โ† All Features
๐Ÿ“š

Hack Database

Every exploit teaches something. The Hack Database catalogs real-world DeFi attacks โ€” root cause analysis, attack vectors, affected protocols, and the patterns that made them vulnerable. This isn't just a reference library. It's the training ground for compound intelligence: each documented exploit improves future detection by giving agents concrete patterns to hunt for across new codebases. Fork hunting, pattern matching, and adversarial reasoning all start here.

Highlights
โœ“Curated exploit analyses with root cause breakdowns
โœ“Attack vector taxonomy: reentrancy, oracle manipulation, access control
โœ“OpenZeppelin security research integration
โœ“Feeds directly into agent scanning heuristics
54Audit Reports
21Protocols
15Auditors
6Research Docs
๐Ÿ”ฅ
Deflationary Token AMM Exploit โ€” MetaPool Case StudyToken Manipulation
Bounty Range$100K-500K

MetaPool exploited via deflationary token manipulation in AMM pools. Attacker used repeated skim() calls following burn transfers to inflate...

BSCETH1 finding2025-08-06
๐Ÿฆ
ERC-4626 Override Leading to Free MintAccess Control
Bounty Range$50K-100K

MetaPool mpETH vault allowed free minting when internal _deposit() was overridden without protecting mint() entry point. Inheritance bypass ...

ETH1 finding2025-08-06
โ›”
Permit2 DoS via Nonce DesynchronizationDenial of Service
Bounty Range$10K-25K

Across Protocol vulnerability where attackers could invalidate nonces on Permit2, causing DoS for legitimate users via nonce tracking desync...

ETH1 finding2025-08-06
๐Ÿฆ€
Rust Unsafe Behavior Across Compiler TargetsCompilation Bug
Bounty Range$100K+

Solana programs vulnerable to target-dependent undefined behavior. x86_64 assumptions fail on BPF/SBF targets due to memory alignment and op...

Solana1 finding2025-01-16
โš–๏ธ
Balancer V2 Exploit Deep DiveFlash Loan + Reentrancy
Bounty Range$200K-500K

Comprehensive analysis of Balancer V2 exploit involving flash loan manipulation, protocol accounting errors, and reentrancy through external...

ETH3 findings2025-01-12
๐Ÿ“ˆ
ERC-4626 Exchange Rate ManipulationExchange Rate Manipulation
Bounty Range$50K-200K

ERC-4626 vaults vulnerable to share price manipulation via direct asset donations. Attacker inflates exchange rate, benefiting existing hold...

ETH1 finding2025-01-12
External20 reports
OpenZeppelinExternal
Date2025-11

OpenZeppelin RLP Audit

LibraryExternal
OpenZeppelinExternal
Date2025-10

OpenZeppelin v5.5 Audit

LibraryExternal
OpenZeppelinExternal
Date2025-07

OpenZeppelin v5.4 Audit

LibraryExternal
OpenZeppelinExternal
Date2025-04

OpenZeppelin v5.3 Audit

LibraryExternal
OpenZeppelinExternal
Date2024-12

OpenZeppelin v5.2 Audit

LibraryExternal
OpenZeppelinExternal
Date2024-10

OpenZeppelin v5.1 Audit

LibraryExternal
PintoExternal
Date2024

Pinto Protocol Audit

DeFiExternal
OpenZeppelinExternal
Date2023-10

OpenZeppelin v5.0 Audit

LibraryExternal
OpenZeppelinExternal
Date2023-05

OpenZeppelin v4.9 Audit

LibraryExternal
ALEXExternal
Date2023-04

ALEX Bridge Audit

BridgeExternal
FirmExternal
Date2023

Firm / Nomoi Audit

DeFiExternal
Ref FinanceExternal
Date2023

Ref Finance Security Audit

DEXExternal
OpenZeppelinExternal
Date2022-10

OpenZeppelin Checkpoints Audit

LibraryExternal
OpenZeppelinExternal
Date2022-10

OpenZeppelin ERC-4626 Audit

LibraryExternal
ALEXExternal
Date2022-04

ALEX Launchpad v1.1 & AutoALEX Audit

DeFiExternal
ALEXExternal
Date2022-02

ALEX DAO Audit

GovernanceExternal
ALEXExternal
Date2022-01

ALEX Launchpad & Vault Audit

DeFiExternal
AlchemixExternal
Date2022

Alchemix v2 Audit

DeFiExternal
ALEXExternal
Date2021-11

ALEX Pool Equation Audit

DeFiExternal
OpenZeppelinExternal
Date2018-10

OpenZeppelin Contracts Audit (2018)

LibraryExternal
Browse All Research โ†’