- Crypto hacks remain a notable roadblock to broader blockchain adoption.
- Hacks can occur on multiple levels in the crypto space — from blockchain bridges to centralized exchanges to hot wallets.
- Use a hardware wallet to store the private keys to your crypto offline to mitigate the risk of being hacked.
Crypto is still very much the Wild West of finance. Hacks and exploits still plague the space, with the most recent one being a $70 million exploit at Curve Finance. And 2022 being the biggest year ever for crypto hacking.
In this report, we look at some of the biggest crypto hacks of all time and offer a tip on what you can do to avoid becoming a victim of a crypto hack.
8 of the biggest crypto hacks in history
1. Ronin network
2. Bitfinex
3. MyEtherWallet
4. Tesla
5. Solana
6. Harmony network
7. Bancor
8. FTX
1. Ronin network
On March 23, 2022, hackers stole approximately $625 million in Ethereum (ETH) and USD Coin (USDC) from Ronin, the Ethereum-linked sidechain connected to the popular Axie Infinity online game. The hackers — who were part of the North Korean state-backed hacking collective Lazarus Group — exploited a blockchain bridge, which enables users to transfer assets from one blockchain to another.
The hack remains the largest in the history of crypto. While the US Treasury Department’s Office of Foreign Assets Control (OFAC) sanctioned the Ethereum wallet associated with the hack, and while Binance recovered $5.8 million of the stolen funds, the vast majority was never recovered.
2. Bitfinex
In August 2016, 119,754 Bitcoin (BTC) were stolen from the crypto exchange Bitfinex after a hacker breached the exchange’s security system and made more than 2,000 unauthorized transactions. At the time of the hack, the amount of BTC stolen was worth about $72 million, while that value is currently well over $3 billion.
In February 2022, the US Department of Justice arrested the two people behind the hack and stated that it had recovered over 75% of the stolen funds. In a press release, the agency noted that blockchain technology helped law enforcement to follow the money and bring those using cryptocurrency for illicit purposes to justice.
3. MyEtherWallet
In April 2018, MyEtherWallet (MEW) — an app for storing, sending and receiving Ethereum (ETH) and Ethereum-based tokens — was compromised by a phishing attack. Hackers stole just over 216 ETH — worth approximately $150,000 at the time — by hijacking a Google Domain Name System (DNS) server the Ethereum network employed.
MyEtherWallet’s CEO and team responded swiftly, remedying the issue and sharing information to help users secure their funds and mitigate losses. MEW’s CEO added that Ethereum users should use a hardware wallet to safely store and manage their assets.
4. Tesla
In February 2018, Tesla fell victim to a “cryptojacking”. A cryptojacking is a cybercrime in which hackers take over people’s computers or servers and use them to mine cryptocurrency. Hackers infiltrated Tesla’s Kubernetes administration console — an open-sourced, Google-designed system for cloud applications — which wasn’t password protected at the time.
The hackers used this system to illegally mine cryptocurrency in a way that made their IP addresses difficult to detect. The issue was rectified, and no consumer data or information regarding the safety and security of Tesla vehicles was stolen.
5. Solana
In August 2022, over 9,000 wallets on the Solana network were hacked, with approximately $4 million worth of SOL — the native asset of the Solana blockchain — and USD Coin (USDC) being stolen. Hackers exploited the private keys for the Slope wallet, a software wallet for assets on the Solana blockchain.
Some users of Phantom — one of the most popular Solana wallets — also had their funds drained. However, only those who imported their accounts to and from Slope were affected. Days after the hack, Solana issued a statement telling users to create new wallets and transfer their assets out of their old, potentially compromised wallets to mitigate further damage.
6. Harmony network
In June 2022, hackers from the North Korean state-backed hacking collective Lazarus Group exploited the Horizon bridge — a bridge that connects the Harmony blockchain to Ethereum, BNB Chain and Bitcoin — stealing $100 million worth of digital assets. This attack brought the total amount stolen from blockchain bridges in 2022 to over $1 billion, all before the year’s halfway point.
The hackers executed the attack by using compromised private keys to drain assets, including Binance USD (BUSD), USD Coin (USDC), Ethereum (ETH) and Wrapped Bitcoin (WBTC). The hackers swapped the non-ETH assets for ETH and then put the ETH through the Tornado Cash mixer to launder the funds. The Tornado Cash mixer is a privacy service that removes any connection to the address from which wallet funds were sent and is now outlawed by the US government.
7. Bancor
In July 2018, hackers stole $23.5 million in digital assets from a compromised wallet tied to the decentralized exchange (DEX) Bancor, which exists on Ethereum. The hackers made off with 3.2 million Bancor Network tokens (BNT), 25,000 Ethereum (ETH) and 230 million Pundi X tokens (NPXS).
To mitigate the damage, the DEX froze the stolen BNT funds — which called into question just how “decentralized” the network really is. However, it didn’t have the power to free the stolen ETH or NPXS.
No user funds were stolen in this hack.
8. FTX
Hours after FTX declared bankruptcy on November 11, 2022, more than $600 million worth of digital assets was extracted from FTX crypto wallets. Some speculated that members of disgraced former FTX CEO Sam Bankman-Fried’s inner circle siphoned the funds through a back door, though this has yet to be confirmed.
The day after the hack, Nick Percoco, chief security officer at the crypto exchange Kraken, claimed that he knew the identity of the hacker because of a mistake the hacker made in sending Tron (TRX) tokens from Kraken to the same crypto wallet address to which some of the hacked funds were sent. The hacker’s identity has yet to be made public, though, and US authorities are still investigating the case and pursuing the hacker.
How to keep your cryptocurrency safe from hackers
One of the most tried and true ways to keep your crypto safe from hackers is to keep your private keys stored offline in a crypto hardware wallet.
When you leave your crypto assets in the custody of either a centralized crypto exchange like Bitfinex or a hot wallet like Slope, you increase your risk of losing access to your digital assets due to a hack.
Bottom line
Over the years, billions of dollars worth of digital assets have been stolen in crypto hacks, and crypto hacks still pose notable danger to crypto investors and blockchain users.
To mitigate the risks of becoming a victim of a crypto hack, consider using a crypto hardware wallet to store the private keys to your digital assets offline.
Frequently asked questions
Disclaimer: This page is not financial advice or an endorsement of digital assets, providers or services. Digital assets are volatile and risky, and past performance is no guarantee of future results. Potential regulations or policies can affect their availability and services provided. Talk with a financial professional before making a decision. Finder or the author may own cryptocurrency discussed on this page.
More guides on Finder
-
Is it too late to buy bitcoin?
Bitcoin’s price is hitting all-time highs. Did you miss the boat?
-
Bitcoin Pizza Day
What would the 10,000 BTC spent on Bitcoin Pizza Day be worth today?
-
Binance Coin (BNB) price prediction 2024
Read our expert analysis on Binance Coin and how the token will perform in the future.
-
Shiba Inu (SHIB) price prediction
Read our expert analysis on Shiba Inu and how the token will perform in the future.
-
Solana (SOL) price prediction 2024
Your guide to what to expect for the price of Solana (SOL) in the weeks and months ahead.
-
Cryptocurrency Weather Report
Finder’s Cryptocurrency Weather Report describes the daily health of the global cryptocurrency market.
-
What is an ERC20 token?
What are ERC20 tokens, how do they work and what do they have to do with Ethereum and other cryptocurrencies? Find out here.
-
XRP (XRP) price prediction 2024
Your guide to what to expect for the price of Ripple (XRP) in the weeks and months ahead.
-
Finder Cryptocurrency Predictions Report
Every 3 months, Finder empanels a range of industry specialists to get a pulse on what the future holds for crypto. This is a summary of those findings.
Ask a question