🥇
Terra Classic
$40.00B
Most Expensive Crypto Hacks Leaderboard
The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.
-
$104B+
Total Value Lost
-
3836
Incidents Tracked
-
124
Chains Affected
-
88
$100M+ Incidents
Top 10 Biggest Hacks
Where the Largest Losses Concentrate
Top Chains by Losses
Top Techniques by Losses
Full Leaderboard
Showing 51-100 of 3836 ranked incidents
| Rank | Project | Amount Lost | Date | Chain | Technique | Attack Guide | Source |
|---|---|---|---|---|---|---|---|
| 51 | Euler V1 | $197.0M | ethereum | Flashloan Donate Function Logic Exploit / Donation Attack | Flash Loan Attacks | View → | |
| 52 | Euler Finance | $196.0M | - | Flash Loan Attack | Flash Loan Attacks | View → | |
| 53 | BitMart Exchange | $196.0M | - | Access Control | Access Control Attacks | View → | |
| 54 | Bitmart | $196.0M | bsc, ethereum | Private Key Compromised (Unknown Method) / Hot Wallet Key Compromised | Access Control Attacks | View → | |
| 55 | Nomad | $190.0M | ethereum | Trusted Root Exploit / Other / Forged Proof | — | View → | |
| 56 | Beanstalk | $181.0M | ethereum | Flashloan Governance Attack / Flash Loan Attack | Flash Loan Attacks | View → | |
| 57 | BTC-e | $181.0M | - | Rugpull | — | View → | |
| 58 | BitGrail | $170.0M | nano | Other / Improper Access Control | Access Control Attacks | View → | |
| 59 | Wintermute | $160.0M | ethereum | Private Key Compromised (Brute Force) / Access Control / Phishing | Access Control Attacks | View → | |
| 60 | Token.Store | $160.0M | - | Rugpull | — | View → | |
| 61 | Parity | $155.0M | - | Other | — | View → | |
| 62 | Parity Multisig | $150.0M | ethereum | Contract not initialized / Uninitialized Proxy | Access Control Attacks | View → | |
| 63 | Compound V2 | $147.0M | ethereum | Math Mistake Exploit / Arithmetic Error | Arithmetic Overflow & Underflow Attacks | View → | |
| 64 | QuadrigaCX | $147.0M | - | Access Control | Access Control Attacks | View → | |
| 65 | Control Finance | $147.0M | - | Rugpull | — | View → | |
| 66 | Vulcan Forged | $140.0M | ethereum, polygon | Private Key Compromised (Unknown Method) / Access Control / Hot Wallet Key Compromised | Access Control Attacks | View → | |
| 67 | Boy X Highspeed | $139.9M | - | Access Control | Access Control Attacks | View → | |
| 68 | BXH | $139.0M | bsc | Private Key Compromised | Access Control Attacks | — | |
| 69 | Cold Card | $130.0M | - | - | — | View → | |
| 70 | Coldcard | $130.0M | bitcoin | Other / Weak Key Generation | — | View → | |
| 71 | Cream Finance | $130.0M | - | Flash Loan Attack | Flash Loan Attacks | View → | |
| 72 | CREAM Lending | $130.0M | ethereum | Flashloan Price Oracle Attack / Spot Price Manipulation | Flash Loan Attacks | View → | |
| 73 | Balancer V2 | $128.0M | arbitrum, base, ethereum, optimism, polygon, sonic | Composable Stable Pools Exploit / Access Control / Rounding Error | Access Control Attacks | View → | |
| 74 | Poloniex | $126.0M | bitcoin, ethereum, tron | Private Key Compromised (Unknown Method) / Access Control / Malware | Access Control Attacks | View → | |
| 75 | Multichain | $126.0M | bsc, fantom, moonriver | Private Key Compromised (Unknown Method) / Validator Key Compromised | Access Control Attacks | View → | |
| 76 | Ormeus Coin | $124.0M | - | Other | — | View → | |
| 77 | Badger DAO | $120.3M | ethereum | Cloudflare Key Compromised / Other / CDN Compromise | — | View → | |
| 78 | BonqDAO | $120.0M | - | Oracle Issue | Oracle Manipulation & Price Manipulation | View → | |
| 79 | Mango Markets V3 | $116.0M | solana | Price Oracle Attack / Other / Spot Price Manipulation | Oracle Manipulation & Price Manipulation | View → | |
| 80 | Atomic Wallet | $115.0M | avalanche, bitcoin, bsc, ethereum, polkadot, tron | Private Key Compromised (Unknown Method) / Access Control / Supply Chain Attack | Access Control Attacks | View → | |
| 81 | Elrond | $113.0M | elrond | Infinite Mint | — | — | |
| 82 | Maiar DEX | $113.0M | - | Other | — | View → | |
| 83 | Chris Larsen | $112.5M | - | Access Control | Access Control Attacks | View → | |
| 84 | Bitget | $100.0M | - | Market-Making Bot Exploit / Market Maker Bot Exploited | — | View → | |
| 85 | EmpiresX | $100.0M | - | Other | — | View → | |
| 86 | Horizon by Harmony | $100.0M | - | Access Control | Access Control Attacks | View → | |
| 87 | Harmony Bridge | $100.0M | bsc, ethereum | Private Key Compromised (Unknown Method) / Validator Key Compromised | Access Control Attacks | View → | |
| 88 | Venus Protocol | $100.0M | bsc | Spot Price Manipulation | Oracle Manipulation & Price Manipulation | — | |
| 89 | Liquid | $97.0M | - | Access Control | Access Control Attacks | View → | |
| 90 | Blockchain Intelligence Hunger Games | $94.6M | - | - | — | View → | |
| 91 | Stream Finance | $93.0M | - | Other | — | View → | |
| 92 | Liquid Global | $91.3M | ethereum | Hot Wallet Key Compromised | — | — | |
| 93 | Phishing | $91.0M | - | Phishing | Phishing Attacks | View → | |
| 94 | Mirror Protocol | $90.0M | - | Other | — | View → | |
| 95 | Mirror | $90.0M | terra | Outdated Oracle Exploit / Duplicate Call Exploit / Improper Access Control | Access Control Attacks | View → | |
| 96 | Compound Labs | $89.0M | ethereum | Oracle Issue | Oracle Manipulation & Price Manipulation | View → | |
| 97 | Heco Bridge | $86.6M | ethereum | Private Key Compromised (Unknown Method) / Hot Wallet Key Compromised | Access Control Attacks | View → | |
| 98 | HECO | $86.3M | - | Access Control | Access Control Attacks | View → | |
| 99 | Phemex | $85.0M | arbitrum, avalanche, base, bitcoin, bsc, ethereum, optimism, polygon, solana, sui, tron, xrp, zksync era | Private Key Compromised (Unknown Method) / Other / Hot Wallet Key Compromised | Access Control Attacks | View → | |
| 100 | Nobitex | $82.0M | arbitrum, avalanche, bitcoin, bsc, ethereum, polygon, tron | Hot wallet hack / Access Control / Malware | Access Control Attacks | View → |
Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.
Understanding the Pattern Behind Billion-Dollar Losses
The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.
For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.
Frequently Asked Questions
How is this leaderboard ranked?
Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.
Does this include every attack type?
It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.
How can I learn to prevent these exploits?
Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.
Learn to Prevent High-Impact Smart Contract Hacks
$104B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.