Most Expensive Crypto Hacks Leaderboard

The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.

  • $91B+

    Total Value Lost

  • 3595

    Incidents Tracked

  • 141

    Chains Affected

  • 65

    $100M+ Incidents

Top 10 Biggest Hacks

Jump to full leaderboard
  1. 🥈

    Mantra

    $5.50B

  2. #4

    LuBian

    $3.50B

    bitcoin

  3. #7

    Thodex

    $2.00B

  4. #9

    Finiko

    $1.50B

  5. #10

    Bybit

    $1.40B

    ethereum

Where the Largest Losses Concentrate

Top Chains by Losses

  • ethereum $9,830M
  • bitcoin $5,404M
  • bsc $3,037M
  • solana $1,697M
  • polygon $1,539M

Top Techniques by Losses

  • Other $52,517M
  • Rugpull $15,631M
  • Private Key Compromised (Brute Force) / Weak Key Generation $3,500M
  • Safe Multisig wallet Phishing Exploit / Access Control / Signer Phishing $1,635M
  • Access Control / Hot Wallet Key Compromised $1,027M

Full Leaderboard

Showing 1651-1700 of 3595 ranked incidents

Largest Web3 incidents by USD amount lost
Rank Project Amount Lost Date Chain Technique Attack Guide Source
1651 Sheep Farm $91K bsc Other / Missing Input Validation — View →
1652 Cryptos Tribe $91K - Rugpull — View →
1653 Stake DAO $91K arbitrum Access Control / Deployer Key Compromised Access Control Attacks View →
1654 RedRubyDAO $91K - Other — View →
1655 PacaSwap DEX $91K constellation Arithmetic Error — —
1656 GDAO $90K - Rugpull — View →
1657 CryptoBatz $90K - Other — View →
1658 Squid $90K - Other — View →
1659 Berally $90K berachain Private Key Compromised (Unknown Method) / Access Control / Deployer Key Compromised Access Control Attacks View →
1660 StepHeroNFTs $90K bsc Reentrancy Reentrancy View →
1661 Rodeo $90K arbitrum Mint Reserves Logic Exploit / Unknown — View →
1662 Melo $90K bsc Improper Access Control Access Control Attacks —
1663 Cashera $90K - Rugpull — View →
1664 MonaCoin $90K monacoin Forged Proof — —
1665 Bitcoinica $90K bitcoin Other / Key Leaked via Infrastructure — View →
1666 Klein Bottle $90K - Rugpull — —
1667 Brahma Finance $90K ethereum Other / Arbitrary External Call Access Control Attacks View →
1668 PHX $90K bsc Incorrect Share Accounting — View →
1669 Builders NFT $89K - Rugpull — View →
1670 Towelie $89K - Rugpull — View →
1671 Ninja Gaiden $89K - Rugpull — View →
1672 AI DAY: Part 2 $89K - Rugpull — —
1673 NFDAO $88K - Rugpull — View →
1674 DerpMan $88K - Rugpull — View →
1675 Tailverse $88K - Other — View →
1676 Affine Protocol $88K ethereum Missing Input Validation — —
1677 China Rabbit $88K - Rugpull — View →
1678 iSharesBitcoin $88K - Rugpull — View →
1679 Expanso $88K - Rugpull — View →
1680 BYToken $87K - Flash Loan Attack Flash Loan Attacks View →
1681 SQUID $87K bsc Swap Logic Flaw — —
1682 Move token $87K - Rugpull — View →
1683 CheckoutPool $86K polygon Improper Access Control Access Control Attacks —
1684 BTC24H $86K polygon Acces Control Exploit / Access Control / Improper Access Control Access Control Attacks View →
1685 Novo $86K - Oracle Issue Oracle Manipulation & Price Manipulation View →
1686 NFT Cloud $85K - Other — View →
1687 MoneyMon $85K - Other — View →
1688 Animoca Brands Metaverse $85K - Rugpull — View →
1689 Galaxy Coin $85K - Rugpull — View →
1690 xBlast $84K ethereum Hot Wallet Key Compromised — —
1691 HypurrFi $84K - Other — View →
1692 Raptor2 $84K - Rugpull — View →
1693 CBDAO $84K ethereum Rugpull — View →
1694 AssetClub $84K - Rugpull — View →
1695 2049 $82K - Rugpull — View →
1696 TITANX $82K - Rugpull — View →
1697 NeedForSpeed Finance $82K ethereum Rugpull — View →
1698 ChainGPT $82K - Rugpull — View →
1699 Finance $81K - Rugpull — View →
1700 CoinPanda_ETH $81K - Rugpull — View →

Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.

Understanding the Pattern Behind Billion-Dollar Losses

The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.

For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.

Frequently Asked Questions

How is this leaderboard ranked?

Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.

Does this include every attack type?

It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.

How can I learn to prevent these exploits?

Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.

Learn to Prevent High-Impact Smart Contract Hacks

$91B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.