Most Expensive Crypto Hacks Leaderboard

The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.

  • $101B+

    Total Value Lost

  • 3299

    Incidents Tracked

  • 74

    Chains Affected

  • 80

    $100M+ Incidents

Top 10 Biggest Hacks

Jump to full leaderboard
  1. 🥈

    Mantra

    $5.50B

  2. #4

    LuBian

    $3.50B

    bitcoin

  3. #8

    Thodex

    $2.00B

  4. #10

    Finiko

    $1.50B

Where the Largest Losses Concentrate

Top Chains by Losses

  • ethereum $8,051M
  • bitcoin $4,415M
  • bsc $2,657M
  • solana $1,605M
  • polygon $1,512M

Top Techniques by Losses

  • Other $61,553M
  • Rugpull $15,684M
  • Access Control $4,030M
  • Private Key Compromised (Brute Force) $3,500M
  • Safe Multisig wallet Phishing Exploit / Access Control $1,635M

Full Leaderboard

Showing 1351–1400 of 3299 ranked incidents

Largest Web3 incidents by USD amount lost
Rank Project Amount Lost Date Chain Technique Attack Guide Source
1351 Big Time $169K - Rugpull View →
1352 Majin Buu $168K - Rugpull View →
1353 Chessfarm.Tech $168K binance Rugpull View →
1354 PicoStocks $167K - Access Control Access Control Attacks View →
1355 SOMESING $167K - Rugpull View →
1356 Stobox Exchange $166K - Access Control Access Control Attacks View →
1357 Port3 Network $166K bsc Infinite Mint and Dump View →
1358 MAID $166K - Access Control Access Control Attacks View →
1359 Denaria $165K - Other View →
1360 Stader.Near $165K - Other View →
1361 X2Y2 $165K - Phishing Phishing Attacks View →
1362 Elephant Money $163K - Flash Loan Attack Flash Loans Attacks View →
1363 MarbleX $162K - Rugpull View →
1364 Bitcash.cz $161K - Other View →
1365 L7 DEX $161K - Rugpull View →
1366 Celestia $161K - Rugpull View →
1367 FDO $160K - Other View →
1368 Jigsaw saw you $160K - Rugpull View →
1369 ROACH RACE $160K - Rugpull View →
1370 CoW Swap $160K - Other View →
1371 Sport Move $160K - Rugpull View →
1372 SkyLands $159K - Rugpull View →
1373 DappNode $158K - Access Control Access Control Attacks View →
1374 BTDOG $157K - Rugpull View →
1375 Huge Gas Fee Draining $156K - Other View →
1376 OBB Token $156K - Rugpull View →
1377 ADAF $156K - Rugpull
1378 Creso $154K - Rugpull View →
1379 TrustPad $152K - Other View →
1380 Artificial intelligence robot $152K - Rugpull View →
1381 LK-99 Protocol $152K - Rugpull View →
1382 TGBS $151K - Flash Loan Attack Flash Loans Attacks View →
1383 GGBOND $151K - Rugpull View →
1384 LlamaCoin $151K - Rugpull
1385 DBXen $150K - Access Control Access Control Attacks View →
1386 DegenFox $150K - Rugpull View →
1387 AI C-3PO $150K - Rugpull View →
1388 Tropykus RSK $150K rootstock Redeem Rounding Error Exploit Arithmetic Overflows Underflows View →
1389 BONK Inu $150K - Rugpull View →
1390 DeeKay $150K - Phishing Phishing Attacks View →
1391 SkyVerse $150K - Other View →
1392 MyEtherWallet $150K - Access Control Access Control Attacks View →
1393 FlokiMoon $148K - Rugpull
1394 DDCX $148K - Rugpull View →
1395 LooBr $147K - Rugpull View →
1396 Multichain $147K - Other View →
1397 Sharwa.Finance $147K arbitrum Price Manipulation Attack / Other Oracle Manipulation & Price Manipulation View →
1398 land $145K - Other View →
1399 Jar Jar Binks $145K - Rugpull View →
1400 Deri Protocol $145K - Other View →

Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.

Understanding the Pattern Behind Billion-Dollar Losses

The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.

For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.

Frequently Asked Questions

How is this leaderboard ranked?

Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.

Does this include every attack type?

It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.

How can I learn to prevent these exploits?

Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.

Learn to Prevent High-Impact Smart Contract Hacks

$101B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.