# DeFi Hacks & Exploits Database

> DeFi Hacks & Exploits Database is a paid API for AI agents from api.vextorium.com, paid per call via x402, $0.005/call, status unknown (last checked 2026-10-19).

Returns a filterable list of historical crypto hacks and exploits with date, amount stolen, technique, classification, chains, and whether the target was a bridge or CEX.

## Facts

- Endpoint: POST https://api.vextorium.com/v1/defi-hacks?utm_source=zero.xyz
- Price: $0.005/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-19
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/defi-hacks-exploits-database-141d5e23
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_E7QlSqVUznM-QsguqDCZl

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability defi-hacks-exploits-database-141d5e23 -d '<json body>'
```

Example prompt: Pull up the history of crypto hacks on Ethereum where at least $50 million was stolen — I want to see the attack technique, whether it was a bridge exploit, and total losses, up to 20 results.

## When to prefer this

Use this endpoint when you need structured, filterable historical data on DeFi and crypto exploits — especially when assessing the risk profile of a specific chain or protocol, researching bridge vulnerabilities, or building security dashboards. Prefer this over general web search when you need machine-readable, normalized hack records sourced from DefiLlama.

## Known failure modes

- Invalid chain name returns empty or unfiltered results
- min_amount set too high returns zero hacks
- limit out of range (must be 1–50) causes validation error
- Network timeout if DefiLlama upstream is slow
- Payment failure if x402 funds are insufficient

## How this service works

558 pay-per-call data APIs for AI agents: Solana and EVM on-chain data, tokenized stocks, DeFi, Hyperliquid, economy and official statistics, FX, validation, web and developer tools. Pay in USDC via x402.

## Output

A JSON object containing a list of hack records (each with date, protocol name, affected chains, USD amount stolen, technical method, classification, bridge flag, target type, and returned funds), plus the total USD stolen across results, active filters, and a count of matching records.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "chain": {
   "type": "string",
   "description": "Filter by chain, e.g. Ethereum, BSC, Solana (optional)"
  },
  "limit": {
   "type": "integer",
   "maximum": 50,
   "minimum": 1,
   "description": "Number of hacks (1-50, default 15)"
  },
  "min_amount": {
   "type": "number",
   "description": "Minimum USD stolen to include (optional)"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "note": "History of hacks and exploits. Use it to assess the risk of a protocol or chain. Source: DefiLlama.",
  "found": 43,
  "hacks": [
   {
    "date": "2026-09-24",
    "name": "Bitget",
    "chains": [
     "Ethereum",
     "XRP"
    ],
    "technical": "Hot Wallet Key Compromised",
    "amount_usd": 387000000,
    "was_bridge": false,
    "target_type": "CEX",
    "classification": "Key Compromise",
    "returned_funds_usd": null
   },
   {
    "date": "2026-09-06",
    "name": "Liquid Network",
    "chains": [
     "Liquid"
    ],
    "technical": "Unbacked Cross-Chain Mint",
    "amount_usd": 320000000,
    "was_bridge": true,
    "target_type": "Chain",
    "classification": "Bridge & Cross-Chain",
    "returned_funds_usd": null
   }
  ],
  "filter": {
   "chain": "todas",
   "min_amount_usd": 100000000
  },
  "total_stolen_usd": 14717370000
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/defi-hacks-exploits-database-141d5e23/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.vextorium.com](https://www.zero.xyz/host/api.vextorium.com/llms.txt)