
| Fei/Rari Fuse | $80M | 2022 | Ethereum | Reentrancy | ◷ queued |
| Compound COMP distribution | $80M | 2021 | Ethereum | Accounting / share-price | ◷ queued |
| Qubit bridge | $80M | 2022 | BNB Chain | Cross-chain bridge | ◷ queued |
| Curve / Vyper reentrancy | $70M | 2023 | Ethereum | Reentrancy | ◷ queued |
| Munchables | $62M | 2024 | Blast | Access control | ◷ queued |
| The DAO | $60M | 2016 | Ethereum | Reentrancy | ◷ queued |
| Harvest Finance | $34M | 2020 | Ethereum | Price manipulation | ◷ queued |
| Spartan Protocol | $30M | 2021 | BNB Chain | Accounting / share-price | ◷ queued |
| Grim Finance | $30M | 2021 | Fantom | Reentrancy | ◷ queued |
| Penpie | $27M | 2024 | Ethereum | Reentrancy | ◷ queued |
| Truebit oracle | $26M | 2026 | Ethereum | Oracle manipulation | ◷ queued |
| UwU Lend | $20M | 2024 | Ethereum | Oracle manipulation | ◷ queued |
| Sonne Finance | $20M | 2024 | Base | Accounting / share-price | ◷ queued |
| Inverse Finance | $16M | 2022 | Ethereum | Oracle manipulation | ◷ queued |
| Deus Finance | $13M | 2022 | BNB Chain | Price manipulation | ◷ queued |
| Li.Fi | $10M | 2024 | Ethereum | Unchecked external call | ◷ queued |
| bZx flash-oracle | $8M | 2020 | Ethereum | Price manipulation | ◷ queued |
| Rhea Finance | $8M | 2026 | NEAR | Oracle manipulation | ◷ queued |
| Hundred Finance | $7M | 2023 | Optimism | Accounting / share-price | ◷ queued |
| Cheese Bank | $3M | 2020 | Ethereum | Oracle manipulation | ◷ queued |
| Conic Finance | $3M | 2023 | Ethereum | Reentrancy | ◷ queued |
| first-depositor vault inflation | — | 2023 | Ethereum | Accounting / share-price | ◷ queued |
Honest by construction. Every row links to a factual incident page.
"Re-proven" appears only where the exploit has actually executed on a forked chain with a signed receipt; everything
else is clearly marked queued. We never claim a proof we don't have.