Most Expensive Crypto Hacks Leaderboard

The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.

  • $101B+

    Total Value Lost

  • 3299

    Incidents Tracked

  • 74

    Chains Affected

  • 80

    $100M+ Incidents

Hall of Infamy

Top 10 Biggest Hacks

Jump to full leaderboard
  2. 🥈

    Mantra

    $5.50B

  4. #4

    LuBian

    $3.50B

    bitcoin

  8. #8

    Thodex

    $2.00B

  10. #10

    Finiko

    $1.50B

Breakdown

Where the Largest Losses Concentrate

Top Chains by Losses

  • ethereum $8,051M
  • bitcoin $4,415M
  • bsc $2,657M
  • solana $1,605M
  • polygon $1,512M

Top Techniques by Losses

  • Other $61,553M
  • Rugpull $15,684M
  • Access Control $4,030M
  • Private Key Compromised (Brute Force) $3,500M
  • Safe Multisig wallet Phishing Exploit / Access Control $1,635M
All Incidents

Full Leaderboard

Showing 101–150 of 3299 ranked incidents

Largest Web3 incidents by USD amount lost
Rank Project Amount Lost Date Chain Technique Attack Guide Source
101 UPCX $70.0M ethereum Upgraded ProxyAdmin + withdrawByAdmin Hack / Access Control Access Control Attacks View →
102 EvoDeFi Bridge $66.0M - Other — View →
103 Bitfinex $65.0M - Access Control Access Control Attacks View →
104 NiceHash $64.0M - Other — View →
105 Munchables $62.5M blast Storage Slot Exploit / Access Control Access Control Attacks View →
106 Mining Capital Coin $62.0M - Rugpull — View →
107 Curve DEX $61.7M ethereum Vyper Compiler Bug — View →
108 AlphaPo $60.0M ethereum, tron Private Key Compromised (Unknown Method) Access Control Attacks View →
109 Freeway $60.0M - Rugpull — View →
110 AnubisDAO $60.0M ethereum Drained Contracts / Rugpull — View →
111 The DAO $60.0M ethereum Reentrancy / Other Reentrancy View →
112 EasyFi $59.0M ethereum, polygon Private Key Compromised (Unknown Method) / Access Control Access Control Attacks View →
113 Zaif $59.0M - Access Control Access Control Attacks View →
114 Radiant Capital $58.0M - Access Control Access Control Attacks View →
115 Uranium Finance $57.2M binance, bsc Math Mistake Exploit / Other Arithmetic Overflows Underflows View →
116 BitForex $56.0M - Rugpull — View →
117 AAX $56.0M - Other — View →
118 Phishing $55.0M - Phishing Phishing Attacks View →
119 CoinEx $55.0M arbitrum, bitcoin, bitcoincash, bsc, dagger, ethereum, kadena, polygon, solana, stellar, tron, xrp Private Key Compromised (Unknown Method) / Access Control Access Control Attacks View →
120 Ooki $55.0M bsc, polygon Private Key Compromised (Phishing) Phishing Attacks View →
121 BtcTurk $54.0M - Private Key Compromised (Unknown Method) / Access Control Access Control Attacks View →
122 Radiant V2 $53.0M arbitrum, bsc Access Control Exploit Access Control Attacks View →
123 BingX $52.0M ethereum Hot wallet hack / Other Access Control Attacks View →
124 Upbit $51.2M - Access Control Access Control Attacks View →
125 Vyper $50.5M - Reentrancy Reentrancy View →
126 Price Impact Kills $50.0M - - — View →
127 Address Poisoning Attack $50.0M - Phishing Phishing Attacks View →
128 Infini $50.0M ethereum Dev Privilege Oversight Exploit / Access Control Access Control Attacks View →
129 Blockchain.com $50.0M - Access Control Access Control Attacks View →
130 UXLINK $48.0M arbitrum, ethereum Delegatecall Exploit / Access Control Access Control Attacks View →
131 BtcTurk $48.0M arbitrum, avalanche, base, ethereum, mantle, optimism, polygon Private Key Compromised / Access Control Access Control Attacks View →
132 KyberSwap Elastic $48.0M arbitrum, base, ethereum, optimism, polygon Flashloan Swap Logic Exploit / Flash Loan Attack Flash Loans Attacks View →
133 Cashio $48.0M solana Collateral Validation Exploit / Other — View →
134 bZx $47.6M - Access Control Access Control Attacks View →
135 CoinDeal $45.0M - Other — View →
136 PancakeBunny $45.0M binance Flash Loan Attack Flash Loans Attacks View →
137 Bunny $45.0M bsc Flashloan Price Oracle Attack Flash Loans Attacks View →
138 KuCoin $45.0M ethereum Private Key Compromised (Unknown Method) Access Control Attacks View →
139 CoinBene $45.0M - Access Control Access Control Attacks View →
140 Hedgey $44.7M arbitrum, ethereum Claim Contract Flashloan Exploit / Flash Loan Attack Flash Loans Attacks View →
141 CoinDCX $44.2M - Access Control Access Control Attacks View →
142 GMX $42.0M - Other — View →
143 GMX V1 Perps $42.0M arbitrum Re-entrancy Exploit Reentrancy View →
144 Binance $41.7M - Access Control Access Control Attacks View →
145 SwissBorg $41.5M solana Third-party API compromise / Other — View →
146 Stake.com $41.4M bsc, ethereum, polygon Private Key Compromised (Unknown Method) / Other Access Control Attacks View →
147 Bo Shen Wallet Hack $41.1M - Access Control Access Control Attacks View →
148 Step Finance $40.0M solana Private Key Compromised / Access Control Access Control Attacks View →
149 Grim Finance $40.0M fantom Flashloan Reentrancy Attack / Reentrancy Flash Loans Attacks View →
150 Coinrail $40.0M - Access Control Access Control Attacks View →

Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.

Context

Understanding the Pattern Behind Billion-Dollar Losses

The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.

For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.

Common Questions

Frequently Asked Questions

How is this leaderboard ranked?

Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.

Does this include every attack type?

It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.

How can I learn to prevent these exploits?

Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.

Learn to Prevent High-Impact Smart Contract Hacks

$101B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.

Start Free Trial → View Full Course