Most Expensive Crypto Hacks Leaderboard

The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.

  • $101B+

    Total Value Lost

  • 3299

    Incidents Tracked

  • 74

    Chains Affected

  • 80

    $100M+ Incidents

Top 10 Biggest Hacks

Jump to full leaderboard
  1. 🥈

    Mantra

    $5.50B

  2. #4

    LuBian

    $3.50B

    bitcoin

  3. #8

    Thodex

    $2.00B

  4. #10

    Finiko

    $1.50B

Where the Largest Losses Concentrate

Top Chains by Losses

  • ethereum $8,051M
  • bitcoin $4,415M
  • bsc $2,657M
  • solana $1,605M
  • polygon $1,512M

Top Techniques by Losses

  • Other $61,553M
  • Rugpull $15,684M
  • Access Control $4,030M
  • Private Key Compromised (Brute Force) $3,500M
  • Safe Multisig wallet Phishing Exploit / Access Control $1,635M

Full Leaderboard

Showing 1101–1150 of 3299 ranked incidents

Largest Web3 incidents by USD amount lost
Rank Project Amount Lost Date Chain Technique Attack Guide Source
1101 GHOSTP2E $346K - Rugpull View →
1102 Bubbleworld $344K - Other View →
1103 Vircurex $342K - Access Control Access Control Attacks View →
1104 ATF Token $340K - Rugpull View →
1105 The Idols NFT $340K - Other View →
1106 Lava $340K arbitrum Calculation Error in Liquidation Engine / Flash Loan Attack Flash Loans Attacks View →
1107 Fusion by IPOR $336K arbitrum EIP-7702 Delegation Exploit View →
1108 IPOR Fusion $336K arbitrum EIP-7702 Delegation Exploit / Access Control Access Control Attacks View →
1109 EIP-7702 Delegation Contract Exploit $336K - Other View →
1110 DUO $334K - Rugpull View →
1111 ZetaChain $334K - Access Control Access Control Attacks View →
1112 LV Finance $334K ethereum Rugpull View →
1113 Merlin $334K binance, bsc Incentive Rewards Exploit / Other View →
1114 BitFinex $332K - Access Control Access Control Attacks View →
1115 Goldfinch Finance $330K - Other View →
1116 Galaxy Fox $330K - Other View →
1117 Worldcoin $330K - Rugpull View →
1118 Uwerx $327K ethereum Flashloan Pool Shares Exploit / Flash Loan Attack Flash Loans Attacks View →
1119 Locus Finance $321K arbitrum, ethereum Private Key Compromised (Unknown Method) Access Control Attacks View →
1120 numa. $320K sonic NumaVault Exploit View →
1121 MoonHacker $320K - Flash Loan Attack Flash Loans Attacks View →
1122 SashimiSwap $317K - Flash Loan Attack Flash Loans Attacks View →
1123 OlympusDAO $315K - Other View →
1124 HIGH RETURN (HRN) $315K - Rugpull View →
1125 ROBIN HOOD $313K - Rugpull View →
1126 Cake Lock $311K binance Rugpull View →
1127 LongNoseDog $310K - Rugpull View →
1128 Tommy VICE CITY $308K - Rugpull View →
1129 Rbase Finance $307K ethereum Rugpull View →
1130 DD coin $307K - Other View →
1131 FileSystemVideo $304K - Rugpull View →
1132 Altsbit $303K - Other View →
1133 Bitcoinica $303K - Access Control Access Control Attacks View →
1134 ShadowFi $303K - Other View →
1135 Lymex $302K - Rugpull View →
1136 Yearn Finance $300K ethereum misconfigured Fulcrum sUSD strategy / Flash Loan Attack Flash Loans Attacks View →
1137 Coinbase $300K ethereum MEV composability attack Frontrunning & Sandwich Attacks View →
1138 Dexodus $300K - Oracle Issue Oracle Manipulation & Price Manipulation View →
1139 Dexodus Finance $300K base Price Manipulation Attack Oracle Manipulation & Price Manipulation View →
1140 Impermax V3 $300K base Flashloan Exploit / Other Flash Loans Attacks View →
1141 MoonHacker $300K optimism Unchecked FlashLoan Approve Exploit Flash Loans Attacks View →
1142 Pike Finance $300K - Other View →
1143 Conic Finance $300K ethereum Flashloan Price Oracle Attack Flash Loans Attacks View →
1144 Mycelium $300K - Other View →
1145 Amun $300K ethereum Controlled Rebalance Manipulation View →
1146 Bond Protocol $300K ethereum Arbitrary External Call Delegatecall & Call Injection Attacks View →
1147 Glide Finance $300K - Other View →
1148 Hu Tao Spirit Soother $300K - Rugpull View →
1149 Lucky Star $297K - Access Control Access Control Attacks View →
1150 Flurry Finance $293K - Other View →

Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.

Understanding the Pattern Behind Billion-Dollar Losses

The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.

For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.

Frequently Asked Questions

How is this leaderboard ranked?

Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.

Does this include every attack type?

It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.

How can I learn to prevent these exploits?

Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.

Learn to Prevent High-Impact Smart Contract Hacks

$101B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.