Most Expensive Crypto Hacks Leaderboard

The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.

  • $101B+

    Total Value Lost

  • 3299

    Incidents Tracked

  • 74

    Chains Affected

  • 80

    $100M+ Incidents

Top 10 Biggest Hacks

Jump to full leaderboard
  1. 🥈

    Mantra

    $5.50B

  2. #4

    LuBian

    $3.50B

    bitcoin

  3. #8

    Thodex

    $2.00B

  4. #10

    Finiko

    $1.50B

Where the Largest Losses Concentrate

Top Chains by Losses

  • ethereum $8,051M
  • bitcoin $4,415M
  • bsc $2,657M
  • solana $1,605M
  • polygon $1,512M

Top Techniques by Losses

  • Other $61,553M
  • Rugpull $15,684M
  • Access Control $4,030M
  • Private Key Compromised (Brute Force) $3,500M
  • Safe Multisig wallet Phishing Exploit / Access Control $1,635M

Full Leaderboard

Showing 1401–1450 of 3299 ranked incidents

Largest Web3 incidents by USD amount lost
Rank Project Amount Lost Date Chain Technique Attack Guide Source
1401 Carson $144K - Flash Loan Attack Flash Loans Attacks View →
1402 mCoin $144K - Rugpull View →
1403 HPD $143K - Rugpull View →
1404 DHE $142K - Rugpull View →
1405 Particle Trade $142K - Other View →
1406 Giant Divine Shield $141K - Rugpull View →
1407 Ink Finance $140K - Access Control Access Control Attacks View →
1408 Ratz Club $140K - Access Control Access Control Attacks View →
1409 Walletreum $138K ethereum Rugpull View →
1410 ArbiSwap $138K arbitrum Infinite Mint and Dump / Rugpull View →
1411 Tin Finance $137K binance Rugpull View →
1412 TwitFi $137K - Other View →
1413 Bancor $135K ethereum Other View →
1414 BabyDogeCoin $135K - Flash Loan Attack Flash Loans Attacks View →
1415 OzCoin $135K - Other View →
1416 Kizuna AI $135K - Rugpull View →
1417 Dark Light $134K - Rugpull View →
1418 CommEX $134K - Rugpull View →
1419 Script Token $134K - Rugpull View →
1420 MoveCash $133K - Rugpull View →
1421 Netbox $132K - Rugpull View →
1422 World Cup $132K - Rugpull View →
1423 Securedverse Copycat $131K - Rugpull View →
1424 Kaonashi the Faceless $131K - Rugpull View →
1425 Ara Finance $131K bsc Access Control Exploit Access Control Attacks View →
1426 GST Token $131K - Rugpull
1427 Baby Pepe Token $131K - Rugpull View →
1428 Lava $130K arbitrum Flashloan Exploit Flash Loans Attacks View →
1429 N/A $130K - Oracle Issue Oracle Manipulation & Price Manipulation View →
1430 Quint $130K - Other View →
1431 YFFS Finance $130K ethereum Rugpull View →
1432 MSCST $130K bsc Atomic Sandwich Attack Frontrunning & Sandwich Attacks View →
1433 XYearn $130K ethereum Rugpull View →
1434 Magpie Protocol $129K arbitrum, avalanche, base, blast, bsc, ethereum, optimism, polygon, polygon zkevm, zksync era Router Exploit View →
1435 Daedalus DAO $129K - Rugpull View →
1436 MerchDAO $128K ethereum Honeypot View →
1437 DeFi Safe $127K - Rugpull View →
1438 Molt EVM $127K base onlySpawnerToken Modifier Hack View →
1439 Journey of Awakening $127K - Other View →
1440 SSPF $126K - Rugpull View →
1441 Ara Blocks $125K - Flash Loan Attack Flash Loans Attacks View →
1442 DMi $124K - Other View →
1443 Biki $123K - Access Control Access Control Attacks View →
1444 Just-Dice $123K - Access Control Access Control Attacks View →
1445 MooCakeCTX $123K - Flash Loan Attack Flash Loans Attacks View →
1446 PSYOP Phishing $123K - Phishing Phishing Attacks View →
1447 Terk The Gorilla $122K - Rugpull View →
1448 MAD $122K - Other View →
1449 Elron Token $122K - Rugpull View →
1450 MoltenSwap $122K binance Rugpull

Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.

Understanding the Pattern Behind Billion-Dollar Losses

The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.

For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.

Frequently Asked Questions

How is this leaderboard ranked?

Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.

Does this include every attack type?

It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.

How can I learn to prevent these exploits?

Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.

Learn to Prevent High-Impact Smart Contract Hacks

$101B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.