Most Expensive Crypto Hacks Leaderboard

The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.

  • $101B+

    Total Value Lost

  • 3299

    Incidents Tracked

  • 74

    Chains Affected

  • 80

    $100M+ Incidents

Hall of Infamy

Top 10 Biggest Hacks

Jump to full leaderboard
  2. 🥈

    Mantra

    $5.50B

  4. #4

    LuBian

    $3.50B

    bitcoin

  8. #8

    Thodex

    $2.00B

  10. #10

    Finiko

    $1.50B

Breakdown

Where the Largest Losses Concentrate

Top Chains by Losses

  • ethereum $8,051M
  • bitcoin $4,415M
  • bsc $2,657M
  • solana $1,605M
  • polygon $1,512M

Top Techniques by Losses

  • Other $61,553M
  • Rugpull $15,684M
  • Access Control $4,030M
  • Private Key Compromised (Brute Force) $3,500M
  • Safe Multisig wallet Phishing Exploit / Access Control $1,635M
All Incidents

Full Leaderboard

Showing 501–550 of 3299 ranked incidents

Largest Web3 incidents by USD amount lost
Rank Project Amount Lost Date Chain Technique Attack Guide Source
501 UwU Lend $3.7M ethereum Flashloan Price Oracle Attack / Flash Loan Attack Flash Loans Attacks View →
502 GMETA $3.7M - Rugpull — View →
503 Aperture Finance $3.7M - Other — View →
504 dForce $3.6M - Oracle Issue Oracle Manipulation & Price Manipulation View →
505 dForce Lending $3.6M arbitrum, optimism Reentrancy Reentrancy View →
506 Bogged Finance $3.6M binance Flash Loan Attack Flash Loans Attacks View →
507 HyperVault $3.6M hyperliquid l1 Drain Vaults / Rugpull — View →
508 Hayden Adams Phishing $3.6M - Phishing Phishing Attacks View →
509 Rocket Pool $3.6M - Phishing Phishing Attacks View →
510 Luke Dashjr $3.6M - Access Control Access Control Attacks View →
511 Nirvana Finance $3.6M - Flash Loan Attack Flash Loans Attacks View →
512 SushiSwap $3.5M arbitrum, bsc, ethereum, optimism Missing Input Validation / Other — View →
513 Volo $3.5M - - — View →
514 Volo $3.5M - Other — View →
515 Sportsbet.io $3.5M - Access Control Access Control Attacks View →
516 Dragoma $3.5M polygon Drain Vaults / Rugpull — View →
517 Nirvana V1 $3.5M solana Flashloan Price Oracle Attack Flash Loans Attacks View →
518 PokeMoney $3.5M - Rugpull — View →
519 Siren $3.5M polygon Reentrancy Reentrancy View →
520 Typus Finance $3.4M - Oracle Issue Oracle Manipulation & Price Manipulation View →
521 NYC Memecoin $3.4M - Rugpull — View →
522 Typus Perp $3.4M sui TLP Contract Exploit — View →
523 EraLend $3.4M zksync era Reentrancy Reentrancy View →
524 Squid Games $3.4M bsc Drained Liquidity Pool — View →
525 Vesper Finance $3.4M ethereum Oracle Manipulation / Other Oracle Manipulation & Price Manipulation View →
526 Shido $3.3M ethereum Private Key Compromised / Access Control Access Control Attacks View →
527 Socket $3.3M - Other — View →
528 Bungee $3.3M ethereum Missing Input Validation — View →
529 Raft $3.3M ethereum Infinite Mint and Dump / Other — View →
530 Hundred Finance $3.3M - Other — View →
531 CheeseBank $3.3M ethereum Flashloan Price Oracle Attack Flash Loans Attacks View →
532 Cheese Bank $3.3M ethereum Flash Loan Attack Flash Loans Attacks View →
533 HoneySwap.Fi $3.3M binance Rugpull — View →
534 Conic Finance $3.3M ethereum Flashloan Reentrancy Attack / Reentrancy Flash Loans Attacks View →
535 Ref Finance $3.2M - Other — View →
536 Third-party SquidRouterModule $3.2M - Access Control Access Control Attacks View →
537 Aperture LM $3.2M base, bsc, ethereum - — View →
538 Zabu Finance $3.2M avalanche Flashloan Exploit / Other Flash Loans Attacks View →
539 Coinsecure $3.2M - Access Control Access Control Attacks View →
540 GANA Payment $3.1M bsc Private Key Compromised / Other Access Control Attacks View →
541 JayPegs Automart $3.1M ethereum Redirected Deposits — View →
542 Cashaa $3.1M - Access Control Access Control Attacks View →
543 Phishing $3.0M - Phishing Phishing Attacks View →
544 DEUS Finance $3.0M - Flash Loan Attack Flash Loans Attacks View →
545 Polymarket $3.0M - Other — View →
546 CrossCurve $3.0M - Spoofed Cross-Chain Messages / Other — View →
547 Beets $3.0M - Access Control Access Control Attacks View →
548 GriffinAI $3.0M bsc False Peer Exploit / Access Control Access Control Attacks View →
549 Shibarium $3.0M shibarium Validator Stake Manipulation by Flashloan Flash Loans Attacks View →
550 EOA Token Theft $3.0M - Other — View →

Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.

Context

Understanding the Pattern Behind Billion-Dollar Losses

The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.

For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.

Common Questions

Frequently Asked Questions

How is this leaderboard ranked?

Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.

Does this include every attack type?

It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.

How can I learn to prevent these exploits?

Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.

Learn to Prevent High-Impact Smart Contract Hacks

$101B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.

Start Free Trial → View Full Course