Most Expensive Crypto Hacks Leaderboard

The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.

  • $91B+

    Total Value Lost

  • 3595

    Incidents Tracked

  • 141

    Chains Affected

  • 65

    $100M+ Incidents

Top 10 Biggest Hacks

Jump to full leaderboard
  2. 🥈

    Mantra

    $5.50B

  4. #4

    LuBian

    $3.50B

    bitcoin

  7. #7

    Thodex

    $2.00B

  9. #9

    Finiko

    $1.50B

  10. #10

    Bybit

    $1.40B

    ethereum

Where the Largest Losses Concentrate

Top Chains by Losses

  • ethereum $9,830M
  • bitcoin $5,404M
  • bsc $3,037M
  • solana $1,697M
  • polygon $1,539M

Top Techniques by Losses

  • Other $52,517M
  • Rugpull $15,631M
  • Private Key Compromised (Brute Force) / Weak Key Generation $3,500M
  • Safe Multisig wallet Phishing Exploit / Access Control / Signer Phishing $1,635M
  • Access Control / Hot Wallet Key Compromised $1,027M

Full Leaderboard

Showing 1051-1100 of 3595 ranked incidents

Largest Web3 incidents by USD amount lost
Rank Project Amount Lost Date Chain Technique Attack Guide Source
1051 DCT Token $428K - Flash Loan Attack Flash Loan Attacks View →
1052 Cozy V2 $427K optimism Insufficient Sender Verification Exploit / Missing Input Validation / Access Control Access Control Attacks View →
1053 BGE $427K - Rugpull — View →
1054 Aethir $423K bsc Acces Control Exploit / Other / Improper Access Control Access Control Attacks View →
1055 Evoq Finance $420K bsc Advanced Persistent Threat (APT) attack / Access Control / Private Key Compromised Access Control Attacks View →
1056 Coral $420K eos Reentrancy Reentrancy —
1057 Unlock Protocol $416K - Access Control Access Control Attacks View →
1058 RAI Finance $414K - Other — View →
1059 Singularity Finance $413K base Oracle Misconfiguration Oracle Manipulation & Price Manipulation —
1060 Ankr $410K flow Unbacked Mint — —
1061 Tsuru $410K base Unknown — —
1062 Nut2Earn $410K - Rugpull — View →
1063 Fake EigenLayer $405K - Rugpull — View →
1064 Velar Perps $401K mezo Predictable Oracle Update Oracle Manipulation & Price Manipulation —
1065 Syndicate $400K base Access Control / Bridge Logic Flaw Access Control Attacks View →
1066 Cardex $400K abstract Private Key Compromised (Session signer) / Signature Verification Flaw Access Control Attacks View →
1067 Fake Polyhedra Network $400K - Rugpull — View →
1068 HEGE coin $400K - Rugpull — —
1069 WePiggy $400K - Other — View →
1070 BlackWallet $400K - Access Control Access Control Attacks View →
1071 Leverage X $400K ethereum Rugpull — View →
1072 YieldCore $399K ethereum Improper Access Control Access Control Attacks —
1073 Cezar Hard Fork $399K - Rugpull — View →
1074 FutureSwap $395K arbitrum Withdrawal Logic Flaw — —
1075 phishing $394K - Phishing Phishing Attacks View →
1076 Silo V2 $392K arbitrum Misconfigured Oracle Exploit / Oracle Misconfiguration Oracle Manipulation & Price Manipulation View →
1077 Ploutos Money $390K ethereum Rugpull / Oracle Misconfiguration Exploit / Misconfigured Oracle Exploit / Oracle Misconfiguration Oracle Manipulation & Price Manipulation View →
1078 Dollar $383K - Rugpull — View →
1079 MetaFinanceDAO $380K - Rugpull — View →
1080 Impermax V3 $380K base Zero-Rate Hack / Other / Liquidation Logic Flaw — View →
1081 DEFIBase $379K ethereum Rugpull — View →
1082 unshETH $375K ethereum Access Control / Key Stored Publicly Access Control Attacks View →
1083 PREMINT | NFT $375K ethereum Access Control / Frontend Compromise Access Control Attacks View →
1084 Linda Yaccarino $375K - Rugpull — View →
1085 Ploutoz Finance $372K bsc Flash Loan Attack / Spot Price Manipulation Flash Loan Attacks View →
1086 opyn $371K ethereum Other / Withdrawal Logic Flaw — View →
1087 Nereus Finance $371K avalanche Spot Price Manipulation / Flash Loan Attack Flash Loan Attacks View →
1088 Do Right $371K - Rugpull — View →
1089 Themis Protocol $370K arbitrum Flashloan Price Oracle Attack / Flash Loan Attack / Spot Price Manipulation Flash Loan Attacks View →
1090 Bitcoin Rain $370K - Other — View →
1091 Little Boy Plus $367K bsc Arithmetic Error — —
1092 ForceDAO $367K ethereum Other / Donation Attack — View →
1093 XSTABLE Protocol $367K ethereum Rugpull / Unknown — View →
1094 Custom Lending Pool $366K - Other — View →
1095 Smurfs Coin $366K - Rugpull — View →
1096 Hype Bet Finance $364K ethereum Rugpull — View →
1097 Miss Universe NFT $360K - Rugpull — View →
1098 bZx $356K ethereum Flash Loan Attack / Flashloan Slippage Attack / Spot Price Manipulation Flash Loan Attacks View →
1099 SIR $355K ethereum Transient storage collision / Other / Proxy Upgrade Hijack Access Control Attacks View →
1100 Fake ether.fi $354K - Rugpull — View →

Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.

Understanding the Pattern Behind Billion-Dollar Losses

The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.

For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.

Frequently Asked Questions

How is this leaderboard ranked?

Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.

Does this include every attack type?

It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.

How can I learn to prevent these exploits?

Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.

Learn to Prevent High-Impact Smart Contract Hacks

$91B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.

Start Free Trial → View Full Course