Crypto Hacks & Exploits Database 🛡️

🎉 Turn crypto exploit history into a clean, structured database — no login, no API key, one row per incident, with the project, amount lost, technique, chain and date. Built for security, DeFi risk and crypto research teams.

🔍 What is the Crypto Hacks & Exploits Database — and when should you use it?

Give this actor project names or chains and it returns matching incidents from public crypto hack / exploit records — as clean, deduplicated rows you can filter, export or feed to an AI agent. Every run queries the source live, so the data is as fresh as the registry itself.

Use it when you need: a project’s exploit history; hacks by technique or chain; or a timeline of incidents.

Use something else when: you need live protocol metrics — this is historical exploit records, not analytics.

🤖 Use with AI agents

Already on the Apify MCP server? Ask for this Actor by name: foxlabs/crypto-hacks-database.

Your agent can pay for its own runs. This Actor is pay-per-event with agentic payments, so an agent can discover it, run it and settle the bill over x402 (USDC on Base) or Skyfire — no Apify account or API token of its own. Billing is the same either way: per delivered record, never for errors.

Otherwise paste this into Claude, ChatGPT, Cursor or any MCP-enabled assistant:

I want to pull crypto exploit company records using the Apify Actor `foxlabs/crypto-hacks-database`.
Input: `queries` is a list of project names or chains. `maxResultsPerQuery` caps rows per query.
Start with: {"queries":["undefined"],"maxResultsPerQuery":50}
Ask me what to look up, run the Actor, then summarise the rows as a table.

The machine-readable API, MCP config and OpenAPI definition live at apify.com/foxlabs/crypto-hacks-database.md.

📋 Overview

Everything you need to turn public crypto hack / exploit records into clean, structured data — in one actor, with no login, cookies or API key.

Why teams pick this actor:

• ✅ Whole feed, one call — name or ID in, matching incidents out.
• 🧹 No empty-promise columns — only fields this registry actually fills; degenerate columns are removed.
• 🔗 Stable identifiers — every row carries the source's own IDs, ready to join across runs and to other Fox Labs actors.
• 💰 Pay only for results — per-row pricing, empty/failed lookups never billed.
• 🤖 Agent-ready — MCP + x402 agentic payments.

✨ Features

• 🔍 Name or ID lookup — relevance-ranked name search or exact registry-ID lookup.
• 🏢 Full entity profile — status, legal form, formation date, address and the registry’s own contact fields.
• 🧹 Clean schema — deduplicated camelCase rows, ready for CSV/Excel/JSON.

🎬 Quick Start

curl -X POST "https://api.apify.com/v2/acts/foxlabs~crypto-hacks-database/runs?token=YOUR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"queries":["undefined"],"maxResultsPerQuery":50}'

🚀 Getting Started (3 steps)

1. Choose your targets — project names or chains.
2. Set the cap — maxResultsPerQuery limits rows per query.
3. Run and export — get a clean dataset as JSON, CSV or Excel.

📥 Input

{"queries":["undefined"],"maxResultsPerQuery":50}

Field	Type	Description
queries	array	Project names or chains.
maxResultsPerQuery	integer	Caps rows per query.
maxConcurrency	integer	How many queries to fetch at once.
includeRaw	boolean	Attach the source’s untouched record under raw.

📤 Output

One row per company, saved to the dataset. Every row also carries query, scrapedAt, and — when a lookup fails — an error explaining why (never silently dropped, never billed).

Field	Description
rank	Rank
dateIso	Date Iso
name	Name
amountUsd	Amount Usd
amountUsdCompact	Amount Usd Compact
chainsText	Chains Text
classification	Classification
technique	Technique
targetType	Target Type
bridgeHack	Bridge Hack
returnedFunds	Returned Funds
returnedFundsUsd	Returned Funds Usd
returnedFundsUsdCompact	Returned Funds Usd Compact
language	Language
defillamaId	Defillama Id
generatedAtIso	Generated At Iso

💼 Use cases

1. Risk screening — check a project’s exploit history. Input: project names. Output: incidents + amounts. Use: a risk assessment.

2. Threat research — analyse exploits by technique. Input: chains or keywords. Output: incidents + techniques. Use: a threat report.

3. Insurance / audit — size losses in a category. Input: chains. Output: incidents + amounts. Use: quantify risk.

🔗 Integration

JavaScript / Node.js

import { ApifyClient } from 'apify-client';
const client = new ApifyClient({ token: 'YOUR_TOKEN' });
const run = await client.actor('foxlabs/crypto-hacks-database').call({"queries":["undefined"],"maxResultsPerQuery":50});
const { items } = await client.dataset(run.defaultDatasetId).listItems();
console.log(items[0]);

Python

from apify_client import ApifyClient
client = ApifyClient('YOUR_TOKEN')
run = client.actor('foxlabs/crypto-hacks-database').call(run_input={"queries":["undefined"],"maxResultsPerQuery":50})
for item in client.dataset(run['defaultDatasetId']).iterate_items():
    print(item)

Automation (n8n / Zapier / Make): schedule or webhook → HTTP request to the actor API with your queries → handle the JSON dataset → push to a sheet, CRM or dashboard.

📊 Pricing

Pay-per-event: per delivered record. Empty or failed lookups are never billed. View current pricing.

❓ FAQ

Do I need an account, login or API key? No. This reads public crypto hack / exploit records.

What do I search by? Project names or chains.

How current is the data? Every run queries the source live, so results are as fresh as the registry.

What does each row cover? One incident: the project, amount lost, exploit technique, chain and date.

Can I export to CSV / Excel / JSON? Yes — directly from the Apify dataset.

🐛 Troubleshooting

• Fewer rows than expected — raise maxResultsPerQuery, or refine the name.
• A name returns an unexpected entity — it matched a similar registered name; search the exact registry ID.
• No rows for a name — try the entity’s exact legal name or its registry ID.

⚖️ Is it legal to scrape this data?

This actor reads publicly reported crypto hack and exploit records. Results can still contain personal data (e.g. a person’s name); personal data is protected by the GDPR and similar laws, so only process it with a legitimate basis. See Apify’s blog post on the legality of web scraping.

🤝 Support & contact

• 🌐 Website: data.foxlabs.com.tr
• 📧 Email: info@foxlabs.com.tr
• 🐛 Issues: open a ticket in the Actor’s Issues tab
• 🧰 More clean B2B data actors: Fox Labs on Apify

Changelog

0.1 — 2026-09-07

• Enabled AI-agent payments (x402) + rebuilt the README to the full standard (What-is / when, AI-agents + x402 agentic payments + MCP, Overview, Features, Use cases, Integration, FAQ, Troubleshooting, Support & contact).

0.0

• Initial release: data from public crypto hack / exploit records by name or registry ID.