Every major crypto incident in 2026 so far.

Jan–Feb 2026 · 16 incidents · ~$86.89M in confirmed hacks (~$112.29M including scams/rugs)
🔴 JANUARY 2026 – Technical Exploits
1. TMXTribe: $1.4M
Logic bug exploited, no pause triggered – Jan 8
2. TrueBit: $26.2M
Unchecked integer overflow in unverified bytecode – Jan 12
3. YO Protocol: $3.71M
Broken slippage parameters on $3.84M swap – Jan 14
4. ZeroLend: $371K
LBTC left Base market 10+ months prior, withdrawals still blocked – Jan 20
5. Makina: $4.13M
Flash loan + oracle manipulation – Jan 22
6. Saga: $7M
Forged IBC messages, funds minted from thin air – Jan 26
🟡 JANUARY 2026 – Governance/Structural Failure
7. Aave: Governance crisis
Christmas-week vote over brand control and swap fees collapsed – Jan 6
🟠 JANUARY 2026 – Scam/Rug
8. Trove Markets: $9.4M retained (raised $11.5M)
ICO pivoted chains before launch, funds kept "to keep building" – Jan 28
🔴 FEBRUARY 2026 – Technical Exploits
9. Step Finance: $27.3M
Executive inbox compromised, SOL unstaked and drained – Feb 4
10. Moonwell: $1.78M
cbETH priced at $1.12 instead of ~$2,200, liquidation cascade – Feb 20
11. IoTeX/ioTube: $4.4M
Single private key gave full bridge admin access – Feb 25
12. YieldBlox: $10.97M
Oracle manipulation, USTRY pumped 100× on Stellar DEX – Feb 27
🟠 FEBRUARY 2026 – Scam/Token Event
13. OpenClaw/Frankenclaw: $16M scam token
Hype-driven launch, exposed credentials – Feb 3
🔵 FEBRUARY 2026 – Ecosystem/Security Risk Events
14. Identity Theft 2.0
AI agent skill poisoning (~20% reported affected) – Feb 19
15. Digital Parasites
Nation-state malware infiltration narrative – Feb 12
16. Legitimacy on Demand
62% of crypto press releases tied to high-risk or scam projects – Feb 9