Major on-chain hacking incidents and where the stolen funds are now. Attacker addresses are only listed when verified against an authoritative source (OFAC / FBI-IC3 / official post-mortem).
| Incident | Chain | Date | Stolen (USD) | Status | Tags |
|---|---|---|---|---|---|
| Bybit Hack Lazarus Group (TraderTraitor) | Ethereum | 2025-02-21 | $1.50B | Moving | exchangelazarusdprk |
| Ronin Bridge Hack Lazarus Group | Ethereum | 2022-03-23 | $625.00M | Dormant | bridgelazarusdprk |
| Poly Network Hack | Ethereum | 2021-08-10 | $611.00M | Recovered | bridgecross-chainrecovered |
| Coincheck Hack | Other | 2018-01-26 | $530.00M | Dormant | exchangejapannem |
| Wormhole Hack | Solana | 2022-02-02 | $320.00M | Recovered | bridgecross-chaindefi |
| DMM Bitcoin Hack TraderTraitor (Lazarus Group) | Bitcoin | 2024-05-31 | $305.00M | Moving | exchangejapanlazarus |
| Euler Finance Hack | Ethereum | 2023-03-13 | $197.00M | Recovered | defilendingflash-loan |
| Nomad Bridge Hack | Ethereum | 2022-08-01 | $190.00M | Partially recovered | bridgecross-chaindefi |
| Harmony Horizon Bridge Hack Lazarus Group | Ethereum | 2022-06-24 | $100.00M | Moving | bridgelazarusdprk |
| Atomic Wallet Hack Lazarus Group | Ethereum | 2023-06-02 | $100.00M | Moving | walletlazarusdprk |
| Curve Finance Hack | Ethereum | 2023-07-30 | $73.00M | Partially recovered | defidexreentrancy |
Figures are approximate, compiled from public reporting. Attacker addresses are included only where verified against an authoritative source. Attribution (e.g. Lazarus Group) is shown only when publicly stated by an official body.
© 2026 ChainAnalyzer. All rights reserved.