Besides TheDAO - what are some examples of where Ether has been hacked, stolen or lost ?

  • Was auto-flagged as low-quality. Converted to wiki: Community wiki questions don't accrue rep and have a lower full editing reputation threshold. Questions should be manually converted to community wiki when they are marginal fits or 'list of X' questions that contain enough value to avoid deletion. This affects the question and all answers. – eth Aug 11 '16 at 18:16

After the DAO hack, some people created a list together on Reddit. You can also check Vitalik's blog post about it:

The DAO (obviously)
The “payout index without the underscore” ponzi (“FirePonzi”)
The casino with a public RNG seed
Governmental (1100 ETH stuck because payout exceeds gas limit)
5800 ETH swiped (by whitehats) from an ETH-backed ERC20 token
The King of the Ether game
Rubixi : Fees stolen because the constructor function had an incorrect name, allowing anyone to become the owner
Rock paper scissors trivially cheatable because the first to move shows their hand
Various instances of funds lost because a recipient contained a fallback function that consumed more than 2300 gas, causing sends to them to fail.
Various instances of call stack limit exceptions.

We can categorize the list by categories of bugs:

Variable/function naming mixups: FirePonzi, Rubixi
Re-entrancy (A calling B calling A): the DAO, Maker’s ETH-backed token
Sends failing due to 2300 gas limit: King of the Ether
Arrays/loops and gas limits: Governmental
Much more subtle game-theoretic weaknesses where at the limit people even debate whether or not they’re bugs: the DAO

There was a geth security risk that led to at least 7000 ETH being stolen.

EthereumJS had a bug that occasionally caused it to derive the wrong address from a given private key. It would happen with a probability of 1/128. This may have resulted in a lot of lost ETH.

The exchange GateCoin was hacked, resulting in the theft of 185,000 ETH.

Your Answer

