Most Expensive Crypto Hacks Leaderboard

The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.

  • $91B+

    Total Value Lost

  • 3595

    Incidents Tracked

  • 141

    Chains Affected

  • 65

    $100M+ Incidents

Top 10 Biggest Hacks

Jump to full leaderboard
  2. 🥈

    Mantra

    $5.50B

  4. #4

    LuBian

    $3.50B

    bitcoin

  7. #7

    Thodex

    $2.00B

  9. #9

    Finiko

    $1.50B

  10. #10

    Bybit

    $1.40B

    ethereum

Where the Largest Losses Concentrate

Top Chains by Losses

  • ethereum $9,830M
  • bitcoin $5,404M
  • bsc $3,037M
  • solana $1,697M
  • polygon $1,539M

Top Techniques by Losses

  • Other $52,517M
  • Rugpull $15,631M
  • Private Key Compromised (Brute Force) / Weak Key Generation $3,500M
  • Safe Multisig wallet Phishing Exploit / Access Control / Signer Phishing $1,635M
  • Access Control / Hot Wallet Key Compromised $1,027M

Full Leaderboard

Showing 1101-1150 of 3595 ranked incidents

Largest Web3 incidents by USD amount lost
Rank Project Amount Lost Date Chain Technique Attack Guide Source
1101 PolBase Cash $354K ethereum Rugpull — View →
1102 Edel Finance $353K ethereum Oracle Issue / Spot Price Manipulation Flash Loan Attacks View →
1103 Ribbon Finance $351K ethereum Phishing / DNS Hijack Phishing Attacks View →
1104 Kalax $350K blast Drain Vaults / Admin Drain — View →
1105 Sumer.Money $350K base Flash Loan Attack / Reentrancy Flash Loan Attacks View →
1106 Zircon Gamma $350K bsc, moonriver Flashloan Pool Shares Exploit / Incorrect Share Accounting Flash Loan Attacks View →
1107 fcdep $350K bsc Infinite Mint — —
1108 THORChain DEX $350K ethereum Bridge Logic Flaw — —
1109 GHOSTP2E $346K - Rugpull — View →
1110 SQ Protocol $346K bsc Improper Access Control Access Control Attacks —
1111 Bubbleworld $344K - Other — View →
1112 Vircurex $342K - Access Control Access Control Attacks View →
1113 ATF Token $340K - Rugpull — View →
1114 The Idols NFT $340K ethereum Other / Reward Logic Flaw — View →
1115 Lava $340K arbitrum Calculation Error in Liquidation Engine / Flash Loan Attack / Liquidation Logic Flaw Flash Loan Attacks View →
1116 EOSBet $338K eos Donation Attack — —
1117 Symbiosis $336K bsc, ethereum Unbacked Cross-Chain Mint — —
1118 IPOR Fusion $336K arbitrum EIP-7702 Delegation Exploit / Access Control / Arbitrary External Call Access Control Attacks View →
1119 EIP-7702 Delegation Contract Exploit $336K - Other — View →
1120 DUO $334K - Rugpull — View →
1121 ZetaChain $334K arbitrum, avalanche, base, bsc, ethereum, polygon Access Control / Token Approval Abuse Access Control Attacks View →
1122 LV Finance $334K ethereum Rugpull — View →
1123 Merlin $334K binance, bsc Incentive Rewards Exploit / Other / Arithmetic Error — View →
1124 BitFinex $332K bitcoin Access Control / Hot Wallet Key Compromised Access Control Attacks View →
1125 Art Coin $331K ethereum Deposit Logic Flaw — —
1126 Goldfinch Finance $330K ethereum Other / Token Approval Abuse Access Control Attacks View →
1127 Galaxy Fox $330K ethereum Other / Improper Access Control Access Control Attacks View →
1128 Worldcoin $330K - Rugpull — View →
1129 Uwerx $327K ethereum Flashloan Pool Shares Exploit / Flash Loan Attack / Spot Price Manipulation Flash Loan Attacks View →
1130 Voltage V3 $322K fuse Improper Access Control Access Control Attacks —
1131 Locus Finance $321K arbitrum, ethereum Private Key Compromised (Unknown Method) / Private Key Compromised Access Control Attacks View →
1132 numa. $320K sonic NumaVault Exploit / Incorrect Share Accounting — View →
1133 MoonHacker $320K optimism Flash Loan Attack / Unchecked FlashLoan Approve Exploit / Token Approval Abuse Access Control Attacks View →
1134 Channels Finance $320K bsc Infinite Mint — —
1135 WonderHero $320K bsc Hot Wallet Key Compromised — —
1136 SashimiSwap $317K ethereum Flash Loan Attack / Swap Logic Flaw Flash Loan Attacks View →
1137 OlympusDAO $315K ethereum Other / Arbitrary External Call / Missing Input Validation Delegatecall & Call Injection Attacks View →
1138 HIGH RETURN (HRN) $315K - Rugpull — View →
1139 ROBIN HOOD $313K - Rugpull — View →
1140 Cake Lock $311K binance Rugpull — View →
1141 LongNoseDog $310K - Rugpull — View →
1142 Tommy VICE CITY $308K - Rugpull — View →
1143 Rbase Finance $307K ethereum Rugpull — View →
1144 DD coin $307K - Other — View →
1145 FlashLoopAdapter $305K ethereum Improper Access Control Access Control Attacks —
1146 mySwap CL $305K starknet Incorrect Share Accounting — —
1147 FileSystemVideo $304K - Rugpull — View →
1148 Altsbit $303K bitcoin, ethereum Other / Key Leaked via Infrastructure — View →
1149 Bitcoinica $303K - Access Control Access Control Attacks View →
1150 ShadowFi $303K bsc Other / Improper Access Control Access Control Attacks View →

Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.

Understanding the Pattern Behind Billion-Dollar Losses

The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.

For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.

Frequently Asked Questions

How is this leaderboard ranked?

Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.

Does this include every attack type?

It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.

How can I learn to prevent these exploits?

Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.

Learn to Prevent High-Impact Smart Contract Hacks

$91B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.

Start Free Trial → View Full Course