This is a curated list of known vulnerabilities in smart contracts sorted by date. To contribute to this list, submit a pull request on our github.
| Date | Event | Loss |
|---|---|---|
| August 11, 2015 | Roulette randomness private seed | No loss |
| February 6, 2016 | King of the Ether unchecked return value | |
| February 26, 2016 | EthAddress.org off-chain | 120 ETH |
| April 11, 2016 | FirePonzi mixup underscore variables | 0.1 ETH |
| April 11, 2016 | Rubixi mixup constructor | |
| April 12, 2016 | TheRun randomness timestamp | |
| April 21, 2016 | Rock paper scissors private randomness | |
| April 26, 2016 | Governmental dos self-dos | |
| May 16, 2016 | Geth off-chain | 7,218 ETH |
| June 17, 2016 | Maker DAO reentrancy | No loss |
| June 17, 2016 | DAO reentrancy | 615,391 ETH |
| January 4, 2017 | HackerGold mixup | No loss |
| April 6, 2017 | Poloniex - Short Addresses off-chain short address | No loss |
| June 29, 2017 | Bithumb off-chain | |
| June 29, 2017 | Classic Ether Wallet off-chain | |
| July 13, 2017 | Augur Rep Token serpent | No loss |
| July 17, 2017 | CoinDash off-chain | |
| July 19, 2017 | Parity multi-sig bug 1 re-init delegatecall bad library | 150,000 ETH |
| October 5, 2017 | SmartBillions randomness blockhash | 400 ETH |
| October 10, 2017 | Bancor front-running | No loss |
| November 6, 2017 | Parity multi-sig bug 2 delegatecall | 513,774 ETH and tokens stuck |
| April 22, 2018 | Batch and proxy Overflow integer overflow | Large loss in tokens |
| April 24, 2018 | MyEtherWallet Domain-Hijacking off-chain bgp | 525 ETH |
| June 15, 2018 | ICON mixup | No loss |
| October 6, 2018 | Spankchain reentrancy | 165.38 ETH |