Most Expensive Crypto Hacks Leaderboard

The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.

  • $101B+

    Total Value Lost

  • 3299

    Incidents Tracked

  • 74

    Chains Affected

  • 80

    $100M+ Incidents

Top 10 Biggest Hacks

Jump to full leaderboard
  1. 🥈

    Mantra

    $5.50B

  2. #4

    LuBian

    $3.50B

    bitcoin

  3. #8

    Thodex

    $2.00B

  4. #10

    Finiko

    $1.50B

Where the Largest Losses Concentrate

Top Chains by Losses

  • ethereum $8,051M
  • bitcoin $4,415M
  • bsc $2,657M
  • solana $1,605M
  • polygon $1,512M

Top Techniques by Losses

  • Other $61,553M
  • Rugpull $15,684M
  • Access Control $4,030M
  • Private Key Compromised (Brute Force) $3,500M
  • Safe Multisig wallet Phishing Exploit / Access Control $1,635M

Full Leaderboard

Showing 1201–1250 of 3299 ranked incidents

Largest Web3 incidents by USD amount lost
Rank Project Amount Lost Date Chain Technique Attack Guide Source
1201 796 Exchange $253K - Other View →
1202 EtherDelta $251K - Access Control Access Control Attacks View →
1203 BitFloor $251K - Other View →
1204 Hacken Token $250K - Private Key Compromised / Access Control Access Control Attacks View →
1205 LeadBlock's Morpho Blue Market $250K ethereum Oracle Misconfiguration Exploit Oracle Manipulation & Price Manipulation View →
1206 Lifeform (fake) $250K - Rugpull View →
1207 Tectonic $250K cronos Flashloan New Market Exploit Flash Loans Attacks View →
1208 Sperax USD $250K - Other View →
1209 GOAT $250K - Rugpull View →
1210 PolyYeld Finance $250K - Other View →
1211 Bisq $250K - Other View →
1212 SOF Token $249K - Flash Loan Attack Flash Loans Attacks View →
1213 Safe Dollar $248K polygon Incentive Rewards Exploit / Other View →
1214 Gera Coin $247K - Other View →
1215 Gladiator $246K - Rugpull View →
1216 Chainlink $245K - Other View →
1217 EarnHub $245K - Other View →
1218 ATM Token $244K - Other View →
1219 Ore $243K - Rugpull View →
1220 Popeye the Sailor $241K - Rugpull View →
1221 Curve Lend $240K - Oracle Issue Oracle Manipulation & Price Manipulation View →
1222 Curve LlamaLend $240K ethereum Donation Attack View →
1223 Zerobase $240K - Phishing Phishing Attacks View →
1224 NEVER $240K - Rugpull View →
1225 POKeFARM $238K ethereum Rugpull View →
1226 Balancer V2 $238K ethereum Frontend Attack / Other View →
1227 Scooby Pepe $238K - Rugpull View →
1228 DubaiCEO $237K - Rugpull View →
1229 Hyperbridge $237K ethereum Fake State Proof / Other View →
1230 Reflex Staking Bot $237K - Rugpull View →
1231 Celer Bridge $236K - Other View →
1232 OpenLeverage $236K - Other View →
1233 Bitomat $236K - Access Control Access Control Attacks View →
1234 Shido Global $235K - Other View →
1235 STILTON MUSK $232K - Rugpull
1236 Peapods Finance $231K - Reentrancy Reentrancy View →
1237 Elongate Deluxe $230K - Rugpull
1238 Gondi $230K ethereum Access Control / PurchaseBundler Exploit Access Control Attacks View →
1239 PMX $230K - Other View →
1240 Polycule $230K polygon - View →
1241 Bankroll $230K - Flash Loan Attack Flash Loans Attacks View →
1242 Empower AI $230K - Rugpull View →
1243 ZongZi $230K - Flash Loan Attack Flash Loans Attacks View →
1244 Astrid Finance $228K ethereum Withdraw Function Argument Manipulation View →
1245 Linode $228K - Other View →
1246 Agent Smith $227K - Rugpull View →
1247 Satori $226K - Rugpull View →
1248 Abattoir of Zir $226K - Rugpull View →
1249 BRA Token $225K - Flash Loan Attack Flash Loans Attacks View →
1250 Shadetech $225K ethereum Rugpull View →

Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.

Understanding the Pattern Behind Billion-Dollar Losses

The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.

For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.

Frequently Asked Questions

How is this leaderboard ranked?

Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.

Does this include every attack type?

It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.

How can I learn to prevent these exploits?

Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.

Learn to Prevent High-Impact Smart Contract Hacks

$101B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.