Crypto post-mortem archive · Established 2026
What really happened, in structured form.
Crypto news writes the moment. Court filings live in PACER. On-chain forensics live on Etherscan. CryptoMortem is the place where all three converge — one structured record per incident, every claim cited, every recovery tracked through to distribution.
What we publish
Every claim sourced. Every event the same shape.
Rekt.news writes the post-mortem. CoinDesk writes the news. PACER holds the court filings. Wikipedia keeps a thin summary. None of them lets you do what an analyst actually needs: answer what really happened, where the money went, and how this compares to past failures of the same shape.
This archive does. One page per event. The timeline reads like a court docket. The on-chain flows link to the forensics. The recovery percentage updates as bankruptcy distributions land. Cross-links surface every event sharing an actor, attack vector, or structural failure.
Anatomy of a record
Five layers per event.
Hourly timeline
What happened, when, in source-cited steps. Pivotal moments highlighted; full chronology from first disclosure to final court ruling.
Who was involved
Victims, attackers, enablers, custodians, regulators — each entity linked, their role in the event tagged, their cumulative record viewable.
Structural failures
Each event tagged with the conditions that made it possible — no proof of reserves, oracle manipulation, stale delegation. Pattern library makes recurrence visible.
Recovery tracking
For resolved bankruptcies, the percentage of user funds returned. Updated as new distributions are confirmed by court filings.
Legal status
Verdicts, sentences, custodian assignments, ongoing proceedings. Linked to primary source filings where available.
Recent records
All events →Michelle Bond November Trial in FTX Finance Case
A federal judge in Manhattan set Michelle Bond’s criminal trial for Nov. 9, 2026 after denying her motion to dismiss an indictment alleging unlawful funding of her 2022…
Funds affected$400KAllbridge Core pause after reported $1.65M Solana exploit
Allbridge said it paused Allbridge Core after a reported $1.65 million incident affecting its Solana deployment; reporting indicated a flash-loan-driven stablecoin rate…
Funds affected$1.6MArrest in Steam Malware Crypto Theft Investigation
Federal agents arrested Zyaire Wilkins in connection with a malware scheme allegedly embedded in video games, which investigators said infected about 8,000 devices, accessed about…
Funds affected$220KUsers80OFAC Freeze of Iran-Linked Wallets Exceeded $130M
A 2026 Treasury action reportedly sanctioned multiple Iran-linked crypto wallets through OFAC and froze over $130 million, though the public record remains limited to a brief news…
Funds affected$130.0MHumanity Protocol June 2026 Key-Compromise Hack
Humanity Protocol said a June 2026 exploit led to the theft of $36 million in H tokens after an employee laptop was compromised and production keys had been backed up onto that…
Funds affected$36.0MBonzo Lend Oracle Exploit on Hedera
Bonzo Lend reported that an attacker inflated SAUCE collateral through a flaw in Supra’s on-chain oracle verifier, then borrowed about $9 million from the Hedera-based lending…
Funds affected$9.0M
Find what you need
Browse the archive by…
All events
Every catalogued record, newest first.
0By type
Hacks · Collapses · Depegs · Rugpulls · Regulatory.
185By entity
Exchanges, founders, attackers, regulators — and the events tied to each.
23By pattern
Structural failures that repeat: proof-of-reserves gaps, oracle manipulation, stale delegations.
For journalists & researchers
Every record is also an API.
Each event page exposes a JSON endpoint at /api/events/<slug>. The full archive is at /api/events. No registration, no rate limit on reasonable use, attribution appreciated.