Most Expensive Crypto Hacks Leaderboard

The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.

  • $101B+

    Total Value Lost

  • 3299

    Incidents Tracked

  • 74

    Chains Affected

  • 80

    $100M+ Incidents

Top 10 Biggest Hacks

Jump to full leaderboard
  1. 🥈

    Mantra

    $5.50B

  2. #4

    LuBian

    $3.50B

    bitcoin

  3. #8

    Thodex

    $2.00B

  4. #10

    Finiko

    $1.50B

Where the Largest Losses Concentrate

Top Chains by Losses

  • ethereum $8,051M
  • bitcoin $4,415M
  • bsc $2,657M
  • solana $1,605M
  • polygon $1,512M

Top Techniques by Losses

  • Other $61,553M
  • Rugpull $15,684M
  • Access Control $4,030M
  • Private Key Compromised (Brute Force) $3,500M
  • Safe Multisig wallet Phishing Exploit / Access Control $1,635M

Full Leaderboard

Showing 1501–1550 of 3299 ranked incidents

Largest Web3 incidents by USD amount lost
Rank Project Amount Lost Date Chain Technique Attack Guide Source
1501 ModelpiToken $107K - Other View →
1502 Fake zkSync $107K - Rugpull View →
1503 JNB Token $106K - Rugpull View →
1504 Mina Protocol $106K - Rugpull View →
1505 YZY DAO $106K ethereum Rugpull View →
1506 DigiFund $106K - Rugpull View →
1507 TetherShiba $105K - Honeypot View →
1508 SellToken $105K - Other View →
1509 Thetanuts Finance $105K - Flash Loan Attack Flash Loans Attacks View →
1510 DarkPool $104K - Other View →
1511 FDB $104K - Rugpull View →
1512 Philcoin $103K - Rugpull View →
1513 Dor $103K - Rugpull View →
1514 Mars Meta Space $102K - Access Control Access Control Attacks View →
1515 Yearn Machine Learning $100K ethereum Rugpull View →
1516 KUKUCoin $100K - Rugpull View →
1517 Zerion Wallet $100K - Hot Wallet Compromise via Social Engineering View →
1518 PGNLZ token $100K - Flash Loan Attack Flash Loans Attacks View →
1519 Baby Doge Coin $100K - Flash Loan Attack Flash Loans Attacks View →
1520 POOPEPE token $100K - Rugpull View →
1521 XCAD $100K - Rugpull View →
1522 UNMS $100K - Flash Loan Attack Flash Loans Attacks View →
1523 SUI Token $100K - Rugpull View →
1524 Ranger $100K - Rugpull View →
1525 Formation.Fi $100K - Other View →
1526 Coinbase $100K - Access Control Access Control Attacks View →
1527 DMD $99K - Rugpull View →
1528 Frontfanz $98K - Rugpull View →
1529 Aphrodite Protocol $97K ethereum Rugpull View →
1530 PRXVT $97K base Sybil Attack with CREATE2 Addresses View →
1531 Citadel Finance $97K - Flash Loan Attack Flash Loans Attacks View →
1532 GN $96K - Rugpull
1533 OBB $96K - Rugpull View →
1534 Safe Dollar $95K polygon Other View →
1535 Pepe Coin $95K - Rugpull View →
1536 CityDAO $95K - Access Control Access Control Attacks View →
1537 Citizen Finance $94K - Access Control Access Control Attacks View →
1538 OkayLetsGo $94K - Rugpull View →
1539 APE $94K - Rugpull
1540 Hegic(old contract) $94K ethereum Unlimited repeated withdrawal exploit View →
1541 Marvel Metauniverse $94K - Rugpull View →
1542 Sloth Climb $94K - Rugpull View →
1543 Nifity $93K ethereum Rugpull View →
1544 Ramses $93K - Other View →
1545 TRT $93K - Rugpull View →
1546 Dividend Token $92K ethereum Rugpull View →
1547 Sheep Farm $91K - Other View →
1548 Stake DAO $91K - Access Control Access Control Attacks View →
1549 Cryptos Tribe $91K - Rugpull View →
1550 RedRubyDAO $91K - Other View →

Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.

Understanding the Pattern Behind Billion-Dollar Losses

The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.

For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.

Frequently Asked Questions

How is this leaderboard ranked?

Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.

Does this include every attack type?

It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.

How can I learn to prevent these exploits?

Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.

Learn to Prevent High-Impact Smart Contract Hacks

$101B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.