Approval Exploits

$129.56M was taken in the 24 most recent incidents listed below. Track known exploits, monitor risky permissions, and protect your assets from unauthorized access.

Check a wallet

Against the scam address feeds Pavoriz reads, and the wallets those addresses have taken funds from.

Yapeswap

Date:
October 2026
Network:
Ethereum
Amount Stolen:
$22K
Classified as:
Governance, Malicious Proposal

Description

Yapeswap is listed in DefiLlama's hacks index as a defi protocol incident on Ethereum. The technique was recorded as malicious proposal.

X100

Date:
October 2026
Network:
Ethereum
Amount Stolen:
$4.75M
Classified as:
Governance, Flashloan Governance Attack

Description

X100 is listed in DefiLlama's hacks index as a defi protocol incident on Ethereum. The technique was recorded as flashloan governance attack.

Initia

Date:
October 2026
Network:
Initia
Amount Stolen:
$2.6M
Classified as:
Token & Share Accounting, Infinite Mint

Description

Initia is listed in DefiLlama's hacks index as a chain incident on Initia. The technique was recorded as infinite mint.

WAX Multi-Chain Bridge

Date:
October 2026
Network:
SolanaEthereumWAX
Amount Stolen:
$91K
Classified as:
Input Validation, Missing Input Validation

Description

WAX Multi-Chain Bridge is listed in DefiLlama's hacks index as a defi protocol incident on Solana, Ethereum, WAX. The technique was recorded as missing input validation. It is recorded as a bridge hack.

CoinDCX

Date:
October 2026
Network:
Tron
Amount Stolen:
$16M
Classified as:
Key Compromise, Hot Wallet Key Compromised

Description

CoinDCX is listed in DefiLlama's hacks index as a cex incident on TRON. The technique was recorded as hot wallet key compromised.

Swell

Date:
October 2026
Network:
EthereumArbitrum OneBaseHyperliquid L1
Amount Stolen:
Not published
Classified as:
Key Compromise, Hot Wallet Key Compromised

Description

Swell is listed in DefiLlama's hacks index as a defi protocol incident on Ethereum, Arbitrum, Base, Hyperliquid L1. The technique was recorded as hot wallet key compromised.

AlpsCon AI Trade Hub

Date:
October 2026
Network:
BNB Chain
Amount Stolen:
$153K
Classified as:
Token & Share Accounting, Incorrect Share Accounting

Description

AlpsCon AI Trade Hub is listed in DefiLlama's hacks index as a defi protocol incident on BSC. The technique was recorded as incorrect share accounting.

Coffer

Date:
October 2026
Network:
Solana
Amount Stolen:
$1
Classified as:
Token & Share Accounting, Rounding Error

Description

Coffer is listed in DefiLlama's hacks index as a defi protocol incident on Solana. The technique was recorded as rounding error.

Qubic

Date:
October 2026
Network:
Qubic
Amount Stolen:
$1.3M
Classified as:
Key Compromise, Weak Key Generation

Description

Qubic is listed in DefiLlama's hacks index as a wallet incident on Qubic. The technique was recorded as weak key generation.

Affluent

Date:
October 2026
Network:
TON
Amount Stolen:
$1.05M
Classified as:
Token & Share Accounting, Unbacked Mint

Description

Affluent is listed in DefiLlama's hacks index as a defi protocol incident on TON. The technique was recorded as unbacked mint.

Pirate Chain

Date:
October 2026
Network:
Pirate Chain
Amount Stolen:
Not published
Classified as:
Token & Share Accounting, Unbacked Mint

Description

Pirate Chain is listed in DefiLlama's hacks index as a chain incident on Pirate Chain. The technique was recorded as unbacked mint.

UNCX Network V2

Date:
October 2026
Network:
EthereumBaseBNB ChainRobinhood Chain
Amount Stolen:
$86K
Classified as:
Token & Share Accounting, Incorrect Share Accounting

Description

UNCX Network V2 is listed in DefiLlama's hacks index as a defi protocol incident on Ethereum, Base, BSC, Robinhood Chain. The technique was recorded as incorrect share accounting.

Gamdom

Date:
October 2026
Network:
EthereumBNB ChainPolygonArbitrum OneOP MainnetSolanaTronBitcoin
Amount Stolen:
$4.21M
Classified as:
Frontend & Infrastructure, Key Leaked via Infrastructure

Description

Gamdom is listed in DefiLlama's hacks index as a gambling platform incident on Ethereum, BSC, Polygon, Arbitrum, Optimism, Solana, TRON, Bitcoin. The technique was recorded as key leaked via infrastructure.

Papertrade

Date:
October 2026
Network:
Hyperliquid L1
Amount Stolen:
$1.28M
Classified as:
Oracle Manipulation, Spot Price Manipulation

Description

Papertrade is listed in DefiLlama's hacks index as a defi protocol incident on Hyperliquid L1. The technique was recorded as spot price manipulation.

Ledger (Supply Chain)

Date:
October 2026
Network:
Not recorded
Amount Stolen:
$93M
Classified as:
Frontend & Infrastructure, Supply Chain Attack

Description

Ledger (Supply Chain) is listed in DefiLlama's hacks index as a wallet incident. The technique was recorded as supply chain attack.

BitBay

Date:
October 2026
Network:
Polygon
Amount Stolen:
$15K
Classified as:
Protocol Logic, Withdrawal Logic Flaw

Description

BitBay is listed in DefiLlama's hacks index as a defi protocol incident on Polygon. The technique was recorded as withdrawal logic flaw.

Ethervista

Date:
October 2026
Network:
Ethereum
Amount Stolen:
$19K
Classified as:
Token & Share Accounting, Arithmetic Error

Description

Ethervista is listed in DefiLlama's hacks index as a defi protocol incident on Ethereum. The technique was recorded as arithmetic error.

Locus Finance

Date:
October 2026
Network:
Arbitrum One
Amount Stolen:
$18K

Description

Locus Finance is listed in DefiLlama's hacks index as a defi protocol incident on Arbitrum. The technique was not recorded.

MakerDAO ETH-A Liquidation Keeper Bot

Date:
October 2026
Network:
Ethereum
Amount Stolen:
$538K
Classified as:
Access Control, Improper Access Control

Description

MakerDAO ETH-A Liquidation Keeper Bot is listed in DefiLlama's hacks index as a defi protocol incident on Ethereum. The technique was recorded as improper access control.

Set Protocol

Date:
October 2026
Network:
Ethereum
Amount Stolen:
$22K
Classified as:
Token & Share Accounting, Rounding Error

Description

Set Protocol is listed in DefiLlama's hacks index as a defi protocol incident on Ethereum. The technique was recorded as rounding error.

GoldPesa

Date:
October 2026
Network:
Base
Amount Stolen:
$115K
Classified as:
Token & Share Accounting, Incorrect Share Accounting

Description

GoldPesa is listed in DefiLlama's hacks index as a defi protocol incident on Base. The technique was recorded as incorrect share accounting.

FlashLoopAdapter

Date:
October 2026
Network:
Ethereum
Amount Stolen:
$305K
Classified as:
Access Control, Improper Access Control

Description

FlashLoopAdapter is listed in DefiLlama's hacks index as a defi protocol incident on Ethereum. The technique was recorded as improper access control.

NEAR Intents

Date:
October 2026
Network:
BNB Chain
Amount Stolen:
$3.8M
Classified as:
Bridge & Cross-Chain, Bridge Logic Flaw

Description

NEAR Intents is listed in DefiLlama's hacks index as a defi protocol incident on BSC. The technique was recorded as bridge logic flaw. It is recorded as a bridge hack.

SKYDAO

Date:
September 2026
Network:
BNB Chain
Amount Stolen:
$183K
Classified as:
Protocol Logic, Swap Logic Flaw

Description

SKYDAO is listed in DefiLlama's hacks index as a defi protocol incident on BSC. The technique was recorded as swap logic flaw.