🥇
Terra Classic
$40.00B
Most Expensive Crypto Hacks Leaderboard
The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.
-
$91B+
Total Value Lost
-
3595
Incidents Tracked
-
141
Chains Affected
-
65
$100M+ Incidents
Top 10 Biggest Hacks
Where the Largest Losses Concentrate
Top Chains by Losses
Top Techniques by Losses
Full Leaderboard
Showing 501-550 of 3595 ranked incidents
| Rank | Project | Amount Lost | Date | Chain | Technique | Attack Guide | Source |
|---|---|---|---|---|---|---|---|
| 501 | BTC.com | $3.0M | bitcoin, ethereum | Other / Key Leaked via Infrastructure | — | View → | |
| 502 | Skyward Finance | $3.0M | near | Reentrancy / Other / Missing Input Validation | Reentrancy | View → | |
| 503 | Fortress Loans | $3.0M | bsc | Governance and Oracle Exploit / Other / Malicious Proposal | Oracle Manipulation & Price Manipulation | View → | |
| 504 | Rich Dwarves Tribe | $3.0M | - | Abandoned | — | View → | |
| 505 | Tinyman | $3.0M | algorand | Other / Incorrect Share Accounting | — | View → | |
| 506 | PolkaTrain | $3.0M | polkadot | Other / Reward Logic Flaw | — | View → | |
| 507 | OKEx | $3.0M | - | Other | — | View → | |
| 508 | SushiSwap | $3.0M | ethereum | Other / Redirected Deposits / Frontend Compromise | — | View → | |
| 509 | Stars Arena | $3.0M | avalanche | Reentrancy | Reentrancy | View → | |
| 510 | Zunami Protocol - Case File | $3.0M | - | - | — | View → | |
| 511 | IOTA wallet | $2.9M | - | Other | — | View → | |
| 512 | Wallstreetswap Finance | $2.9M | binance | Rugpull | — | View → | |
| 513 | SUNRAY·FINANCE | $2.9M | arbitrum | Private Key Compromised / Access Control | Access Control Attacks | View → | |
| 514 | TAC Protocol | $2.9M | tac, ton | Proof Verifier Bug | — | — | |
| 515 | MetaDAO | $2.8M | - | Honeypot | — | View → | |
| 516 | Solv Protocol | $2.7M | ethereum | Other / Mint Reserves Logic Exploit / Infinite Mint | — | View → | |
| 517 | Multichain | $2.7M | ethereum | Other / Missing Input Validation | — | View → | |
| 518 | RetoSwap | $2.7M | monero | Other / Missing Input Validation / Malicious Proposal | — | View → | |
| 519 | Ribbon | $2.7M | ethereum | Private Key Compromised / Improper Access Control | Access Control Attacks | View → | |
| 520 | Hector Network | $2.7M | ethereum | Improper Access Control | Access Control Attacks | — | |
| 521 | OKX DEX | $2.7M | ethereum | Private Key Compromised (Unknown Method) / Private Key Compromised / Access Control | Access Control Attacks | View → | |
| 522 | Remitano | $2.7M | bitcoincash, ethereum, tron | Private Key Compromised (Unknown Method) / Key Leaked via Infrastructure | Access Control Attacks | View → | |
| 523 | IDO rug pulls | $2.7M | - | Rugpull | — | View → | |
| 524 | Fantasm Finance | $2.6M | fantom | Missing Condition Check / Other / Missing Input Validation | — | View → | |
| 525 | BNB42 | $2.6M | - | Rugpull | — | View → | |
| 526 | PYE | $2.6M | - | Other | — | View → | |
| 527 | Fetch.ai | $2.6M | multiple | Private Key Compromised / Access Control | Access Control Attacks | View → | |
| 528 | Nemo Yield Trading | $2.6M | sui | Exposed flash-loan function and unauthorized state changes | Access Control Attacks | View → | |
| 529 | FCS | $2.6M | - | Rugpull | — | View → | |
| 530 | Boy X Highspeed | $2.6M | - | Other | — | View → | |
| 531 | Purse | $2.5M | - | Access Control | Access Control Attacks | View → | |
| 532 | Hyperbridge | $2.5M | arbitrum, base, bsc, ethereum | Fake State Proof / Other / Forged Proof | — | View → | |
| 533 | Atlantis Loans | $2.5M | bsc | Governance takeover and approval drain | Access Control Attacks | View → | |
| 534 | Zapper | $2.5M | - | Other | Delegatecall & Call Injection Attacks | View → | |
| 535 | EtherCrash | $2.5M | ethereum | Hot Wallet Key Compromised | — | — | |
| 536 | Emerald Mine | $2.5M | eos | Rugpull | — | View → | |
| 537 | Phishing | $2.5M | - | Phishing | Phishing Attacks | View → | |
| 538 | Aquifer | $2.5M | solana | Other | — | View → | |
| 539 | Wallet Drain | $2.4M | - | Phishing | Phishing Attacks | View → | |
| 540 | SecondFi | $2.4M | cardano | Weak Key Generation | — | View → | |
| 541 | Tessera DAO | $2.4M | bsc | Access Control / Improper Access Control / Infinite Mint | Access Control Attacks | View → | |
| 542 | CoinSpot | $2.4M | ethereum | Private Key Compromised (Unknown Method) / Hot Wallet Key Compromised | Access Control Attacks | View → | |
| 543 | PancakeBunny | $2.4M | bsc | Inflated vault-profit accounting | Flash Loan Attacks | View → | |
| 544 | TempleDAO | $2.4M | ethereum | Exploit Lack of Input Authentication / Other / Improper Access Control | Access Control Attacks | View → | |
| 545 | BitPay | $2.4M | - | Access Control | Access Control Attacks | View → | |
| 546 | Trinity Wallet | $2.4M | iota | Cloudflare Key Compromised / CDN Compromise | — | View → | |
| 547 | Evolved Apes | $2.3M | - | Rugpull | — | View → | |
| 548 | Turtledex | $2.3M | binance, bsc | Rugpull / Drained Contracts / Liquidity Rug | — | View → | |
| 549 | friesDAO | $2.3M | ethereum | Access Control / Weak Key Generation | Access Control Attacks | View → | |
| 550 | Fairmoon | $2.3M | - | Rugpull | — | View → |
Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.
Understanding the Pattern Behind Billion-Dollar Losses
The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.
For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.
Frequently Asked Questions
How is this leaderboard ranked?
Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.
Does this include every attack type?
It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.
How can I learn to prevent these exploits?
Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.
Learn to Prevent High-Impact Smart Contract Hacks
$91B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.
Start your free security training
Get 25 free lessons and 4 guided exploit exercises.
Onboarding details by email within 2–3 business days.