This is a curated list of known vulnerabilities in smart contracts sorted by date. To contribute to this list, submit a pull request on our github.

Date Event Loss
August 11, 2015 Roulette randomness private seed No loss
February 6, 2016 King of the Ether unchecked return value
February 26, 2016 EthAddress.org off-chain 120 ETH
April 11, 2016 FirePonzi mixup underscore variables 0.1 ETH
April 11, 2016 Rubixi mixup constructor
April 12, 2016 TheRun randomness timestamp
April 21, 2016 Rock paper scissors private randomness
April 26, 2016 Governmental dos self-dos
May 16, 2016 Geth off-chain 7,218 ETH
June 17, 2016 Maker DAO reentrancy No loss
June 17, 2016 DAO reentrancy 615,391 ETH
January 4, 2017 HackerGold mixup No loss
April 6, 2017 Poloniex - Short Addresses off-chain short address No loss
June 29, 2017 Bithumb off-chain
June 29, 2017 Classic Ether Wallet off-chain
July 13, 2017 Augur Rep Token serpent No loss
July 17, 2017 CoinDash off-chain
July 19, 2017 Parity multi-sig bug 1 re-init delegatecall bad library 150,000 ETH
October 5, 2017 SmartBillions randomness blockhash 400 ETH
October 10, 2017 Bancor front-running No loss
November 6, 2017 Parity multi-sig bug 2 delegatecall 513,774 ETH and tokens stuck
April 22, 2018 Batch and proxy Overflow integer overflow Large loss in tokens
April 24, 2018 MyEtherWallet Domain-Hijacking off-chain bgp 525 ETH
June 15, 2018 ICON mixup No loss
October 6, 2018 Spankchain reentrancy 165.38 ETH