Most Expensive Crypto Hacks Leaderboard

The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.

  • $101B+

    Total Value Lost

  • 3299

    Incidents Tracked

  • 74

    Chains Affected

  • 80

    $100M+ Incidents

Top 10 Biggest Hacks

Jump to full leaderboard
  1. 🥈

    Mantra

    $5.50B

  2. #4

    LuBian

    $3.50B

    bitcoin

  3. #8

    Thodex

    $2.00B

  4. #10

    Finiko

    $1.50B

Where the Largest Losses Concentrate

Top Chains by Losses

  • ethereum $8,051M
  • bitcoin $4,415M
  • bsc $2,657M
  • solana $1,605M
  • polygon $1,512M

Top Techniques by Losses

  • Other $61,553M
  • Rugpull $15,684M
  • Access Control $4,030M
  • Private Key Compromised (Brute Force) $3,500M
  • Safe Multisig wallet Phishing Exploit / Access Control $1,635M

Full Leaderboard

Showing 901–950 of 3299 ranked incidents

Largest Web3 incidents by USD amount lost
Rank Project Amount Lost Date Chain Technique Attack Guide Source
901 WebKeyDao $737K - Other View →
902 Mother $734K - Rugpull View →
903 Forest Tiger Pro $733K - Rugpull View →
904 SuperRare $730K ethereum updateMerkleRoot Access Control Exploit / Access Control Access Control Attacks View →
905 ElectronDAO $729K - Rugpull View →
906 Kipcoin $721K - Access Control Access Control Attacks View →
907 1inch $720K avalanche Private Key Compromised (Supply Chain Attack) Access Control Attacks View →
908 XPlayer $717K - Flash Loan Attack Flash Loans Attacks View →
909 Chainge Finance $716K - Other View →
910 CS $714K - Flash Loan Attack Flash Loans Attacks View →
911 UniCat.farm $713K ethereum Rugpull View →
912 Meta Pets $709K - Rugpull
913 QAN Platform $705K - Other View →
914 Vicuna $700K - Oracle Issue Oracle Manipulation & Price Manipulation View →
915 LaunchZone $700K bsc Access Control Exploit / Other Access Control Attacks View →
916 Umbrella Network $700K - Other View →
917 Meebits $700K - Other View →
918 ProTradeX $698K - Rugpull View →
919 BitDao $686K ethereum Honeypot View →
920 Merlin Labs $680K binance, bsc Other / Math Mistake Exploit / Flashloan Incentive Rewards Exploit Arithmetic Overflows Underflows View →
921 BCE Token $679K - Other View →
922 fcdep $675K - Rugpull View →
923 Unibot $673K ethereum Token approval exploit / Other View →
924 Zerogoki $670K - Other View →
925 Megabot $666K - Rugpull View →
926 bZx $666K ethereum Flash Loan Attack Flash Loans Attacks View →
927 Humanized_AI $665K - Rugpull View →
928 BabyMUSK $665K - Rugpull View →
929 Ariva Digital $661K - Access Control Access Control Attacks View →
930 Impossible Finance $661K binance Flash Loan Attack Flash Loans Attacks View →
931 Midas Capital $660K polygon Flashloan Reentrancy Attack / Flash Loan Attack Flash Loans Attacks View →
932 Crypto Rush $659K - Other View →
933 EDE Finance $658K - Other View →
934 Hector Lending $653K fantom Unknown View →
935 Lever $653K - Other View →
936 Allbridge Core $650K bsc Flashloan Price Oracle Attack / Flash Loan Attack Flash Loans Attacks View →
937 Ooki $650K ethereum Flashloan Price Oracle Attack Flash Loans Attacks View →
938 Melody $644K - Access Control Access Control Attacks View →
939 TECRA $643K - Other View →
940 Hashflow $640K - Other View →
941 WSB Coin $635K - Rugpull View →
942 Pawnfi $633K - Other View →
943 LeetSwap $629K base Liquidity Pools Compromised / Other View →
944 GoodDollars $628K - Flash Loan Attack Flash Loans Attacks View →
945 VitaDAO.com $627K ethereum Honeypot
946 MyBitcoin $619K - Rugpull View →
947 Apache NFT SalesRoom $618K - Rugpull View →
948 Trusta AI $615K - Other View →
949 Flexcoin $614K - Other View →
950 Curve.Finance $612K - Phishing Phishing Attacks View →

Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.

Understanding the Pattern Behind Billion-Dollar Losses

The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.

For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.

Frequently Asked Questions

How is this leaderboard ranked?

Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.

Does this include every attack type?

It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.

How can I learn to prevent these exploits?

Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.

Learn to Prevent High-Impact Smart Contract Hacks

$101B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.