Besides TheDAO - what are some examples of where Ether has been hacked, stolen or lost ?
The DAO (obviously) The “payout index without the underscore” ponzi (“FirePonzi”) The casino with a public RNG seed Governmental (1100 ETH stuck because payout exceeds gas limit) 5800 ETH swiped (by whitehats) from an ETH-backed ERC20 token The King of the Ether game Rubixi : Fees stolen because the constructor function had an incorrect name, allowing anyone to become the owner Rock paper scissors trivially cheatable because the first to move shows their hand Various instances of funds lost because a recipient contained a fallback function that consumed more than 2300 gas, causing sends to them to fail. Various instances of call stack limit exceptions.
We can categorize the list by categories of bugs:
Variable/function naming mixups: FirePonzi, Rubixi Public data that should not have been public: the public RNG seed casino, cheatable RPS Re-entrancy (A calling B calling A): the DAO, Maker’s ETH-backed token Sends failing due to 2300 gas limit: King of the Ether Arrays/loops and gas limits: Governmental Much more subtle game-theoretic weaknesses where at the limit people even debate whether or not they’re bugs: the DAO
There was a geth security risk that led to at least 7000 ETH being stolen.
EthereumJS had a bug that occasionally caused it to derive the wrong address from a given private key. It would happen with a probability of 1/128. This may have resulted in a lot of lost ETH.
The exchange GateCoin was hacked, resulting in the theft of 185,000 ETH.