This is a curated list of known vulnerabilities in smart contracts sorted by date. To contribute to this list, submit a pull request on our github.
Date | Event | Loss |
---|---|---|
August 11, 2015 | Roulette randomness private seed | No loss |
February 6, 2016 | King of the Ether unchecked return value | |
February 26, 2016 | EthAddress.org off-chain | 120 ETH |
April 11, 2016 | FirePonzi mixup underscore variables | 0.1 ETH |
April 11, 2016 | Rubixi mixup constructor | |
April 12, 2016 | TheRun randomness timestamp | |
April 21, 2016 | Rock paper scissors private randomness | |
April 26, 2016 | Governmental dos self-dos | |
May 16, 2016 | Geth off-chain | 7,218 ETH |
June 17, 2016 | Maker DAO reentrancy | No loss |
June 17, 2016 | DAO reentrancy | 615,391 ETH |
January 4, 2017 | HackerGold mixup | No loss |
April 6, 2017 | Poloniex - Short Addresses off-chain short address | No loss |
June 29, 2017 | Bithumb off-chain | |
June 29, 2017 | Classic Ether Wallet off-chain | |
July 13, 2017 | Augur Rep Token serpent | No loss |
July 17, 2017 | CoinDash off-chain | |
July 19, 2017 | Parity multi-sig bug 1 re-init delegatecall bad library | 150,000 ETH |
October 5, 2017 | SmartBillions randomness blockhash | 400 ETH |
October 10, 2017 | Bancor front-running | No loss |
November 6, 2017 | Parity multi-sig bug 2 delegatecall | 513,774 ETH and tokens stuck |
April 22, 2018 | Batch and proxy Overflow integer overflow | Large loss in tokens |
April 24, 2018 | MyEtherWallet Domain-Hijacking off-chain bgp | 525 ETH |
June 15, 2018 | ICON mixup | No loss |
October 6, 2018 | Spankchain reentrancy | 165.38 ETH |