Most Expensive Crypto Hacks Leaderboard

The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.

  • $101B+

    Total Value Lost

  • 3299

    Incidents Tracked

  • 74

    Chains Affected

  • 80

    $100M+ Incidents

Top 10 Biggest Hacks

Jump to full leaderboard
  1. 🥈

    Mantra

    $5.50B

  2. #4

    LuBian

    $3.50B

    bitcoin

  3. #8

    Thodex

    $2.00B

  4. #10

    Finiko

    $1.50B

Where the Largest Losses Concentrate

Top Chains by Losses

  • ethereum $8,051M
  • bitcoin $4,415M
  • bsc $2,657M
  • solana $1,605M
  • polygon $1,512M

Top Techniques by Losses

  • Other $61,553M
  • Rugpull $15,684M
  • Access Control $4,030M
  • Private Key Compromised (Brute Force) $3,500M
  • Safe Multisig wallet Phishing Exploit / Access Control $1,635M

Full Leaderboard

Showing 1151–1200 of 3299 ranked incidents

Largest Web3 incidents by USD amount lost
Rank Project Amount Lost Date Chain Technique Attack Guide Source
1151 FASTSWAP $291K - Other View →
1152 Fake SCROLL $290K - Rugpull View →
1153 Fake Ethena Labs $290K - Rugpull View →
1154 BJS $290K - Rugpull View →
1155 Plankton Plankton $288K - Rugpull View →
1156 Metaland DAO $287K - Rugpull View →
1157 Tomatos $286K ethereum Rugpull View →
1158 SCT Token $286K - Rugpull View →
1159 Zoth $285K - Oracle Issue Oracle Manipulation & Price Manipulation View →
1160 Safe $284K - Other View →
1161 Soft Yearn Finance $281K - Other View →
1162 Tales of Elleria $280K - Access Control Access Control Attacks View →
1163 FEGToken $280K - Other View →
1164 MTDAO $280K - Flash Loan Attack Flash Loans Attacks View →
1165 Sanshu Inu $280K - Other View →
1166 Project culs $278K - Rugpull View →
1167 SynLev $278K ethereum Rugpull View →
1168 BASIC-MINING $277K - Rugpull View →
1169 Bored Ape Yacht Club $276K - Other
1170 Saddle Finance $276K - Other View →
1171 Block Forest $275K - Flash Loan Attack Flash Loans Attacks View →
1172 LOO $275K - Rugpull View →
1173 Malda (prev. Mendi Finance) $273K - Other View →
1174 SyncSpace $273K - Other View →
1175 Omni Bridge $272K - Other View →
1176 FutureSwap $270K ethereum Flashloan Governance Attack Flash Loans Attacks View →
1177 xWin Finance $270K - Other View →
1178 DeFiPie $269K - Other View →
1179 Shapeshift $269K - Access Control Access Control Attacks View →
1180 Gandalf The Grey $266K - Rugpull View →
1181 Vip Panda Community $266K - Rugpull View →
1182 Kyber Network $265K - Other View →
1183 KyberSwap Classic $265K polygon Cloudflare Key Compromised View →
1184 TheStandard.io $264K - Other View →
1185 BAYC & OtherSide $263K - Phishing Phishing Attacks View →
1186 SherLOCK $262K - Rugpull View →
1187 TTTT $261K - Rugpull View →
1188 Kujira $260K - Other View →
1189 Multi Financial $258K - Rugpull View →
1190 Crosswise $258K - Other View →
1191 dTRINITY $257K ethereum Flash Loan Attack / Deposit Inflation Attack Flash Loans Attacks View →
1192 xPet $257K - Other View →
1193 PoW ETH $256K - Phishing Phishing Attacks View →
1194 SuperStep $256K - Rugpull View →
1195 BNQ Token $256K - Rugpull View →
1196 FA $255K - Rugpull View →
1197 PEPEHUB $255K - Rugpull View →
1198 BlockGPT $255K - Rugpull View →
1199 GoonFi $254K solana Mispricing arbitrage View →
1200 Hachiko $254K - Rugpull

Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.

Understanding the Pattern Behind Billion-Dollar Losses

The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.

For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.

Frequently Asked Questions

How is this leaderboard ranked?

Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.

Does this include every attack type?

It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.

How can I learn to prevent these exploits?

Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.

Learn to Prevent High-Impact Smart Contract Hacks

$101B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.