WebacyDepeg Risk Monitor
OverviewBackingEventsVault IncidentsGraveyardFreeze IntelligenceModelContaminationVaultsDocsAbout

Vault Incidents & Attacks

Taxonomy-aligned historical events. Filter by failure category or attack mechanism. Maps to vault scoring sub-scores.

Showing
13
Est. Loss
$43.01B
Protocols
13

Incidents by attack mechanism (all 13 events)

Logic error (4)Oracle manipulation (2)Insolvency cascade (2)Flash loan (2)Donation attack (1)Reentrancy (1)Liquidity freeze (1)

Morpho Steakhouse Oracle Manipulation

Morpho•Steakhouse USDC•eth
Exploit
Strategy / protocolOracle manipulation
Date
Jun 6, 2024
Loss
$20.00M

Oracle manipulation allowed attacker to borrow against inflated collateral. ~$20M in bad debt. Morpho paused markets and…

2024-06-06 → 2024-06-06View Details →

Sonne Finance Velodrome Exploit

Sonne•sUSDC•base
Exploit
Strategy / protocolOracle manipulation
Date
May 14, 2024
Loss
$20.00M

Donation attack on Velodrome-based lending markets. Attacker donated vAMM tokens to manipulate oracle, then borrowed ~$2…

2024-05-14 → 2024-05-14View Details →

Curve 3pool Vyper Reentrancy

Curve•3pool•eth
Exploit
InfrastructureReentrancy
Date
Jul 30, 2023
Loss
$70.00M

Vyper compiler bug in older versions allowed reentrancy. Multiple Curve pools (including 3pool) exploited; ~$70M drained…

2023-07-30 → 2023-07-31View Details →

Yearn yUSDT Vault Exploit

Yearn•yUSDT•eth
Exploit
Vault contractLogic error
Date
Apr 13, 2023
Loss
$11.54M

Flash loan attack on legacy yUSDT vault. Misconfiguration used wrong Fulcrum token address (iUSDC instead of iUSDT), all…

2023-04-13 → 2023-04-13View Details →

Euler Finance Flash Loan Attack

Euler•eDAI•eth
Exploit
Strategy / protocolDonation attack
Date
Mar 13, 2023
Loss
$197.00M

Donation attack exploited vulnerable donate() function. Attacker donated assets to skew exchange rates, then drained ~$1…

2023-03-13 → 2023-03-13View Details →

USDC Silicon Valley Bank Depeg

Circle•USDC•eth
Depeg
StablecoinLiquidity freeze
Date
Mar 10, 2023
Loss
$0

Circle disclosed $3.3B exposure to Silicon Valley Bank. USDC depegged to ~$0.88. Massive vault impairment risk across pr…

2023-03-10 → 2023-03-13View Details →

Nomad Bridge Hack

Nomad•eth
Exploit
InfrastructureLogic error
Date
Aug 1, 2022
Loss
$190.00M

Verification logic flaw allowed attackers to drain ~$190M from bridge. Cross-chain vaults and bridged assets severely im…

2022-08-01 → 2022-08-02View Details →

Terra UST Collapse

Terra•UST•eth
Depeg
StablecoinInsolvency cascade
Date
May 7, 2022
Loss
$40.00B

Algorithmic stablecoin UST lost peg and collapsed to near zero. $40B ecosystem wiped. Anchor yield implosion. Vaults hol…

2022-05-07 → 2022-05-13View Details →

Wormhole Bridge Hack

Wormhole•eth
Exploit
InfrastructureLogic error
Date
Feb 2, 2022
Loss
$320.00M

Signature verification bypass allowed minting of 120k ETH without collateral. $320M drained. Bridge risk critical for cr…

2022-02-02 → 2022-02-02View Details →

Cream Finance Flash Loan Exploit

Cream•crUSDC•eth
Exploit
Strategy / protocolFlash loan
Date
Aug 30, 2021
Loss
$130.00M

Flash loan attack drained $130M in AMP and ETH. Cream had multiple prior exploits; protocol eventually shut down.

2021-08-30 → 2021-08-30View Details →

Iron Finance Bank Run Collapse

Iron Finance•IRON•polygon
Depeg
StablecoinInsolvency cascade
Date
Jun 16, 2021
Loss
$2.00B

Algorithmic stablecoin death spiral. Bank run triggered TITAN crash; IRON lost peg. Early example of algo-stable vulnera…

2021-06-16 → 2021-06-17View Details →

Pickle Finance Jar Exploit

Pickle•pJar•eth
Exploit
Vault contractLogic error
Date
Nov 22, 2020
Loss
$20.00M

Attacker exploited swap logic in DILL pickle jar to drain $20M. Vault contract bug in strategy interaction.

2020-11-22 → 2020-11-22View Details →

Harvest Finance Flash Loan Attack

Harvest•fUSDC•eth
Exploit
Strategy / protocolFlash loan
Date
Oct 26, 2020
Loss
$34.00M

Flash loan attack manipulated Curve pool to drain $34M from USDC and USDT vaults. Classic AMM + vault interaction exploi…

2020-10-26 → 2020-10-26View Details →