Most Expensive Crypto Hacks Leaderboard

The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.

  • $91B+

    Total Value Lost

  • 3595

    Incidents Tracked

  • 141

    Chains Affected

  • 65

    $100M+ Incidents

Top 10 Biggest Hacks

Jump to full leaderboard
  1. 🥈

    Mantra

    $5.50B

  2. #4

    LuBian

    $3.50B

    bitcoin

  3. #7

    Thodex

    $2.00B

  4. #9

    Finiko

    $1.50B

  5. #10

    Bybit

    $1.40B

    ethereum

Where the Largest Losses Concentrate

Top Chains by Losses

  • ethereum $9,830M
  • bitcoin $5,404M
  • bsc $3,037M
  • solana $1,697M
  • polygon $1,539M

Top Techniques by Losses

  • Other $52,517M
  • Rugpull $15,631M
  • Private Key Compromised (Brute Force) / Weak Key Generation $3,500M
  • Safe Multisig wallet Phishing Exploit / Access Control / Signer Phishing $1,635M
  • Access Control / Hot Wallet Key Compromised $1,027M

Full Leaderboard

Showing 1501-1550 of 3595 ranked incidents

Largest Web3 incidents by USD amount lost
Rank Project Amount Lost Date Chain Technique Attack Guide Source
1501 YFFS Finance $130K ethereum Rugpull — View →
1502 MSCST $130K bsc Atomic Sandwich Attack / Improper Access Control Access Control Attacks View →
1503 XYearn $130K ethereum Rugpull — View →
1504 Magpie Protocol $129K arbitrum, avalanche, base, blast, bsc, ethereum, optimism, polygon, polygon zkevm, zksync era Router Exploit / Missing Input Validation — View →
1505 Daedalus DAO $129K - Rugpull — View →
1506 MerchDAO $128K ethereum Honeypot — View →
1507 pandorachainDAO $128K bsc Spot Price Manipulation Oracle Manipulation & Price Manipulation —
1508 Ocean Protocol $128K polygon Deposit Logic Flaw — —
1509 DeFi Safe $127K - Rugpull — View →
1510 Molt EVM $127K base onlySpawnerToken Modifier Hack / Improper Access Control Access Control Attacks View →
1511 Journey of Awakening $127K - Other — View →
1512 SSPF $126K - Rugpull — View →
1513 DMi $124K - Other Flash Loan Attacks View →
1514 Biki $123K - Access Control Access Control Attacks View →
1515 Just-Dice $123K - Access Control Access Control Attacks View →
1516 PSYOP Phishing $123K - Phishing Phishing Attacks View →
1517 Terk The Gorilla $122K - Rugpull — View →
1518 MAD $122K - Other — View →
1519 Elron Token $122K - Rugpull — View →
1520 MoltenSwap $122K binance Rugpull — —
1521 Patex $122K - Rugpull — View →
1522 RepubliK $121K - Rugpull — View →
1523 PIPI $121K - Rugpull — View →
1524 AIDC $121K bsc Arithmetic Error / Other — View →
1525 DESTINY Protocol $121K - Rugpull — View →
1526 PAPABEAR $121K - Rugpull — View →
1527 Trust Bridge $120K - Rugpull — View →
1528 Utopia $120K bsc Other / Swap Logic Flaw — View →
1529 Fox Market $120K bsc Spot Price Manipulation / Flash Loan Attack Flash Loan Attacks View →
1530 Anome $120K - Other — View →
1531 LABUBU $120K binance Other / Donation Attack — View →
1532 Swarm Markets $120K ethereum Improper Access Control Access Control Attacks —
1533 El Dorado Exchange $120K arbitrum Swap Logic Flaw — —
1534 PeopleDAO $120K ethereum Social Engineering / Signer Phishing Phishing Attacks View →
1535 ACC TOKEN $120K - Rugpull — —
1536 Twitter $120K - Access Control Access Control Attacks View →
1537 MYX Finance $120K - Rugpull — View →
1538 YON $118K bsc Improper Access Control Access Control Attacks —
1539 Local Traders $118K bsc Access Control Exploit / Access Control / Improper Access Control Access Control Attacks View →
1540 Kaoya Swap $118K bsc Flash Loan Attack / Swap Logic Flaw Flash Loan Attacks View →
1541 Snake Eyes $117K - Rugpull — View →
1542 CCC $117K bsc Swap Logic Flaw — View →
1543 ROT Token $116K - Rugpull — View →
1544 SHIA $116K - Rugpull — View →
1545 Amnext $116K - Reentrancy Reentrancy View →
1546 Easier $116K - Rugpull — View →
1547 GoldPesa $115K base Other / Incorrect Share Accounting — View →
1548 ArbTomb $115K - Rugpull — View →
1549 FOMO DAO $114K - Rugpull — View →
1550 Yoda Coin $114K - Rugpull — View →

Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.

Understanding the Pattern Behind Billion-Dollar Losses

The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.

For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.

Frequently Asked Questions

How is this leaderboard ranked?

Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.

Does this include every attack type?

It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.

How can I learn to prevent these exploits?

Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.

Learn to Prevent High-Impact Smart Contract Hacks

$91B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.