203 documented ways a Solidity contract loses money, each with what goes wrong, the code that does it, the code that does not, and the incidents where it actually happened. This is the table the SaferICO scanner grades contracts against — 201 of the 203 have an automated detector behind them.
The SWC registry, the field's usual reference, stopped being updated years ago and stops at SWC-136. 70 of the entries below have no SWC id at all — vault inflation, sequencer-uptime feeds, ERC-4626 rounding, EIP-7702 delegation. Those are the ones costing money now.
203 of 203 shown
Every class above has cost somebody money. The Hall of Hacks documents the 20 largest smart-contract failures on record — the attack path, the real vulnerable code, and the one-line difference that would have stopped it.
Paste an address or your Solidity source and the same 201 detectors run against it in your browser. Nothing is uploaded.