Most Expensive Crypto Hacks Leaderboard

The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.

  • $91B+

    Total Value Lost

  • 3595

    Incidents Tracked

  • 141

    Chains Affected

  • 65

    $100M+ Incidents

Top 10 Biggest Hacks

Jump to full leaderboard
  1. 🥈

    Mantra

    $5.50B

  2. #4

    LuBian

    $3.50B

    bitcoin

  3. #7

    Thodex

    $2.00B

  4. #9

    Finiko

    $1.50B

  5. #10

    Bybit

    $1.40B

    ethereum

Where the Largest Losses Concentrate

Top Chains by Losses

  • ethereum $9,830M
  • bitcoin $5,404M
  • bsc $3,037M
  • solana $1,697M
  • polygon $1,539M

Top Techniques by Losses

  • Other $52,517M
  • Rugpull $15,631M
  • Private Key Compromised (Brute Force) / Weak Key Generation $3,500M
  • Safe Multisig wallet Phishing Exploit / Access Control / Signer Phishing $1,635M
  • Access Control / Hot Wallet Key Compromised $1,027M

Full Leaderboard

Showing 1401-1450 of 3595 ranked incidents

Largest Web3 incidents by USD amount lost
Rank Project Amount Lost Date Chain Technique Attack Guide Source
1401 ZigGap $169K - Access Control Access Control Attacks View →
1402 Big Time $169K - Rugpull — View →
1403 Majin Buu $168K - Rugpull — View →
1404 MAAT Protocol $168K binance Withdrawal Logic Flaw — —
1405 Chessfarm.Tech $168K binance Rugpull — View →
1406 PicoStocks $167K - Access Control Access Control Attacks View →
1407 FilDA $167K elastos Spot Price Manipulation Oracle Manipulation & Price Manipulation —
1408 SOMESING $167K - Rugpull — View →
1409 Stobox Exchange $166K - Access Control Access Control Attacks View →
1410 Port3 Network $166K bsc Infinite Mint and Dump / Infinite Mint — View →
1411 MAID $166K - Access Control Access Control Attacks View →
1412 Denaria $166K linea LP accounting rounding asymmetry and unsafe signed-to-unsigned conversion Oracle Manipulation & Price Manipulation View →
1413 Stader.Near $165K - Other — View →
1414 Elephant Money $163K bsc Flash Loan Attack / Spot Price Manipulation Flash Loan Attacks View →
1415 Cozy Finance $163K optimism Oracle Issue / Unknown Oracle Manipulation & Price Manipulation View →
1416 Enjin $162K ethereum Unprotected Initialization and Ownership Takeover Access Control Attacks View →
1417 MarbleX $162K - Rugpull — View →
1418 Bitcash.cz $161K bitcoin Other / Improper Access Control Access Control Attacks View →
1419 L7 DEX $161K - Rugpull — View →
1420 Celestia $161K - Rugpull — View →
1421 FDO $160K - Other — View →
1422 Jigsaw saw you $160K - Rugpull — View →
1423 ROACH RACE $160K - Rugpull — View →
1424 Soda Protocol $160K ethereum Withdrawal Logic Flaw — —
1425 Sport Move $160K - Rugpull — View →
1426 SkyLands $159K - Rugpull — View →
1427 DappNode $158K - Access Control Access Control Attacks View →
1428 BTDOG $157K - Rugpull — View →
1429 Huge Gas Fee Draining $156K - Other — View →
1430 OBB Token $156K - Rugpull — View →
1431 ADAF $156K - Rugpull — —
1432 TrustPad $155K bsc Other / Improper Access Control Access Control Attacks View →
1433 Creso $154K - Rugpull — View →
1434 SEA Token $153K arbitrum Spot Price Manipulation Oracle Manipulation & Price Manipulation —
1435 Artificial intelligence robot $152K - Rugpull — View →
1436 LK-99 Protocol $152K - Rugpull — View →
1437 TGBS $151K - Pool-burn price manipulation — View →
1438 GGBOND $151K - Rugpull — View →
1439 LlamaCoin $151K - Rugpull — —
1440 DBXen $150K ethereum Access Control / Missing Input Validation Access Control Attacks View →
1441 YIEDL $150K bsc Missing Input Validation — —
1442 DegenFox $150K - Rugpull — View →
1443 Carson $150K bsc Flash Loan Attack / Spot Price Manipulation Flash Loan Attacks View →
1444 AI C-3PO $150K - Rugpull — View →
1445 Tropykus RSK $150K rootstock Redeem Rounding Error Exploit / Rounding Error Arithmetic Overflow & Underflow Attacks View →
1446 BONK Inu $150K - Rugpull — View →
1447 DeeKay $150K - Phishing Phishing Attacks View →
1448 SkyVerse $150K - Other — View →
1449 MyEtherWallet $150K - Access Control Access Control Attacks View →
1450 FlokiMoon $148K - Rugpull — —

Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.

Understanding the Pattern Behind Billion-Dollar Losses

The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.

For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.

Frequently Asked Questions

How is this leaderboard ranked?

Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.

Does this include every attack type?

It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.

How can I learn to prevent these exploits?

Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.

Learn to Prevent High-Impact Smart Contract Hacks

$91B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.