Most Expensive Crypto Hacks Leaderboard

The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.

  • $91B+

    Total Value Lost

  • 3595

    Incidents Tracked

  • 141

    Chains Affected

  • 65

    $100M+ Incidents

Top 10 Biggest Hacks

Jump to full leaderboard
  2. 🥈

    Mantra

    $5.50B

  4. #4

    LuBian

    $3.50B

    bitcoin

  7. #7

    Thodex

    $2.00B

  9. #9

    Finiko

    $1.50B

  10. #10

    Bybit

    $1.40B

    ethereum

Where the Largest Losses Concentrate

Top Chains by Losses

  • ethereum $9,830M
  • bitcoin $5,404M
  • bsc $3,037M
  • solana $1,697M
  • polygon $1,539M

Top Techniques by Losses

  • Other $52,517M
  • Rugpull $15,631M
  • Private Key Compromised (Brute Force) / Weak Key Generation $3,500M
  • Safe Multisig wallet Phishing Exploit / Access Control / Signer Phishing $1,635M
  • Access Control / Hot Wallet Key Compromised $1,027M

Full Leaderboard

Showing 1351-1400 of 3595 ranked incidents

Largest Web3 incidents by USD amount lost
Rank Project Amount Lost Date Chain Technique Attack Guide Source
1351 FENGSHOU Token $191K bsc Access Control / Improper Access Control Access Control Attacks View →
1352 LAXO Token $191K bsc Flash Loan Attack / Incorrect Share Accounting Flash Loan Attacks View →
1353 Layer2DAO $190K optimism Access Control / Phishing Access Control Attacks View →
1354 Real Web Project $190K - Rugpull — View →
1355 iVest $190K bsc Unknown — —
1356 Wettok Market $190K - Rugpull — View →
1357 DMCToken $190K - Rugpull — View →
1358 Magix $188K ethereum Rugpull — View →
1359 Memecoin $188K - Rugpull — View →
1360 Astronaut NFT $187K binance Rugpull — View →
1361 FTX $187K ethereum Other / API Key Compromised — View →
1362 BoostHook $187K ethereum Spot Price Manipulation Oracle Manipulation & Price Manipulation —
1363 GDS Chain $187K bsc Flash Loan Attack / Reward Logic Flaw Flash Loan Attacks View →
1364 SynapLogic $186K base Access Control / Unknown Access Control Attacks View →
1365 Toothless - How to train meme $186K - Rugpull — View →
1366 BigFinance $185K - Rugpull — View →
1367 SKYDAO $183K bsc Swap Logic Flaw — —
1368 Meta Apes $183K - Rugpull — View →
1369 four.meme $183K bsc Liquidity Pool Exploit / Other / Swap Logic Flaw — View →
1370 Cover protocol $183K ethereum Rugpull — —
1371 MetaDragonDao $181K bsc Other / Improper Access Control Access Control Attacks View →
1372 Yield Protocol $181K arbitrum Balance Disparity Exploit / Incorrect Share Accounting — View →
1373 Civilization $180K ethereum Other / Token Approval Abuse / Improper Access Control Access Control Attacks View →
1374 Nebula Revelation $180K optimism Reentrancy Reentrancy View →
1375 CoW Swap $180K ethereum Other / Arbitrary External Call Access Control Attacks View →
1376 SHIDAO $180K - Rugpull — View →
1377 Web $179K - Rugpull — View →
1378 Helio Protocol $178K - Rugpull — View →
1379 Bill Muray Wallet Hack $178K - Access Control Access Control Attacks View →
1380 Stake DAO $176K arbitrum, base Oracle Message Spoofing / Caller Impersonation Access Control Attacks View →
1381 PAK REVOLUTION $175K - Rugpull — View →
1382 Beluga $175K arbitrum Spot Price Manipulation Oracle Manipulation & Price Manipulation —
1383 SharedStake $175K ethereum Ownership Override Attack / Ownership Takeover Access Control Attacks View →
1384 DarkProtocol $174K - Rugpull — View →
1385 DeezNutz_404 $174K ethereum Flash Loan Attack / Infinite Mint Flash Loan Attacks View →
1386 Aspiring Cooperation Community $173K - Rugpull — View →
1387 ParaSpace $173K ethereum Other / Borrow Logic Exploit / Spot Price Manipulation Oracle Manipulation & Price Manipulation View →
1388 IPMB $172K - Rugpull — View →
1389 Casper DeFi $172K - Other — View →
1390 DoodiPals $171K solana Private Key Compromised Access Control Attacks —
1391 Cryptovoxels $171K ethereum Phishing Phishing Attacks —
1392 Alpha Finance Lab $171K ethereum Other / Spot Price Manipulation Oracle Manipulation & Price Manipulation View →
1393 KeeperDAO $170K ethereum Honeypot — —
1394 Bankr $170K base Session Key Compromised — —
1395 Trust Wallet $170K - Other — View →
1396 Nikhil Gopalani Wallet $170K - Phishing Phishing Attacks View →
1397 Iron Finance $170K polygon Incorrect Share Accounting — —
1398 Iron Finance $170K - Other — View →
1399 MIKE and SID Tokens $170K - Rugpull — View →
1400 APIG $169K - Rugpull — View →

Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.

Understanding the Pattern Behind Billion-Dollar Losses

The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.

For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.

Frequently Asked Questions

How is this leaderboard ranked?

Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.

Does this include every attack type?

It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.

How can I learn to prevent these exploits?

Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.

Learn to Prevent High-Impact Smart Contract Hacks

$91B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.

Start Free Trial → View Full Course