Most Expensive Crypto Hacks Leaderboard

The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.

  • $91B+

    Total Value Lost

  • 3595

    Incidents Tracked

  • 141

    Chains Affected

  • 65

    $100M+ Incidents

Top 10 Biggest Hacks

Jump to full leaderboard
  2. 🥈

    Mantra

    $5.50B

  4. #4

    LuBian

    $3.50B

    bitcoin

  7. #7

    Thodex

    $2.00B

  9. #9

    Finiko

    $1.50B

  10. #10

    Bybit

    $1.40B

    ethereum

Where the Largest Losses Concentrate

Top Chains by Losses

  • ethereum $9,830M
  • bitcoin $5,404M
  • bsc $3,037M
  • solana $1,697M
  • polygon $1,539M

Top Techniques by Losses

  • Other $52,517M
  • Rugpull $15,631M
  • Private Key Compromised (Brute Force) / Weak Key Generation $3,500M
  • Safe Multisig wallet Phishing Exploit / Access Control / Signer Phishing $1,635M
  • Access Control / Hot Wallet Key Compromised $1,027M

Full Leaderboard

Showing 1201-1250 of 3595 ranked incidents

Largest Web3 incidents by USD amount lost
Rank Project Amount Lost Date Chain Technique Attack Guide Source
1201 DeFiPie $269K bsc, ethereum Other / Reentrancy Reentrancy View →
1202 Gandalf The Grey $266K - Rugpull — View →
1203 Vip Panda Community $266K - Rugpull — View →
1204 KyberSwap Classic $265K polygon Cloudflare Key Compromised / CDN Compromise / Other — View →
1205 Royal.io $263K polygon Incorrect Share Accounting — —
1206 BAYC & OtherSide $263K ethereum Phishing / Other Phishing Attacks View →
1207 SherLOCK $262K - Rugpull — View →
1208 TTTT $261K - Rugpull — View →
1209 WiseLending $260K ethereum Rounding Error — —
1210 Kujira $260K - Other — View →
1211 Ethereum alarm clock $260K ethereum Other / Reward Logic Flaw — View →
1212 Multi Financial $258K - Rugpull — View →
1213 Transit Finance $258K ethereum Unknown — —
1214 dTRINITY $257K ethereum Flash Loan Attack / Deposit Inflation Attack / First Depositor Attack Flash Loan Attacks View →
1215 xPet $257K - Other — View →
1216 PoW ETH $256K - Phishing Phishing Attacks View →
1217 SuperStep $256K - Rugpull — View →
1218 BNQ Token $256K - Rugpull — View →
1219 FA $255K - Rugpull — View →
1220 PEPEHUB $255K - Rugpull — View →
1221 BlockGPT $255K - Rugpull — View →
1222 GoonFi $254K solana Mispricing arbitrage / Swap Logic Flaw Oracle Manipulation & Price Manipulation View →
1223 Hachiko $254K - Rugpull — —
1224 796 Exchange $253K bitcoin Other / Improper Access Control Access Control Attacks View →
1225 BitFloor $251K bitcoin Other / Key Stored Publicly — View →
1226 DGLD $250K base Infinite Mint and Dump / Infinite Mint Unchecked Return Value Attacks View →
1227 Zerobase $250K bsc Phishing / Token Approval Abuse Access Control Attacks View →
1228 Hacken Token $250K - Private Key Compromised / Access Control Access Control Attacks View →
1229 Spectral Labs $250K ethereum Bonding Curve Exploit / Other / Token Approval Abuse Access Control Attacks View →
1230 LeadBlock's Morpho Blue Market $250K ethereum Oracle Misconfiguration Exploit / Oracle Misconfiguration Oracle Manipulation & Price Manipulation View →
1231 Lifeform (fake) $250K - Rugpull — View →
1232 Tectonic $250K cronos Flashloan New Market Exploit / Unknown Flash Loan Attacks View →
1233 Harbor Protocol $250K comdex Spot Price Manipulation Oracle Manipulation & Price Manipulation View →
1234 Sperax USD $250K arbitrum Other / Unbacked Mint — View →
1235 GOAT $250K - Rugpull — View →
1236 PolyYeld Finance $250K polygon Other / Infinite Mint — View →
1237 SYFI $250K ethereum Arithmetic Error — —
1238 Bisq $250K bitcoin Other / Withdrawal Logic Flaw — View →
1239 SOF Token $249K - Flash Loan Attack Flash Loan Attacks View →
1240 Safe Dollar $248K polygon Incentive Rewards Exploit / Other / Reward Logic Flaw — View →
1241 Gera Coin $247K ethereum Other / Deployer Key Compromised — View →
1242 Gladiator $246K - Rugpull — View →
1243 Chainlink $245K - Other — View →
1244 EarnHub $245K - Other — View →
1245 ATM Token $244K bsc Other / Swap Logic Flaw — View →
1246 Ore $243K - Rugpull — View →
1247 HarryPotterObamaSonic10Inu $243K ethereum Spot Price Manipulation Oracle Manipulation & Price Manipulation —
1248 Movie Token $242K bsc Incorrect Share Accounting — —
1249 Popeye the Sailor $241K - Rugpull — View →
1250 Curve LlamaLend $240K ethereum Donation Attack / Oracle Issue Flash Loan Attacks View →

Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.

Understanding the Pattern Behind Billion-Dollar Losses

The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.

For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.

Frequently Asked Questions

How is this leaderboard ranked?

Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.

Does this include every attack type?

It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.

How can I learn to prevent these exploits?

Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.

Learn to Prevent High-Impact Smart Contract Hacks

$91B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.

Start Free Trial → View Full Course