Most Expensive Crypto Hacks Leaderboard

The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.

  • $101B+

    Total Value Lost

  • 3299

    Incidents Tracked

  • 74

    Chains Affected

  • 80

    $100M+ Incidents

Top 10 Biggest Hacks

Jump to full leaderboard
  1. 🥈

    Mantra

    $5.50B

  2. #4

    LuBian

    $3.50B

    bitcoin

  3. #8

    Thodex

    $2.00B

  4. #10

    Finiko

    $1.50B

Where the Largest Losses Concentrate

Top Chains by Losses

  • ethereum $8,051M
  • bitcoin $4,415M
  • bsc $2,657M
  • solana $1,605M
  • polygon $1,512M

Top Techniques by Losses

  • Other $61,553M
  • Rugpull $15,684M
  • Access Control $4,030M
  • Private Key Compromised (Brute Force) $3,500M
  • Safe Multisig wallet Phishing Exploit / Access Control $1,635M

Full Leaderboard

Showing 751–800 of 3299 ranked incidents

Largest Web3 incidents by USD amount lost
Rank Project Amount Lost Date Chain Technique Attack Guide Source
751 Solareum $1.4M solana Private Key Compromised (Social Engineering) Phishing Attacks
752 OrdiZK $1.4M - Rugpull View →
753 BlueBerry $1.4M ethereum Flashloan Price Oracle Attack Flash Loans Attacks View →
754 Treasure $1.4M arbitrum Buy Function Exploit View →
755 CryptoBike $1.4M - Rugpull View →
756 2gether $1.4M - Rugpull View →
757 Uniswap $1.4M - Other View →
758 Earning Farm $1.4M - Flash Loan Attack Flash Loans Attacks View →
759 Venus Protocol $1.4M - Other View →
760 Day of Defeat $1.4M - Rugpull View →
761 Raydium $1.3M - Other View →
762 Blueberry Protocol Foundation $1.3M - Other View →
763 UFCT $1.3M - Rugpull View →
764 Safereum $1.3M - Rugpull View →
765 Giddy $1.3M - Access Control Access Control Attacks View →
766 Kame Aggregator $1.3M sei swap() Function Flaw View →
767 LND $1.3M hyperliquid l1, sonic - View →
768 Bitcoin Mission $1.3M arbitrum overPaper Function Exploit View →
769 Monoswap $1.3M blast Private Key Compromised (Malware) Access Control Attacks View →
770 MonoSwap $1.3M - Access Control Access Control Attacks View →
771 RiskOnBlast $1.3M blast Rugpull View →
772 Frosties $1.3M - Abandoned View →
773 MangoFarmSOL $1.3M - Rugpull View →
774 Samudai $1.3M - Access Control Access Control Attacks View →
775 LaserSwap Cash $1.3M binance Rugpull View →
776 Black Hole $1.3M - Other View →
777 Monkey Kingdom $1.3M - Other View →
778 Telcoin $1.3M - Other View →
779 GeniusAI $1.3M ethereum, fantom Private Key Compromised (Discord Hack) Access Control Attacks View →
780 Solend $1.3M - Oracle Issue Oracle Manipulation & Price Manipulation View →
781 Save $1.3M solana Price Oracle Attack Oracle Manipulation & Price Manipulation View →
782 Inverse Finance $1.3M - Flash Loan Attack Flash Loans Attacks View →
783 ApeRocket $1.3M bsc Flashloan Incentive Rewards Exploit / Flash Loan Attack Flash Loans Attacks View →
784 Atlantis Loans $1.3M bsc Access Control Exploit / Access Control Access Control Attacks View →
785 New Free DAO $1.3M - Flash Loan Attack Flash Loans Attacks View →
786 xKingdom.tech Token $1.2M - Rugpull View →
787 Big Daddy Ape Club $1.2M - Rugpull View →
788 Zenon Network $1.2M - Other View →
789 Aave Protocol $1.2M - Phishing Phishing Attacks View →
790 Seedify $1.2M avalanche, bsc Infinite Mint and Dump / Access Control Access Control Attacks View →
791 Vow $1.2M - Other View →
792 Genius Token $1.2M - Other View →
793 Hunter Global $1.2M - Rugpull View →
794 CheddaToken $1.2M - Rugpull View →
795 BitKeep $1.2M - Other View →
796 HeroCat $1.2M - Rugpull View →
797 QAN Platform $1.2M - Access Control Access Control Attacks View →
798 Steadefi $1.2M ethereum Deployer Wallet Compromised Access Control Attacks View →
799 Speadefi $1.1M - Access Control Access Control Attacks View →
800 IEGT $1.1M - Rugpull View →

Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.

Understanding the Pattern Behind Billion-Dollar Losses

The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.

For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.

Frequently Asked Questions

How is this leaderboard ranked?

Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.

Does this include every attack type?

It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.

How can I learn to prevent these exploits?

Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.

Learn to Prevent High-Impact Smart Contract Hacks

$101B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.