Most Expensive Crypto Hacks Leaderboard

The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.

  • $91B+

    Total Value Lost

  • 3595

    Incidents Tracked

  • 141

    Chains Affected

  • 65

    $100M+ Incidents

Top 10 Biggest Hacks

Jump to full leaderboard
  2. 🥈

    Mantra

    $5.50B

  4. #4

    LuBian

    $3.50B

    bitcoin

  7. #7

    Thodex

    $2.00B

  9. #9

    Finiko

    $1.50B

  10. #10

    Bybit

    $1.40B

    ethereum

Where the Largest Losses Concentrate

Top Chains by Losses

  • ethereum $9,830M
  • bitcoin $5,404M
  • bsc $3,037M
  • solana $1,697M
  • polygon $1,539M

Top Techniques by Losses

  • Other $52,517M
  • Rugpull $15,631M
  • Private Key Compromised (Brute Force) / Weak Key Generation $3,500M
  • Safe Multisig wallet Phishing Exploit / Access Control / Signer Phishing $1,635M
  • Access Control / Hot Wallet Key Compromised $1,027M

Full Leaderboard

Showing 101-150 of 3595 ranked incidents

Largest Web3 incidents by USD amount lost
Rank Project Amount Lost Date Chain Technique Attack Guide Source
101 Vyper $50.5M - Reentrancy Reentrancy View →
102 Nesa $50.0M nesa Arithmetic Error — —
103 Price Impact Kills $50.0M - - — View →
104 Address Poisoning Attack $50.0M - Phishing Phishing Attacks View →
105 Infini $50.0M ethereum Dev Privilege Oversight Exploit / Access Control / Private Key Compromised Access Control Attacks View →
106 Blockchain.com $50.0M - Access Control Access Control Attacks View →
107 UXLINK $48.0M arbitrum, ethereum Delegatecall Exploit / Access Control / Delegatecall Hijack Access Control Attacks View →
108 BtcTurk $48.0M arbitrum, avalanche, base, ethereum, mantle, optimism, polygon Private Key Compromised / Access Control / Hot Wallet Key Compromised Access Control Attacks View →
109 KyberSwap Elastic $48.0M arbitrum, base, ethereum, optimism, polygon Flashloan Swap Logic Exploit / Flash Loan Attack / Rounding Error Arithmetic Overflow & Underflow Attacks View →
110 bZx $47.6M bsc, polygon Access Control / Private Key Compromised (Phishing) / Phishing Access Control Attacks View →
111 CoinDeal $45.0M - Other — View →
112 PancakeBunny $45.0M binance, bsc Flash Loan Attack / Flashloan Price Oracle Attack / Spot Price Manipulation Flash Loan Attacks View →
113 Hedgey $44.7M arbitrum, ethereum Claim Contract Flashloan Exploit / Flash Loan Attack / Missing Input Validation Access Control Attacks View →
114 CoinDCX $44.2M - Access Control / Hot Wallet Key Compromised Access Control Attacks View →
115 GMX $42.0M arbitrum Other / Re-entrancy Exploit / Reentrancy Reentrancy View →
116 Binance $41.7M bitcoin Access Control / Hot Wallet Key Compromised Access Control Attacks View →
117 SwissBorg $41.5M solana Third-party API compromise / Other / API Key Compromised — View →
118 Stake.com $41.4M bsc, ethereum, polygon Private Key Compromised (Unknown Method) / Other / Hot Wallet Key Compromised Access Control Attacks View →
119 Bo Shen Wallet Hack $41.1M - Access Control Access Control Attacks View →
120 Step Finance $40.0M solana Private Key Compromised / Access Control Access Control Attacks View →
121 Grim Finance $40.0M fantom Flashloan Reentrancy Attack / Reentrancy Flash Loan Attacks View →
122 Coinrail $40.0M ethereum Exchange compromise; initial access unknown Access Control Attacks View →
123 Digging for Gold $39.0M - - — View →
124 Alpha Finance $37.5M ethereum Flashloan Pool Shares Exploit / Flash Loan Attack / Borrow Logic Flaw Flash Loan Attacks View →
125 CoinsPaid $37.3M - Social Engineering / Other / Impersonation Scam Phishing Attacks View →
126 Cream Finance $36.2M ethereum Other / Flashloan Reentrancy Attack / Reentrancy Flash Loan Attacks View →
127 Upbit $36.0M solana Private Key Compromised / Other / Malware Access Control Attacks View →
128 IRA Financial $36.0M ethereum Other / API Key Compromised — View →
129 Vee Finance $36.0M avalanche Flashloan Price Oracle Attack / Other / Spot Price Manipulation Flash Loan Attacks View →
130 Scream $35.0M - Oracle Issue Oracle Manipulation & Price Manipulation View →
131 Crypto.com $34.4M bitcoin, ethereum Private Key Compromised (Unknown Method) / Access Control / Session Key Compromised Access Control Attacks View →
132 Harvest Finance $33.8M ethereum Flashloan Price Oracle Attack / Flash Loan Attack / Spot Price Manipulation Flash Loan Attacks View →
133 Ackerman Ponzi $33.0M - Other — View →
134 DEFI100 $32.0M - Rugpull — View →
135 Meerkat Finance $32.0M binance, bsc Drained Contracts / Rugpull / Admin Drain — View →
136 Bitpoint $32.0M bitcoin, ethereum, litecoin, xrp Access Control / Key Leaked via Infrastructure Access Control Attacks View →
137 Fintoch $31.7M - Rugpull — View →
138 MonoX $31.4M ethereum, polygon Swap Function Exploit / Other / Swap Logic Flaw Oracle Manipulation & Price Manipulation View →
139 Humanity Protocol $31.0M bsc, ethereum Access Control / Private Key Compromised Access Control Attacks View →
140 Bithumb $31.0M ethereum Access Control / Key Leaked via Infrastructure Access Control Attacks View →
141 Tether $31.0M bitcoin Other / Private Key Compromised Access Control Attacks View →
142 Spartan Protocol $30.5M binance, bsc Flash Loan Attack / Flashloan Pool Shares Exploit / Incorrect Share Accounting Flash Loan Attacks View →
143 SnowdogDAO $30.0M avalanche Rugpull / Drained Contracts / Liquidity Rug — View →
144 Parity $30.0M ethereum Unprotected wallet initialization Access Control Attacks View →
145 Herencia Artifex $29.6M - Other — View →
146 Transit Swap $28.9M bsc, ethereum Transfer Logic Exploit / Missing Input Validation / Other — View →
147 BigONE $28.0M bitcoin, bsc, ethereum, solana, tron Access Control / Supply Chain Attack Access Control Attacks View →
148 Deribit $28.0M - Private Key Compromised (Unknown Method) / Hot Wallet Key Compromised / Access Control Access Control Attacks View →
149 Aave V3 $27.8M ethereum CAPO Oracle Misconfiguration / Oracle Misconfiguration Oracle Manipulation & Price Manipulation View →
150 Wintermute $27.6M optimism Other / Cross Chain Multisig Deployment Exploit / Improper Access Control Access Control Attacks View →

Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.

Understanding the Pattern Behind Billion-Dollar Losses

The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.

For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.

Frequently Asked Questions

How is this leaderboard ranked?

Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.

Does this include every attack type?

It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.

How can I learn to prevent these exploits?

Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.

Learn to Prevent High-Impact Smart Contract Hacks

$91B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.

Start Free Trial → View Full Course