Most Expensive Crypto Hacks Leaderboard

The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.

  • $101B+

    Total Value Lost

  • 3299

    Incidents Tracked

  • 74

    Chains Affected

  • 80

    $100M+ Incidents

Top 10 Biggest Hacks

Jump to full leaderboard
  1. 🥈

    Mantra

    $5.50B

  2. #4

    LuBian

    $3.50B

    bitcoin

  3. #8

    Thodex

    $2.00B

  4. #10

    Finiko

    $1.50B

Where the Largest Losses Concentrate

Top Chains by Losses

  • ethereum $8,051M
  • bitcoin $4,415M
  • bsc $2,657M
  • solana $1,605M
  • polygon $1,512M

Top Techniques by Losses

  • Other $61,553M
  • Rugpull $15,684M
  • Access Control $4,030M
  • Private Key Compromised (Brute Force) $3,500M
  • Safe Multisig wallet Phishing Exploit / Access Control $1,635M

Full Leaderboard

Showing 951–1000 of 3299 ranked incidents

Largest Web3 incidents by USD amount lost
Rank Project Amount Lost Date Chain Technique Attack Guide Source
951 Wild Credit $612K - Access Control Access Control Attacks View →
952 ZKLOTTO $609K - Rugpull View →
953 Bloom $600K - Other View →
954 Midas Capital $600K bsc Redeem Rounding Error Exploit / Other Arithmetic Overflows Underflows View →
955 Hedera Token Service $600K - Other View →
956 Blur Finance $600K bsc, polygon Drained Contracts View →
957 BIPS $600K - Other View →
958 Boost Coin $593K - Rugpull View →
959 Ocean Venture $588K - Rugpull View →
960 Nerve Finance $586K - Other View →
961 IPO $585K - Rugpull View →
962 DAO_Officials $581K - Flash Loan Attack Flash Loans Attacks View →
963 Xai $581K - Rugpull View →
964 Thoreum Finance $580K - Access Control Access Control Attacks View →
965 Curve DEX $575K ethereum DNS Spoofing View →
966 The Micro Elements $573K - Rugpull View →
967 Bitsane $570K - Rugpull View →
968 BitLord $566K - Rugpull View →
969 GMX V1 Perps $565K arbitrum Price Oracle Attack Oracle Manipulation & Price Manipulation View →
970 BNB HEROES $561K - Rugpull View →
971 Serial Scammer $547K - Rugpull View →
972 Silo Finance $546K ethereum fillQuote silo.borrow() Exploit View →
973 Silo $545K - Other View →
974 WeExchange $545K - Other View →
975 Kper Network $542K ethereum Rugpull View →
976 Earning.Farm $541K ethereum Reentrancy Reentrancy View →
977 Feminist Metaverse $540K - Other View →
978 Visor Finance $530K - Other View →
979 CryptoBottle $527K - Other View →
980 REALSWAK $527K - Rugpull View →
981 Balancer $524K ethereum Flash Loan Attack Flash Loans Attacks View →
982 Solareum $523K - Other View →
983 CLOUD NFT $519K - Rugpull View →
984 Star Token $518K - Other View →
985 SquidMulticall Approval Exploitation $517K - Access Control Access Control Attacks View →
986 Array Finance $516K - Flash Loan Attack Flash Loans Attacks View →
987 0G Labs $516K 0g emergencyWithdraw Function Exploit View →
988 Hedera $515K hedera Unknown View →
989 PolyDEX $511K - Other View →
990 HUT $509K - Rugpull View →
991 Flashmall $508K - Rugpull View →
992 NumaMoney $506K - Flash Loan Attack Flash Loans Attacks View →
993 Umbrella Network $505K - Other View →
994 Visor Finance $505K - Access Control Access Control Attacks View →
995 BNO $504K - Rugpull View →
996 Zunami $500K - Access Control Access Control Attacks View →
997 Zunami Protocol $500K ethereum withdrawStuckToken() exploit View →
998 Clober $500K - Reentrancy Reentrancy View →
999 Clober Liquidity Vault $500K base Reentrancy Reentrancy View →
1000 Vestra DAO $500K ethereum Staking Logic Exploit / Other View →

Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.

Understanding the Pattern Behind Billion-Dollar Losses

The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.

For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.

Frequently Asked Questions

How is this leaderboard ranked?

Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.

Does this include every attack type?

It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.

How can I learn to prevent these exploits?

Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.

Learn to Prevent High-Impact Smart Contract Hacks

$101B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.