Most Expensive Crypto Hacks Leaderboard

The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.

  • $101B+

    Total Value Lost

  • 3299

    Incidents Tracked

  • 74

    Chains Affected

  • 80

    $100M+ Incidents

Top 10 Biggest Hacks

Jump to full leaderboard
  1. 🥈

    Mantra

    $5.50B

  2. #4

    LuBian

    $3.50B

    bitcoin

  3. #8

    Thodex

    $2.00B

  4. #10

    Finiko

    $1.50B

Where the Largest Losses Concentrate

Top Chains by Losses

  • ethereum $8,051M
  • bitcoin $4,415M
  • bsc $2,657M
  • solana $1,605M
  • polygon $1,512M

Top Techniques by Losses

  • Other $61,553M
  • Rugpull $15,684M
  • Access Control $4,030M
  • Private Key Compromised (Brute Force) $3,500M
  • Safe Multisig wallet Phishing Exploit / Access Control $1,635M

Full Leaderboard

Showing 1251–1300 of 3299 ranked incidents

Largest Web3 incidents by USD amount lost
Rank Project Amount Lost Date Chain Technique Attack Guide Source
1251 PAULY $224K - Rugpull View →
1252 Ledger $224K - Access Control Access Control Attacks View →
1253 Diamond DND $223K - Other View →
1254 Ethereum alarm clock $219K - Other View →
1255 Tetris Finance $218K - Rugpull View →
1256 Cubic Finance $217K ethereum Rugpull View →
1257 NFTflow $216K - Rugpull View →
1258 JUICE $216K - Other View →
1259 CIRCLE (fake) $216K - Rugpull View →
1260 Hypr Network $215K - Other View →
1261 MMFinance $215K - Rugpull View →
1262 Brand New Quest Metaverse $214K - Rugpull View →
1263 Bep Finance $212K binance Rugpull View →
1264 Linear Finance $212K - Other View →
1265 dYdX $211K - Other View →
1266 Santa Coin $211K - Rugpull View →
1267 Convergence $210K ethereum Missing Input Validation / Other View →
1268 Swello Finance $210K - Rugpull View →
1269 Renegade $209K - Access Control Access Control Attacks View →
1270 Celestia $209K - Rugpull View →
1271 Elastic Staking $209K ethereum Rugpull View →
1272 Sifchain Finance $208K ethereum Honeypot
1273 DeFi WZ Token $208K - Rugpull View →
1274 ArchWay Fake $207K - Rugpull View →
1275 WUSD.fi $207K - Flash Loan Attack Flash Loans Attacks View →
1276 Elon Pepe $206K - Honeypot View →
1277 Rare Bears $206K - Access Control Access Control Attacks View →
1278 stoicDAO $205K - Rugpull View →
1279 ArenaPlayAPC $204K - Rugpull View →
1280 MaximusDAO $204K - Phishing Phishing Attacks View →
1281 Santa DAO $204K ethereum Rugpull View →
1282 Bare Bear $202K - Rugpull View →
1283 Automated Assassins $202K - Rugpull View →
1284 Bitmit $202K - Access Control Access Control Attacks View →
1285 zkSync Copycat $202K - Rugpull View →
1286 USPD $200K - Access Control Access Control Attacks View →
1287 Peapods Finance $200K ethereum Oracle manipulation in user-created Pods / Other Oracle Manipulation & Price Manipulation View →
1288 Unilend V2 $200K ethereum Redeem Process Exploit / Other View →
1289 Spectral Labs $200K ethereum Bonding Curve Exploit / Other View →
1290 zkFinance $200K zksync era Oracle Misconfiguration Exploit Oracle Manipulation & Price Manipulation View →
1291 Time $200K - Other View →
1292 Keep3r Network $200K ethereum Private Key Compromised (Vanity Address) Access Control Attacks View →
1293 Hex Trust Token $200K - Rugpull View →
1294 Doglands $200K - Rugpull View →
1295 Quixotic $200K - Other View →
1296 Pinecone Finance $200K - Other View →
1297 DAFI Protocol $200K - Other View →
1298 Not Found $200K - Rugpull View →
1299 DistX $198K ethereum Rugpull View →
1300 SNOOKER $198K - Other View →

Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.

Understanding the Pattern Behind Billion-Dollar Losses

The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.

For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.

Frequently Asked Questions

How is this leaderboard ranked?

Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.

Does this include every attack type?

It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.

How can I learn to prevent these exploits?

Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.

Learn to Prevent High-Impact Smart Contract Hacks

$101B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.