CryptoExID

Incident DB · Data study · Updated Aug 19, 2026

Crypto Exchange Security Incident Database

Public-record breaches across tracked venues: year, scope, loss and whether customers were made whole.

Reviewed by CryptoExID Editorial · Aug 19, 2026 · Editorial policy · how we make money

11 public-record incidents across tracked venues. The pattern worth noticing: 11 of 11 ended with customers made whole — modern top-tier venues eat the loss from corporate funds. The venues that never appear in this table have either excellent key management or a short history; our security score weighs both.

ExchangeYearIncidentLoss (USD)Customers reimbursedSecurity score today
Bybit2025Cold wallet breach (~$1.4B ETH), covered from reserves$1.4BYes8.3
HTX2023Hot wallet breach (HTX + Heco bridge)$110MYes7.6
Crypto.com20222FA bypass on ~480 accounts$34MYes8.8
BitMart2021Hot wallet key compromise$196MYes6.8
KuCoin2020Hot wallet breach; ~84% recovered$280MYes7.8
Upbit2019Hot wallet breach (342,000 ETH)$49MYes8.9
Binance2019Hot wallet breach (7,000 BTC)$40MYes8.7
Bithumb2019Insider-linked EOS/XRP theft$19MYes8.2
Coincheck2018NEM hot wallet breach$530MYes8.2
Bitfinex2016Multisig breach (119,756 BTC); repaid via tokens$72MYes8.0
Bitstamp2015Hot wallet breach (19,000 BTC)$5MYes9.2

Methodology: every value on this page is generated from the same dataset that powers our rankings, on the dataset date shown above. Estimates (spreads, network fees, staking rates) are modeled from venue tier and published schedules, not live feeds — treat them as comparable midpoints, and check the venue before moving size. Corrections: how we rank.