Most Expensive Crypto Hacks Leaderboard

The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.

  • $101B+

    Total Value Lost

  • 3299

    Incidents Tracked

  • 74

    Chains Affected

  • 80

    $100M+ Incidents

Top 10 Biggest Hacks

Jump to full leaderboard
  1. 🥈

    Mantra

    $5.50B

  2. #4

    LuBian

    $3.50B

    bitcoin

  3. #8

    Thodex

    $2.00B

  4. #10

    Finiko

    $1.50B

Where the Largest Losses Concentrate

Top Chains by Losses

  • ethereum $8,051M
  • bitcoin $4,415M
  • bsc $2,657M
  • solana $1,605M
  • polygon $1,512M

Top Techniques by Losses

  • Other $61,553M
  • Rugpull $15,684M
  • Access Control $4,030M
  • Private Key Compromised (Brute Force) $3,500M
  • Safe Multisig wallet Phishing Exploit / Access Control $1,635M

Full Leaderboard

Showing 551–600 of 3299 ranked incidents

Largest Web3 incidents by USD amount lost
Rank Project Amount Lost Date Chain Technique Attack Guide Source
551 Banana Gun $3.0M ethereum Front-end vulnerability / Other View →
552 Remilia $3.0M - Access Control Access Control Attacks View →
553 Swaprum $3.0M arbitrum Drained Contracts / Rugpull View →
554 Orion Protocol $3.0M - Reentrancy Reentrancy View →
555 Orion Pools $3.0M bsc Reentrancy Reentrancy View →
556 BTC.com $3.0M - Other View →
557 Skyward Finance $3.0M near Reentrancy / Other Reentrancy View →
558 Fortress Loans $3.0M bsc Governance and Oracle Exploit / Other Oracle Manipulation & Price Manipulation View →
559 Rich Dwarves Tribe $3.0M - Abandoned View →
560 Tinyman $3.0M - Other View →
561 PolkaTrain $3.0M - Other View →
562 DEUS Finance $3.0M fantom Flashloan Price Oracle Attack Flash Loans Attacks View →
563 OKEx $3.0M - Other View →
564 SushiSwap $3.0M - Other View →
565 Stars Arena $3.0M - Reentrancy Reentrancy View →
566 IOTA wallet $2.9M - Other View →
567 Wallstreetswap Finance $2.9M binance Rugpull View →
568 Arena SocialFi $2.9M avalanche Reentrancy Reentrancy View →
569 Sunray $2.9M - Access Control Access Control Attacks View →
570 SUNRAY·FINANCE $2.9M arbitrum Private Key Compromised Access Control Attacks View →
571 MetaDAO $2.8M - Honeypot View →
572 Solv Protocol $2.7M - Other View →
573 Multichain $2.7M - Other View →
574 RetoSwap $2.7M - Other View →
575 SolvBTC $2.7M ethereum Mint Reserves Logic Exploit View →
576 Ribbon $2.7M ethereum Private Key Compromised Access Control Attacks View →
577 OKX DEX $2.7M ethereum Private Key Compromised (Unknown Method) Access Control Attacks View →
578 Remitano $2.7M bitcoincash, ethereum, tron Private Key Compromised (Unknown Method) Access Control Attacks View →
579 IDO rug pulls $2.7M - Rugpull View →
580 Fantasm Finance $2.6M fantom Missing Condition Check / Other View →
581 BNB42 $2.6M - Rugpull View →
582 1Inch $2.6M - Reentrancy Reentrancy View →
583 PYE $2.6M - Other View →
584 Fetch.ai $2.6M - Access Control Access Control Attacks View →
585 FCS $2.6M - Rugpull View →
586 Boy X Highspeed $2.6M - Other View →
587 Purse $2.5M - Access Control Access Control Attacks View →
588 Hyperbridge $2.5M - - View →
589 Arcadia Finance $2.5M - Other View →
590 Arcadia V2 $2.5M base Rebalancer contract reentrancy hack Reentrancy View →
591 Moby Trade $2.5M - Access Control Access Control Attacks View →
592 Zapper $2.5M - Other View →
593 Turtle Dex $2.5M bsc Drained Contracts View →
594 Emerald Mine $2.5M eos Rugpull View →
595 TesseraDao $2.5M - - View →
596 Phishing $2.5M - Phishing Phishing Attacks View →
597 Wallet Drain $2.4M - Phishing Phishing Attacks View →
598 SecondFi $2.4M - - View →
599 Tessera DAO $2.4M - Access Control Access Control Attacks View →
600 Shibarium $2.4M - Access Control Access Control Attacks View →

Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.

Understanding the Pattern Behind Billion-Dollar Losses

The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.

For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.

Frequently Asked Questions

How is this leaderboard ranked?

Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.

Does this include every attack type?

It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.

How can I learn to prevent these exploits?

Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.

Learn to Prevent High-Impact Smart Contract Hacks

$101B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.