Most Expensive Crypto Hacks Leaderboard

The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.

  • $91B+

    Total Value Lost

  • 3595

    Incidents Tracked

  • 141

    Chains Affected

  • 65

    $100M+ Incidents

Top 10 Biggest Hacks

Jump to full leaderboard
  2. 🥈

    Mantra

    $5.50B

  4. #4

    LuBian

    $3.50B

    bitcoin

  7. #7

    Thodex

    $2.00B

  9. #9

    Finiko

    $1.50B

  10. #10

    Bybit

    $1.40B

    ethereum

Where the Largest Losses Concentrate

Top Chains by Losses

  • ethereum $9,830M
  • bitcoin $5,404M
  • bsc $3,037M
  • solana $1,697M
  • polygon $1,539M

Top Techniques by Losses

  • Other $52,517M
  • Rugpull $15,631M
  • Private Key Compromised (Brute Force) / Weak Key Generation $3,500M
  • Safe Multisig wallet Phishing Exploit / Access Control / Signer Phishing $1,635M
  • Access Control / Hot Wallet Key Compromised $1,027M

Full Leaderboard

Showing 951-1000 of 3595 ranked incidents

Largest Web3 incidents by USD amount lost
Rank Project Amount Lost Date Chain Technique Attack Guide Source
951 LULA $578K bsc Improper Access Control / Flash Loan Attack Access Control Attacks View →
952 Curve DEX $575K ethereum DNS Spoofing / DNS Hijack / Phishing Phishing Attacks View →
953 The Micro Elements $573K - Rugpull — View →
954 Bitsane $570K - Rugpull — View →
955 BitLord $566K - Rugpull — View →
956 GMX V1 Perps $565K arbitrum Price Oracle Attack / Stale Price Arbitrage Oracle Manipulation & Price Manipulation View →
957 BNB HEROES $561K - Rugpull — View →
958 Projekt (GREEN/GOLD) $560K ethereum Reward Accounting Logic Flaw Flash Loan Attacks View →
959 Merlin Labs $550K binance, bsc Other / Math Mistake Exploit / Flashloan Incentive Rewards Exploit / Reward Logic Flaw / Rounding Error Arithmetic Overflow & Underflow Attacks View →
960 ZenCash $550K zencash Forged Proof — —
961 Serial Scammer $547K - Rugpull — View →
962 Silo Finance $546K ethereum fillQuote silo.borrow() Exploit / Missing Input Validation / Other — View →
963 WeExchange $545K - Other — View →
964 Bancor $545K ethereum Other / Improper Access Control Access Control Attacks View →
965 Lien $542K ethereum Bond Group Validation Flaw — View →
966 Kper Network $542K ethereum Rugpull — View →
967 Earning.Farm $541K ethereum Reentrancy Reentrancy View →
968 Feminist Metaverse $540K bsc Other / Improper Access Control Access Control Attacks View →
969 MakerDAO ETH-A Liquidation Keeper Bot $538K ethereum Improper Access Control Access Control Attacks —
970 Agentic FoF $531K ethereum Unknown — —
971 Visor Finance $530K - Other — View →
972 BlueMove DEX $529K sui Reserve Desynchronization / Incorrect Share Accounting — View →
973 CryptoBottle $527K - Other — View →
974 REALSWAK $527K - Rugpull — View →
975 Balancer $524K ethereum Flash Loan Attack / Incorrect Share Accounting Flash Loan Attacks View →
976 UtopiaSphere $521K bsc Spot Price Manipulation Oracle Manipulation & Price Manipulation —
977 CLOUD NFT $519K - Rugpull — View →
978 Star Token $518K - Other — View →
979 SquidMulticall Approval Exploitation $517K arbitrum, avalanche, base, bsc, optimism Access Control / Improper Access Control Access Control Attacks View →
980 Array Finance $516K - Flash Loan Attack Flash Loan Attacks View →
981 0G Labs $516K 0g emergencyWithdraw Function Exploit / Withdrawal Logic Flaw — View →
982 PolyDEX $511K polygon Other / Reentrancy Reentrancy View →
983 HUT $509K - Rugpull — View →
984 Flashmall $508K - Rugpull — View →
985 NumaMoney $506K arbitrum Flash Loan Attack / Spot Price Manipulation Flash Loan Attacks View →
986 Umbrella Network $505K - Other — View →
987 Visor Finance $505K ethereum Access Control / Improper Access Control Access Control Attacks View →
988 BNO $504K bsc Rugpull / Improper Access Control Access Control Attacks View →
989 Avici $501K solana Signature Validation / Authorization Flaw Access Control Attacks View →
990 Flooring Protocol $500K ethereum Infinite Mint — —
991 Polymarket $500K ethereum, polygon Phishing Phishing Attacks —
992 Zunami Protocol $500K ethereum withdrawStuckToken() exploit / Private Key Compromised / Access Control Access Control Attacks View →
993 Clober $500K base Reentrancy Reentrancy View →
994 Vestra DAO $500K ethereum Staking Logic Exploit / Other / Staking Logic Flaw — View →
995 Maestro $500K ethereum Arbitrary External Call Access Control Attacks View →
996 SharedStake $500K ethereum Access Control / Improper Access Control Access Control Attacks View →
997 Seascape Network $500K ethereum Access Control / Private Key Compromised Access Control Attacks View →
998 Union Capital $500K ethereum Rugpull — View →
999 VinDAX $500K ethereum, multiple Other / Key Leaked via Infrastructure — View →
1000 AurumCoin $500K aurumcoin Risk Parameter Abuse — —

Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.

Understanding the Pattern Behind Billion-Dollar Losses

The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.

For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.

Frequently Asked Questions

How is this leaderboard ranked?

Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.

Does this include every attack type?

It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.

How can I learn to prevent these exploits?

Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.

Learn to Prevent High-Impact Smart Contract Hacks

$91B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.

Start Free Trial → View Full Course