Most Expensive Crypto Hacks Leaderboard

The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.

  • $101B+

    Total Value Lost

  • 3299

    Incidents Tracked

  • 74

    Chains Affected

  • 80

    $100M+ Incidents

Top 10 Biggest Hacks

Jump to full leaderboard
  1. 🥈

    Mantra

    $5.50B

  2. #4

    LuBian

    $3.50B

    bitcoin

  3. #8

    Thodex

    $2.00B

  4. #10

    Finiko

    $1.50B

Where the Largest Losses Concentrate

Top Chains by Losses

  • ethereum $8,051M
  • bitcoin $4,415M
  • bsc $2,657M
  • solana $1,605M
  • polygon $1,512M

Top Techniques by Losses

  • Other $61,553M
  • Rugpull $15,684M
  • Access Control $4,030M
  • Private Key Compromised (Brute Force) $3,500M
  • Safe Multisig wallet Phishing Exploit / Access Control $1,635M

Full Leaderboard

Showing 1001–1050 of 3299 ranked incidents

Largest Web3 incidents by USD amount lost
Rank Project Amount Lost Date Chain Technique Attack Guide Source
1001 SharedStake $500K - Access Control Access Control Attacks View →
1002 Seascape Network $500K - Access Control Access Control Attacks View →
1003 Union Capital $500K ethereum Rugpull View →
1004 VinDAX $500K - Other View →
1005 Enigma $500K - Other View →
1006 DMC Token $497K - Rugpull
1007 Stable Yield Credit $494K ethereum Honeypot View →
1008 Fake PIToken $490K - Rugpull View →
1009 MetaverseToken $487K - Flash Loan Attack Flash Loans Attacks View →
1010 CKD TOKEN $485K - Rugpull View →
1011 WanderVerse NFT $485K - Rugpull View →
1012 TWEETY-MEGA-FUMO $484K - Rugpull
1013 Nft Trader $482K - Reentrancy Reentrancy View →
1014 HSO $482K - Rugpull View →
1015 Pump Farm $478K ethereum Rugpull View →
1016 Arbitrage Robot Token $472K - Other View →
1017 Token of Power $472K - Access Control Access Control Attacks View →
1018 BuildFinance $470K - Access Control Access Control Attacks View →
1019 Snowflake $468K - Rugpull View →
1020 MINER $467K - Other View →
1021 Fake LAYER $465K - Rugpull View →
1022 Maestro $465K ethereum Arbitrary External Call Delegatecall & Call Injection Attacks View →
1023 Swapos $464K - Other View →
1024 Predy finance $464K - Other View →
1025 Wise Lending V1 $464K ethereum Rounding Donation Attack / Other View →
1026 Holdstation $462K - Access Control Access Control Attacks View →
1027 SwilrLend $460K - Rugpull View →
1028 Arcadia V1 $460K ethereum, optimism Flashloan Reentrancy Attack Flash Loans Attacks View →
1029 Exco $460K - Rugpull View →
1030 Arcadia Finance $459K - Reentrancy Reentrancy View →
1031 Friend Tech $456K - Rugpull View →
1032 Aurellion $456K - Access Control Access Control Attacks View →
1033 Changpeng Zhao $454K - Rugpull View →
1034 Libertify $452K - Reentrancy Reentrancy View →
1035 Clipper $450K base, optimism API Signature Exploit View →
1036 vETH $450K - Other View →
1037 URF $450K - Rugpull View →
1038 Xdef finance $450K ethereum Rugpull View →
1039 Pills for Sale $447K ethereum Honeypot
1040 Poolz Finance $443K - Other View →
1041 SyncDex $442K - Rugpull View →
1042 Farcana $440K - Access Control Access Control Attacks View →
1043 AirDAO $440K - Access Control Access Control Attacks View →
1044 FSWAP $432K - Other View →
1045 WaveX $430K - Other View →
1046 Corepound $430K core Drained Contracts View →
1047 Dot Finance $430K - Other View →
1048 Fair Token $429K - Rugpull View →
1049 DCT Token $428K - Flash Loan Attack Flash Loans Attacks View →
1050 Cozy Finance $427K - Access Control Access Control Attacks View →

Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.

Understanding the Pattern Behind Billion-Dollar Losses

The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.

For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.

Frequently Asked Questions

How is this leaderboard ranked?

Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.

Does this include every attack type?

It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.

How can I learn to prevent these exploits?

Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.

Learn to Prevent High-Impact Smart Contract Hacks

$101B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.