Most Expensive Crypto Hacks Leaderboard

The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.

  • $101B+

    Total Value Lost

  • 3299

    Incidents Tracked

  • 74

    Chains Affected

  • 80

    $100M+ Incidents

Top 10 Biggest Hacks

Jump to full leaderboard
  1. 🥈

    Mantra

    $5.50B

  2. #4

    LuBian

    $3.50B

    bitcoin

  3. #8

    Thodex

    $2.00B

  4. #10

    Finiko

    $1.50B

Where the Largest Losses Concentrate

Top Chains by Losses

  • ethereum $8,051M
  • bitcoin $4,415M
  • bsc $2,657M
  • solana $1,605M
  • polygon $1,512M

Top Techniques by Losses

  • Other $61,553M
  • Rugpull $15,684M
  • Access Control $4,030M
  • Private Key Compromised (Brute Force) $3,500M
  • Safe Multisig wallet Phishing Exploit / Access Control $1,635M

Full Leaderboard

Showing 1301–1350 of 3299 ranked incidents

Largest Web3 incidents by USD amount lost
Rank Project Amount Lost Date Chain Technique Attack Guide Source
1301 Sui Network $197K - Rugpull View →
1302 User $196K - Phishing Phishing Attacks View →
1303 Rabby Wallet $194K - Other View →
1304 DollarDoge $194K - Rugpull View →
1305 Holdstation $192K - Access Control Access Control Attacks View →
1306 MOL $192K - Rugpull View →
1307 NWT Token $191K - Rugpull View →
1308 FENGSHOU Token $191K - Access Control Access Control Attacks View →
1309 LAXO Token $191K - Flash Loan Attack Flash Loans Attacks View →
1310 Layer2DAO $190K - Access Control Access Control Attacks View →
1311 Real Web Project $190K - Rugpull View →
1312 QuickSwap $190K - Flash Loan Attack Flash Loans Attacks View →
1313 Wettok Market $190K - Rugpull View →
1314 DMCToken $190K - Rugpull View →
1315 Magix $188K ethereum Rugpull View →
1316 Memecoin $188K - Rugpull View →
1317 Astronaut NFT $187K binance Rugpull View →
1318 FTX $187K - Other View →
1319 GDS Chain $187K - Flash Loan Attack Flash Loans Attacks View →
1320 SynapLogic $186K - Access Control Access Control Attacks View →
1321 Toothless - How to train meme $186K - Rugpull View →
1322 BigFinance $185K - Rugpull View →
1323 Meta Apes $183K - Rugpull View →
1324 four.meme $183K bsc Liquidity Pool Exploit / Other View →
1325 Cover protocol $183K ethereum Rugpull
1326 Yield Protocol $181K arbitrum Balance Disparity Exploit View →
1327 Civilization $180K - Other View →
1328 Nebula Revelation $180K - Reentrancy Reentrancy View →
1329 MetaDragonDao $180K - Other View →
1330 SHIDAO $180K - Rugpull View →
1331 Web $179K - Rugpull View →
1332 Helio Protocol $178K - Rugpull View →
1333 Bill Muray Wallet Hack $178K - Access Control Access Control Attacks View →
1334 Stake DAO $176K arbitrum, base Oracle Message Spoofing Oracle Manipulation & Price Manipulation View →
1335 PAK REVOLUTION $175K - Rugpull View →
1336 SharedStake $175K ethereum Ownership Override Attack Access Control Attacks View →
1337 DarkProtocol $174K - Rugpull View →
1338 DeezNutz_404 $174K - Flash Loan Attack Flash Loans Attacks View →
1339 Aspiring Cooperation Community $173K - Rugpull View →
1340 ParaSpace $173K - Other View →
1341 IPMB $172K - Rugpull View →
1342 Casper DeFi $172K - Other View →
1343 Alpha Finance Lab $171K - Other View →
1344 KeeperDAO $170K ethereum Honeypot
1345 Trust Wallet $170K - Other View →
1346 Nikhil Gopalani Wallet $170K - Phishing Phishing Attacks View →
1347 Iron Finance $170K - Other View →
1348 MIKE and SID Tokens $170K - Rugpull View →
1349 APIG $169K - Rugpull View →
1350 ZigGap $169K - Access Control Access Control Attacks View →

Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.

Understanding the Pattern Behind Billion-Dollar Losses

The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.

For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.

Frequently Asked Questions

How is this leaderboard ranked?

Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.

Does this include every attack type?

It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.

How can I learn to prevent these exploits?

Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.

Learn to Prevent High-Impact Smart Contract Hacks

$101B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.