Most Expensive Crypto Hacks Leaderboard

The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.

  • $91B+

    Total Value Lost

  • 3595

    Incidents Tracked

  • 141

    Chains Affected

  • 65

    $100M+ Incidents

Top 10 Biggest Hacks

Jump to full leaderboard
  2. 🥈

    Mantra

    $5.50B

  4. #4

    LuBian

    $3.50B

    bitcoin

  7. #7

    Thodex

    $2.00B

  9. #9

    Finiko

    $1.50B

  10. #10

    Bybit

    $1.40B

    ethereum

Where the Largest Losses Concentrate

Top Chains by Losses

  • ethereum $9,830M
  • bitcoin $5,404M
  • bsc $3,037M
  • solana $1,697M
  • polygon $1,539M

Top Techniques by Losses

  • Other $52,517M
  • Rugpull $15,631M
  • Private Key Compromised (Brute Force) / Weak Key Generation $3,500M
  • Safe Multisig wallet Phishing Exploit / Access Control / Signer Phishing $1,635M
  • Access Control / Hot Wallet Key Compromised $1,027M

Full Leaderboard

Showing 51-100 of 3595 ranked incidents

Largest Web3 incidents by USD amount lost
Rank Project Amount Lost Date Chain Technique Attack Guide Source
51 Vulcan Forged $140.0M ethereum, polygon Private Key Compromised (Unknown Method) / Access Control / Hot Wallet Key Compromised Access Control Attacks View →
52 Boy X Highspeed $139.0M bsc Suspected administrative-key leakage Access Control Attacks View →
53 Coldcard $130.0M bitcoin Other / Weak Key Generation — View →
54 Cream Finance $130.0M ethereum Flash Loan Attack / Flashloan Price Oracle Attack / Spot Price Manipulation Flash Loan Attacks View →
55 Balancer V2 $128.0M arbitrum, base, ethereum, optimism, polygon, sonic Composable Stable Pools Exploit / Access Control / Rounding Error Access Control Attacks View →
56 Poloniex $126.0M bitcoin, ethereum, tron Private Key Compromised (Unknown Method) / Access Control / Malware Access Control Attacks View →
57 Multichain $126.0M bsc, fantom, moonriver Private Key Compromised (Unknown Method) / Validator Key Compromised / Access Control Access Control Attacks View →
58 Badger DAO $120.3M ethereum Cloudflare Key Compromised / Other / CDN Compromise Phishing Attacks View →
59 Mango Markets V3 $116.0M solana Price Oracle Attack / Other / Spot Price Manipulation Oracle Manipulation & Price Manipulation View →
60 Atomic Wallet $115.0M avalanche, bitcoin, bsc, ethereum, polkadot, tron Private Key Compromised (Unknown Method) / Access Control / Supply Chain Attack Access Control Attacks View →
61 Maiar DEX $113.0M elrond Other / Infinite Mint — View →
62 Chris Larsen $112.5M - Access Control Access Control Attacks View →
63 Bitget $100.0M - Market-Making Bot Exploit / Market Maker Bot Exploited — View →
64 EmpiresX $100.0M - Other — View →
65 Horizon by Harmony $100.0M bsc, ethereum Access Control / Private Key Compromised (Unknown Method) / Validator Key Compromised Access Control Attacks View →
66 Liquid $97.0M ethereum Access Control / Hot Wallet Key Compromised Access Control Attacks View →
67 Blockchain Intelligence Hunger Games $94.6M - - — View →
68 Stream Finance $93.0M - Other — View →
69 Phishing $91.0M - Phishing Phishing Attacks View →
70 Mirror $90.0M terra Outdated Oracle Exploit / Duplicate Call Exploit / Improper Access Control / Other Access Control Attacks View →
71 HECO $86.3M ethereum Access Control / Private Key Compromised (Unknown Method) / Hot Wallet Key Compromised Access Control Attacks View →
72 Phemex $85.0M arbitrum, avalanche, base, bitcoin, bsc, ethereum, optimism, polygon, solana, sui, tron, xrp, zksync era Private Key Compromised (Unknown Method) / Other / Hot Wallet Key Compromised Access Control Attacks View →
73 Nobitex $82.0M arbitrum, avalanche, bitcoin, bsc, ethereum, polygon, tron Hot wallet hack / Access Control / Malware Access Control Attacks View →
74 Orbit Chain $81.5M ethereum Vault compromise; root cause unresolved Access Control Attacks View →
75 Qubit Finance $80.0M bsc Other / Transfer Logic Exploit / Missing Input Validation Cross-Chain Bridge Attacks View →
76 Rari Fuse $79.7M arbitrum, ethereum Reentrancy / Flashloan Reentrancy Attack Flash Loan Attacks View →
77 AscenDEX $77.7M bsc, ethereum, polygon Private Key Compromised / Access Control / Hot Wallet Key Compromised Access Control Attacks View →
78 Venus $77.0M bsc Oracle Issue / Spot Price Manipulation Oracle Manipulation & Price Manipulation View →
79 Tectonic Protocol $75.0M cronos Oracle Issue / Donation Attack Oracle Manipulation & Price Manipulation View →
80 StakeHound / Fireblocks $72.0M ethereum Key Brute Forced / Access Control Access Control Attacks View →
81 Bitfinex $72.0M bitcoin Access Control / Hot Wallet Key Compromised Access Control Attacks View →
82 UPCX $70.0M ethereum Upgraded ProxyAdmin + withdrawByAdmin Hack / Access Control / Proxy Upgrade Hijack Access Control Attacks View →
83 EvoDeFi Bridge $66.0M - Other — View →
84 NiceHash $64.0M bitcoin Other / Key Leaked via Infrastructure — View →
85 Munchables $62.5M blast Storage Slot Exploit / Access Control / Proxy Upgrade Hijack Access Control Attacks View →
86 Mining Capital Coin $62.0M - Rugpull — View →
87 Curve DEX $61.7M ethereum Vyper Compiler Bug Reentrancy View →
88 Freeway $60.0M - Rugpull — View →
89 AnubisDAO $60.0M ethereum Drained Contracts / Rugpull / Admin Drain — View →
90 The DAO $60.0M ethereum Reentrancy / Other Reentrancy View →
91 EasyFi $59.0M ethereum, polygon Private Key Compromised (Unknown Method) / Access Control / Malware Access Control Attacks View →
92 Radiant Capital $58.0M arbitrum, bsc Access Control / Access Control Exploit / Blind Signing Access Control Attacks View →
93 Uranium Finance $57.2M binance, bsc Math Mistake Exploit / Other / Arithmetic Error Arithmetic Overflow & Underflow Attacks View →
94 BitForex $56.0M - Rugpull — View →
95 Phishing $55.0M - Phishing Phishing Attacks View →
96 CoinEx $55.0M arbitrum, bitcoin, bitcoincash, bsc, dagger, ethereum, kadena, polygon, solana, stellar, tron, xrp Private Key Compromised (Unknown Method) / Access Control / Hot Wallet Key Compromised Access Control Attacks View →
97 BtcTurk $54.0M - Private Key Compromised (Unknown Method) / Access Control / Hot Wallet Key Compromised Access Control Attacks View →
98 Cashio $52.8M solana Collateral Validation Exploit / Other / Missing Input Validation Access Control Attacks View →
99 BingX $52.0M ethereum Hot wallet hack / Other / Hot Wallet Key Compromised Access Control Attacks View →
100 Upbit $51.2M ethereum Access Control / Hot Wallet Key Compromised Access Control Attacks View →

Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.

Understanding the Pattern Behind Billion-Dollar Losses

The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.

For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.

Frequently Asked Questions

How is this leaderboard ranked?

Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.

Does this include every attack type?

It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.

How can I learn to prevent these exploits?

Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.

Learn to Prevent High-Impact Smart Contract Hacks

$91B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.

Start Free Trial → View Full Course