About

What we include

Public thefts, hacks, and cases where assets were moved without authorization. An entry needs a source from a party to the incident, a security firm, or an enforcement agency. Price drops, exits with no theft, and rumors that only move between promotional accounts stay off the site.

Figures

The amount on the list and at the top of an entry is the primary figure, with an as-of date. When the project, a security firm, and an enforcement agency give different numbers, the rest stay under Other figures. Each number is kept. They are not averaged, and a newer number does not replace an older one. A later revision is another entry on the timeline.

A reserve, a spoken promise, and money already credited to user accounts are recorded apart. A figure is reimbursed or recovered only when a source says the money was returned or replaced.

Sources

Posts, status pages, and announcements from the parties come first. Security firms and news reports add the rest and are marked secondary. Commentary is not used to set an amount. Quotes stay in the original wording. The narrative on the page is a summary. If a post is later deleted, the page keeps the excerpt, the link, and the date it was captured.

A name is an attribution only after the FBI, the Treasury, or another enforcement or sanctions body names that party. Until then, the page records who is speaking.

What we leave out

Exploit steps, attack contracts, and instructions for reproducing an attack are left out. The method stays a category, plus a sentence or two that a party or a security firm has already published.