Most Expensive Crypto Hacks Leaderboard

The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.

  • $91B+

    Total Value Lost

  • 3595

    Incidents Tracked

  • 141

    Chains Affected

  • 65

    $100M+ Incidents

Top 10 Biggest Hacks

Jump to full leaderboard
  2. 🥈

    Mantra

    $5.50B

  4. #4

    LuBian

    $3.50B

    bitcoin

  7. #7

    Thodex

    $2.00B

  9. #9

    Finiko

    $1.50B

  10. #10

    Bybit

    $1.40B

    ethereum

Where the Largest Losses Concentrate

Top Chains by Losses

  • ethereum $9,830M
  • bitcoin $5,404M
  • bsc $3,037M
  • solana $1,697M
  • polygon $1,539M

Top Techniques by Losses

  • Other $52,517M
  • Rugpull $15,631M
  • Private Key Compromised (Brute Force) / Weak Key Generation $3,500M
  • Safe Multisig wallet Phishing Exploit / Access Control / Signer Phishing $1,635M
  • Access Control / Hot Wallet Key Compromised $1,027M

Full Leaderboard

Showing 1151-1200 of 3595 ranked incidents

Largest Web3 incidents by USD amount lost
Rank Project Amount Lost Date Chain Technique Attack Guide Source
1151 Lymex $302K - Rugpull — View →
1152 Harmony $300K - Other — View →
1153 Yearn Finance $300K ethereum misconfigured Fulcrum sUSD strategy / Flash Loan Attack / Donation Attack Flash Loan Attacks View →
1154 Coinbase $300K ethereum MEV composability attack / Token Approval Abuse Access Control Attacks View →
1155 Dexodus Finance $300K base Price Manipulation Attack / Stale Oracle Price / Oracle Issue Oracle Manipulation & Price Manipulation View →
1156 Impermax V3 $300K base Flashloan Exploit / Other / Incorrect Fee Accounting Flash Loan Attacks View →
1157 Pike Finance $300K - Other — View →
1158 ParaSwap $300K ethereum Improper Access Control Access Control Attacks —
1159 Conic Finance $300K ethereum Flashloan Price Oracle Attack / Spot Price Manipulation Flash Loan Attacks View →
1160 Mycelium $300K - Other — View →
1161 Amun $300K ethereum, polygon Controlled Rebalance Manipulation / Improper Access Control Access Control Attacks View →
1162 Seth Green NFTs $300K ethereum Phishing Phishing Attacks —
1163 Glide Finance $300K elastos Other / Missing Input Validation — View →
1164 Hu Tao Spirit Soother $300K - Rugpull — View →
1165 Lucky Star $297K - Access Control Access Control Attacks View →
1166 AROS $295K bsc Spot Price Manipulation Oracle Manipulation & Price Manipulation —
1167 Flurry Finance $293K bsc Other / Incorrect Share Accounting — View →
1168 FASTSWAP $291K - Other — View →
1169 Fake SCROLL $290K - Rugpull — View →
1170 Fake Ethena Labs $290K - Rugpull — View →
1171 TheStandard.io $290K arbitrum Other / Swap Logic Flaw — View →
1172 BJS $290K - Rugpull — View →
1173 RES Token $290K bsc Spot Price Manipulation Oracle Manipulation & Price Manipulation —
1174 Plankton Plankton $288K - Rugpull — View →
1175 Rocket Perp $288K rocket Risk Parameter Abuse — —
1176 Metaland DAO $287K - Rugpull — View →
1177 Tomatos $286K ethereum Rugpull — View →
1178 SCT Token $286K - Rugpull — View →
1179 Zoth $285K ethereum Oracle Issue / Swap Logic Flaw Oracle Manipulation & Price Manipulation View →
1180 Safe $284K - Other — View →
1181 Soft Yearn Finance $281K - Other — View →
1182 TLN Protocol $280K bsc Unknown — —
1183 Tales of Elleria $280K arbitrum Access Control / Forged Proof Access Control Attacks View →
1184 FEGToken $280K - Other — View →
1185 MTDAO $280K bsc Flash Loan Attack / Deposit Logic Flaw Flash Loan Attacks View →
1186 Sanshu Inu $280K - Other — View →
1187 Project culs $278K - Rugpull — View →
1188 SynLev $278K ethereum Rugpull — View →
1189 BASIC-MINING $277K - Rugpull — View →
1190 Saddle Finance $276K - Other — View →
1191 Block Forest $275K - Flash Loan Attack Flash Loan Attacks View →
1192 LOO $275K - Rugpull — View →
1193 Venus Protocol $274K bsc Oracle Misconfiguration Oracle Manipulation & Price Manipulation —
1194 Malda (prev. Mendi Finance) $273K - Other — View →
1195 Omni Bridge $272K - Other Replay Attacks View →
1196 Ledger $271K multiple Phishing Phishing Attacks —
1197 Lumi Finance $270K arbitrum Other / Signature Verification Flaw — View →
1198 FutureSwap $270K ethereum Flashloan Governance Attack Flash Loan Attacks View →
1199 Galxe $270K ethereum DNS Hijack — —
1200 xWin Finance $270K bsc Other / Missing Input Validation — View →

Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.

Understanding the Pattern Behind Billion-Dollar Losses

The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.

For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.

Frequently Asked Questions

How is this leaderboard ranked?

Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.

Does this include every attack type?

It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.

How can I learn to prevent these exploits?

Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.

Learn to Prevent High-Impact Smart Contract Hacks

$91B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.

Start Free Trial → View Full Course