Most Expensive Crypto Hacks Leaderboard

The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.

  • $91B+

    Total Value Lost

  • 3595

    Incidents Tracked

  • 141

    Chains Affected

  • 65

    $100M+ Incidents

Top 10 Biggest Hacks

Jump to full leaderboard
  1. 🥈

    Mantra

    $5.50B

  2. #4

    LuBian

    $3.50B

    bitcoin

  3. #7

    Thodex

    $2.00B

  4. #9

    Finiko

    $1.50B

  5. #10

    Bybit

    $1.40B

    ethereum

Where the Largest Losses Concentrate

Top Chains by Losses

  • ethereum $9,830M
  • bitcoin $5,404M
  • bsc $3,037M
  • solana $1,697M
  • polygon $1,539M

Top Techniques by Losses

  • Other $52,517M
  • Rugpull $15,631M
  • Private Key Compromised (Brute Force) / Weak Key Generation $3,500M
  • Safe Multisig wallet Phishing Exploit / Access Control / Signer Phishing $1,635M
  • Access Control / Hot Wallet Key Compromised $1,027M

Full Leaderboard

Showing 1701-1750 of 3595 ranked incidents

Largest Web3 incidents by USD amount lost
Rank Project Amount Lost Date Chain Technique Attack Guide Source
1701 MEMEPAD $80K - Rugpull — View →
1702 OracleBNB $80K - Rugpull — View →
1703 four.meme $80K bsc Improper Access Control Access Control Attacks —
1704 Matez $80K bsc Arithmetic Error — —
1705 YAYO $80K - Rugpull — View →
1706 Roe Finance $80K ethereum, polygon Flashloan Pool Shares Exploit / Oracle Issue / Spot Price Manipulation Flash Loan Attacks View →
1707 BABYFIDO $79K - Rugpull — View →
1708 DKP Token $79K bsc Other / Spot Price Manipulation Oracle Manipulation & Price Manipulation View →
1709 Memecoin $79K - Rugpull — View →
1710 Cupid $79K - Flash Loan Attack Flash Loan Attacks —
1711 Pirate x Pirate $78K bsc Access Control / Improper Access Control Access Control Attacks View →
1712 BeatXswap $78K bsc Spot Price Manipulation Oracle Manipulation & Price Manipulation —
1713 OracleSwapToken $77K ethereum Honeypot — —
1714 Zodiac Credit $77K - Rugpull — View →
1715 Star Swap $77K ethereum Rugpull — —
1716 Sakura DeFi $76K ethereum Rugpull — View →
1717 Cellframe Network $76K bsc Flash Loan Attack / Swap Logic Flaw Flash Loan Attacks View →
1718 ZUCK $76K - Rugpull — View →
1719 Nimbus DAO $76K bsc Flash Loan Attack / Reward Logic Flaw Flash Loan Attacks View →
1720 Coin Merge $76K - Rugpull — —
1721 Doodle Monkey $76K - Rugpull — View →
1722 Goldbank Finance $75K - Rugpull — View →
1723 HGM, AGSC $75K - Phishing Phishing Attacks View →
1724 Bio Farm $73K ethereum Rugpull — View →
1725 Exvault Finance $73K ethereum Rugpull — View →
1726 Spectra Finance $73K ethereum Arbitrary External Call Access Control Attacks —
1727 Hepton token $73K - Rugpull — View →
1728 GameFi $73K - Rugpull — View →
1729 EOSCast $73K eos Infinite Mint — —
1730 Ordinal DEX $73K - Rugpull — View →
1731 Julia $72K - Rugpull — View →
1732 YFFC $72K ethereum Rugpull — View →
1733 Kipseli $72K base Missing Input Validation — —
1734 SmartCredit $72K ethereum Unknown — —
1735 BNQ $72K - Rugpull — View →
1736 Equalizer Finance $72K bsc, ethereum, optimism, polygon Vault accounting flaw Flash Loan Attacks View →
1737 MALT $72K - Other — View →
1738 Dream Health Chain $72K bsc Reward Logic Flaw — —
1739 Solid Protocol $72K ethereum Rugpull — View →
1740 SHOK $71K - Rugpull — View →
1741 TSUKA $71K - Rugpull — View →
1742 UniTarget $71K ethereum Rugpull — View →
1743 Snowflake Floki $70K - Honeypot — View →
1744 NovaMind $70K - Rugpull — View →
1745 BabyShiba2.0 $70K - Rugpull — View →
1746 Arbitrum token $70K - Rugpull — View →
1747 OMNI Real Estate $70K bsc Other / Missing Input Validation — View →
1748 BTC-por $70K - Rugpull — View →
1749 Llamascape $70K ethereum Signer Phishing Phishing Attacks —
1750 Bitcoin Gold $70K bitcoin gold Validator Key Compromised — —

Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.

Understanding the Pattern Behind Billion-Dollar Losses

The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.

For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.

Frequently Asked Questions

How is this leaderboard ranked?

Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.

Does this include every attack type?

It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.

How can I learn to prevent these exploits?

Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.

Learn to Prevent High-Impact Smart Contract Hacks

$91B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.