🥇
Terra Classic
$40.00B
Most Expensive Crypto Hacks Leaderboard
The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.
-
$91B+
Total Value Lost
-
3595
Incidents Tracked
-
141
Chains Affected
-
65
$100M+ Incidents
Top 10 Biggest Hacks
Where the Largest Losses Concentrate
Top Chains by Losses
Top Techniques by Losses
Full Leaderboard
Showing 551-600 of 3595 ranked incidents
| Rank | Project | Amount Lost | Date | Chain | Technique | Attack Guide | Source |
|---|---|---|---|---|---|---|---|
| 551 | FOOM Cash | $2.3M | base, ethereum | Fake Proof Spam / Forged Proof | Phishing Attacks | View → | |
| 552 | Bifrost | $2.2M | - | Compromised deposit-address signing key | — | View → | |
| 553 | PopcornSwap | $2.2M | binance | Rugpull | — | View → | |
| 554 | Texture | $2.2M | solana | Improper Access Control | Access Control Attacks | View → | |
| 555 | CoinStats | $2.2M | - | Private Key Compromised (Unknown Method) / Phishing | Access Control Attacks | View → | |
| 556 | Platypus Finance | $2.2M | avalanche | Flash-loan-enabled pool price manipulation | Flash Loan Attacks | View → | |
| 557 | Pond0x | $2.2M | ethereum | Arbitrary External Call | Access Control Attacks | — | |
| 558 | NEKO | $2.2M | bsc | Improper Access Control | Access Control Attacks | — | |
| 559 | Aztec Bridge | $2.2M | ethereum | Bridge Logic Flaw / Other | — | View → | |
| 560 | Venus | $2.2M | bsc | Other / Donation Attack | — | View → | |
| 561 | Zunami Protocol | $2.2M | ethereum | Price Manipulation Attack / Flash Loan Attack / Spot Price Manipulation | Flash Loan Attacks | View → | |
| 562 | Tornado Cash | $2.2M | ethereum | Other / Malicious Proposal | — | View → | |
| 563 | Deriswap | $2.2M | ethereum | Rugpull | — | View → | |
| 564 | BitoPro | $2.2M | - | Other | — | View → | |
| 565 | Mobius Token | $2.2M | bsc | Decimal Miscalculation Exploit / Other / Decimal Miscalculation | Arithmetic Overflow & Underflow Attacks | View → | |
| 566 | ApolloX | $2.2M | bsc | Other / Signature Verification Flaw | — | View → | |
| 567 | Onyx Protocol | $2.1M | ethereum | Flashloan Donate Function Logic Exploit / Flash Loan Attack / Donation Attack | Flash Loan Attacks | View → | |
| 568 | Gatecoin | $2.1M | ethereum | Access Control / Improper Access Control | Access Control Attacks | View → | |
| 569 | Kannagi | $2.1M | ethereum, zksync era | Drained Contracts / Admin Drain | — | View → | |
| 570 | ETHTrustFund | $2.1M | base | Transferred Treasury to Mixers / Treasury Misappropriation / Rugpull | — | View → | |
| 571 | Mozaic | $2.1M | arbitrum | Access Control / Private Key Compromised | Access Control Attacks | View → | |
| 572 | Unizen | $2.1M | ethereum | External Call Vulnerability / Other / Arbitrary External Call | Access Control Attacks | View → | |
| 573 | Starlay Finance | $2.1M | acala | Redeem Logic Flaw | — | — | |
| 574 | YieldRobot | $2.1M | - | Rugpull | — | View → | |
| 575 | Dictum Exchange | $2.1M | - | Rugpull | — | View → | |
| 576 | Gym Network | $2.1M | bsc | Deposit Function Exploit / Other / Improper Access Control | Access Control Attacks | View → | |
| 577 | Fake GIWA Bridge | $2.1M | ethereum | Impersonation Scam | Phishing Attacks | — | |
| 578 | stazie | $2.1M | - | Access Control | Access Control Attacks | View → | |
| 579 | Dexible | $2.0M | arbitrum, ethereum | Access Control / Arbitrary External Call | Access Control Attacks | View → | |
| 580 | Polygon | $2.0M | polygon | Improper Access Control | Access Control Attacks | — | |
| 581 | Aztec | $2.0M | ethereum | Other / Forged Proof | — | View → | |
| 582 | AFKSystems Finance | $2.0M | - | Rugpull | — | View → | |
| 583 | Revest Finance | $2.0M | ethereum | ERC-1155 callback reentrancy | Reentrancy | View → | |
| 584 | DYORSWAP | $2.0M | ethereum | Phishing / Impersonation Scam | Phishing Attacks | View → | |
| 585 | RRWallet | $2.0M | bitcoin | Weak Key Generation | — | View → | |
| 586 | Rari Capital | $2.0M | ethereum | Uninitialized Proxy Hijack / Uninitialized Proxy | Access Control Attacks | View → | |
| 587 | New Gold Protocol | $2.0M | bsc | Flash Loan Attack / Spot Price Manipulation | Flash Loan Attacks | View → | |
| 588 | OlaXBT | $2.0M | bsc | Multisig wallet Social Engineering Exploit / Access Control / Signer Phishing | Access Control Attacks | View → | |
| 589 | MEV Bots | $2.0M | - | Access Control | Access Control Attacks | View → | |
| 590 | Sirio Finance | $2.0M | hedera | Flashloan Exploit / Spot Price Manipulation | Flash Loan Attacks | View → | |
| 591 | GemPad | $2.0M | base, bsc, ethereum | Reentrancy / Other | Reentrancy | View → | |
| 592 | $2M Coin Poker | $2.0M | ethereum | Access Control / Hot Wallet Key Compromised | Access Control Attacks | View → | |
| 593 | Bedrock | $2.0M | ethereum | Incorrect ETH-to-uniBTC conversion | Phishing Attacks | View → | |
| 594 | pump.fun | $2.0M | solana | Private Key Compromised (Unknown Method) / Flash Loan Attack / Private Key Compromised | Access Control Attacks | View → | |
| 595 | MangoFarmSol | $2.0M | solana | Frontend Attack / Admin Drain / Rugpull | — | View → | |
| 596 | Patricia | $2.0M | - | Database Breach | — | — | |
| 597 | pcash | $2.0M | eos | Unknown | — | — | |
| 598 | Ovix | $2.0M | polygon | Flash Loan Attack / Flashloan Donate Function Logic Exploit / Spot Price Manipulation | Flash Loan Attacks | View → | |
| 599 | FilDA | $2.0M | - | Other | — | View → | |
| 600 | Hope Finance | $2.0M | arbitrum | Router Exploit / Rugpull / Arbitrary External Call | Access Control Attacks | View → |
Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.
Understanding the Pattern Behind Billion-Dollar Losses
The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.
For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.
Frequently Asked Questions
How is this leaderboard ranked?
Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.
Does this include every attack type?
It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.
How can I learn to prevent these exploits?
Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.
Learn to Prevent High-Impact Smart Contract Hacks
$91B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.
Start your free security training
Get 25 free lessons and 4 guided exploit exercises.
Onboarding details by email within 2–3 business days.