Most Expensive Crypto Hacks Leaderboard

The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.

  • $91B+

    Total Value Lost

  • 3595

    Incidents Tracked

  • 141

    Chains Affected

  • 65

    $100M+ Incidents

Top 10 Biggest Hacks

Jump to full leaderboard
  2. 🥈

    Mantra

    $5.50B

  4. #4

    LuBian

    $3.50B

    bitcoin

  7. #7

    Thodex

    $2.00B

  9. #9

    Finiko

    $1.50B

  10. #10

    Bybit

    $1.40B

    ethereum

Where the Largest Losses Concentrate

Top Chains by Losses

  • ethereum $9,830M
  • bitcoin $5,404M
  • bsc $3,037M
  • solana $1,697M
  • polygon $1,539M

Top Techniques by Losses

  • Other $52,517M
  • Rugpull $15,631M
  • Private Key Compromised (Brute Force) / Weak Key Generation $3,500M
  • Safe Multisig wallet Phishing Exploit / Access Control / Signer Phishing $1,635M
  • Access Control / Hot Wallet Key Compromised $1,027M

Full Leaderboard

Showing 901-950 of 3595 ranked incidents

Largest Web3 incidents by USD amount lost
Rank Project Amount Lost Date Chain Technique Attack Guide Source
901 Megabot $666K - Rugpull — View →
902 bZx $666K ethereum Flash Loan Attack / Flashloan Price Oracle Attack / Spot Price Manipulation Flash Loan Attacks View →
903 Humanized_AI $665K - Rugpull — View →
904 BabyMUSK $665K - Rugpull — View →
905 Ariva Digital $661K - Access Control Access Control Attacks View →
906 Impossible Finance $661K binance, bsc Flash Loan Attack / Spot Price Manipulation Flash Loan Attacks View →
907 Midas Capital $660K polygon Flashloan Reentrancy Attack / Flash Loan Attack / Reentrancy Flash Loan Attacks View →
908 Crypto Rush $659K - Other — View →
909 EDE Finance $658K - Other — View →
910 Hector Lending $653K fantom Unknown / Token Approval Abuse Access Control Attacks View →
911 Lever $653K bsc Other / Borrow Logic Flaw — View →
912 ChainConnect $650K avalanche, bsc, ethereum, polygon Improper Access Control Access Control Attacks View →
913 Allbridge Core $650K bsc Flashloan Price Oracle Attack / Flash Loan Attack / Swap Logic Flaw Flash Loan Attacks View →
914 Melody $644K - Access Control Access Control Attacks View →
915 TECRA $643K - Other — View →
916 Hashflow $640K arbitrum, avalanche, bsc, ethereum, polygon Other / Token Approval Abuse Access Control Attacks View →
917 WSB Coin $635K - Rugpull — View →
918 LeetSwap $629K base Liquidity Pools Compromised / Other / Improper Access Control Access Control Attacks View →
919 Adshares $628K ethereum Forged Proof — —
920 GoodDollars $628K ethereum Flash Loan Attack / Reentrancy Flash Loan Attacks View →
921 VitaDAO.com $627K ethereum Honeypot — —
922 Swan Treasury $625K bsc Off-Chain Signer Key Compromise Access Control Attacks View →
923 MyBitcoin $619K - Rugpull — View →
924 Apache NFT SalesRoom $618K - Rugpull — View →
925 Trusta AI $615K - Other — View →
926 Flexcoin $614K bitcoin Other / Withdrawal Logic Flaw — View →
927 Wild Credit $612K - Access Control Access Control Attacks View →
928 ZKLOTTO $609K - Rugpull — View →
929 Meme Coin Phishing Scam $600K - Phishing Phishing Attacks View →
930 Namada Shielded Pools $600K namada Unbacked Cross-Chain Mint — —
931 Bloom $600K blast Other / Unknown — View →
932 Blastoff $600K blast Unknown — —
933 Midas Capital $600K bsc Redeem Rounding Error Exploit / Other / Rounding Error Arithmetic Overflow & Underflow Attacks View →
934 Hedera Token Service $600K hedera Other / Unknown / Improper Access Control Access Control Attacks View →
935 Blur Finance $600K bsc, polygon Drained Contracts / Exit Scam — View →
936 LI.FI $600K ethereum Token Approval Abuse Access Control Attacks —
937 BIPS $600K - Other — View →
938 Flamincome $595K ethereum Flash Loan Attack / Spot Price Manipulation Flash Loan Attacks View →
939 Boost Coin $593K - Rugpull — View →
940 IPC AI $590K binance Swap Logic Flaw — —
941 Ocean Venture $588K - Rugpull — View →
942 Serenity Shield $586K ethereum Phishing Phishing Attacks —
943 Nerve Finance $586K bsc Other / Swap Logic Flaw — View →
944 IPO $585K - Rugpull — View →
945 DAO_Officials $581K - Flash Loan Attack Flash Loan Attacks View →
946 Xai $581K - Rugpull — View →
947 DeFiTuna $580K solana Other / Swap Logic Flaw — View →
948 Thoreum Finance $580K bsc Access Control / Swap Logic Flaw Access Control Attacks View →
949 DAO Swap $580K bsc Improper Access Control Access Control Attacks —
950 AutoShark $580K bsc Reward Logic Flaw — —

Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.

Understanding the Pattern Behind Billion-Dollar Losses

The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.

For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.

Frequently Asked Questions

How is this leaderboard ranked?

Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.

Does this include every attack type?

It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.

How can I learn to prevent these exploits?

Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.

Learn to Prevent High-Impact Smart Contract Hacks

$91B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.

Start Free Trial → View Full Course