Most Expensive Crypto Hacks Leaderboard

The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.

  • $91B+

    Total Value Lost

  • 3595

    Incidents Tracked

  • 141

    Chains Affected

  • 65

    $100M+ Incidents

Top 10 Biggest Hacks

Jump to full leaderboard
  2. 🥈

    Mantra

    $5.50B

  4. #4

    LuBian

    $3.50B

    bitcoin

  7. #7

    Thodex

    $2.00B

  9. #9

    Finiko

    $1.50B

  10. #10

    Bybit

    $1.40B

    ethereum

Where the Largest Losses Concentrate

Top Chains by Losses

  • ethereum $9,830M
  • bitcoin $5,404M
  • bsc $3,037M
  • solana $1,697M
  • polygon $1,539M

Top Techniques by Losses

  • Other $52,517M
  • Rugpull $15,631M
  • Private Key Compromised (Brute Force) / Weak Key Generation $3,500M
  • Safe Multisig wallet Phishing Exploit / Access Control / Signer Phishing $1,635M
  • Access Control / Hot Wallet Key Compromised $1,027M

Full Leaderboard

Showing 751-800 of 3595 ranked incidents

Largest Web3 incidents by USD amount lost
Rank Project Amount Lost Date Chain Technique Attack Guide Source
751 HeroCat $1.2M - Rugpull — View →
752 QAN Platform $1.2M ethereum Access Control / Weak Key Generation Access Control Attacks View →
753 Steadefi $1.2M ethereum Deployer Wallet Compromised / Deployer Key Compromised / Access Control Access Control Attacks View →
754 IEGT $1.1M - Rugpull — View →
755 Jumpn Finance $1.1M - Rugpull — View →
756 Aftermath Perps $1.1M sui Withdrawal Logic Flaw — —
757 TopGoal $1.1M bsc Access Control / Hot Wallet Key Compromised Access Control Attacks View →
758 Axion Network $1.1M ethereum Other / Infinite Mint — View →
759 Rikkei Finance $1.1M bsc Oracle Issue / Improper Access Control Access Control Attacks View →
760 USEA Token $1.1M - Rugpull — View →
761 Blizzard $1.1M - Other — View →
762 Brinc Finance $1.1M - Other — View →
763 LABUBU/OLPC $1.1M bsc Decimal Miscalculation — —
764 Levana Perps $1.1M osmosis Price Oracle Attack / Stale Oracle Price Oracle Manipulation & Price Manipulation View →
765 Swap-LP $1.1M bsc Swap Logic Flaw — —
766 Sovryn $1.1M rsk Flashloan Reentrancy Attack / Other / Reentrancy Flash Loan Attacks View →
767 Treasure Swap $1.1M - Other — View →
768 Phantom Galaxies $1.1M ethereum Malware Phishing Attacks —
769 EgoPay $1.1M - Access Control Access Control Attacks View →
770 Ethereum Yield $1.1M ethereum Abandoned — View →
771 Level Finance $1.1M bsc Other / Referral Claims Logic Exploit / Reward Logic Flaw — View →
772 CollectCoin $1.1M - Other — View →
773 Fegex $1.1M base, bsc, ethereum Missing Access Control / Cross-Chain Message Spoofing Access Control Attacks View →
774 NowSwap $1.1M ethereum Inconsistent Value in Code / Arithmetic Error / Other — View →
775 Chibi Finance $1.1M - Rugpull — View →
776 LayerZero $1.0M - Rugpull — View →
777 YEED $1.0M bsc Other / Arithmetic Error — View →
778 Bithumb $1.0M - Access Control Access Control Attacks View →
779 DecentraWorld $1.0M - Rugpull — View →
780 Cypher $1.0M solana Unknown / Spot Price Manipulation / Other Oracle Manipulation & Price Manipulation View →
781 OpenSea $1.0M ethereum Other / Withdrawal Logic Flaw — View →
782 Ordinals Finance $1.0M - Rugpull — View →
783 Oraichain $1.0M oraichain EVM Cross-Chain Unauthorized Mint — View →
784 USPD $1.0M ethereum CPIMP deployment attack Access Control Attacks View →
785 BTCM App $1.0M - Other — View →
786 Base Lending $1.0M base Deposit Logic Flaw — —
787 DeltaPrime $1.0M arbitrum Ownership Takeover Access Control Attacks View →
788 Zest $1.0M stacks Spot Price Manipulation Oracle Manipulation & Price Manipulation —
789 Milady Maker $1.0M ethereum Admin Drain — —
790 WDZD Swap $1.0M bsc Swap Logic Flaw — —
791 Sentiment $1.0M arbitrum Flashloan Reentrancy Attack / Reentrancy Flash Loan Attacks View →
792 SwapX V2 $1.0M bsc Improper Access Control Access Control Attacks —
793 Bacon Protocol $1.0M ethereum Flash Loan Attack / Reentrancy Flash Loan Attacks View →
794 Sentinel DVPN $1.0M - Access Control Access Control Attacks View →
795 Soxex $1.0M - Rugpull — View →
796 Bitcoin Norway $1.0M - Other — View →
797 King Tribe $997K - Rugpull — View →
798 Orion $994K bsc Other / Improper Access Control Access Control Attacks View →
799 Profanity Wallet Hack $978K - Access Control / Other Access Control Attacks View →
800 Visor Finance $976K ethereum Flash Loan Attack / Spot Price Manipulation Flash Loan Attacks View →

Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.

Understanding the Pattern Behind Billion-Dollar Losses

The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.

For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.

Frequently Asked Questions

How is this leaderboard ranked?

Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.

Does this include every attack type?

It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.

How can I learn to prevent these exploits?

Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.

Learn to Prevent High-Impact Smart Contract Hacks

$91B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.

Start Free Trial → View Full Course