Most Expensive Crypto Hacks Leaderboard

The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.

  • $91B+

    Total Value Lost

  • 3595

    Incidents Tracked

  • 141

    Chains Affected

  • 65

    $100M+ Incidents

Top 10 Biggest Hacks

Jump to full leaderboard
  1. 🥈

    Mantra

    $5.50B

  2. #4

    LuBian

    $3.50B

    bitcoin

  3. #7

    Thodex

    $2.00B

  4. #9

    Finiko

    $1.50B

  5. #10

    Bybit

    $1.40B

    ethereum

Where the Largest Losses Concentrate

Top Chains by Losses

  • ethereum $9,830M
  • bitcoin $5,404M
  • bsc $3,037M
  • solana $1,697M
  • polygon $1,539M

Top Techniques by Losses

  • Other $52,517M
  • Rugpull $15,631M
  • Private Key Compromised (Brute Force) / Weak Key Generation $3,500M
  • Safe Multisig wallet Phishing Exploit / Access Control / Signer Phishing $1,635M
  • Access Control / Hot Wallet Key Compromised $1,027M

Full Leaderboard

Showing 1751-1800 of 3595 ranked incidents

Largest Web3 incidents by USD amount lost
Rank Project Amount Lost Date Chain Technique Attack Guide Source
1751 Paribus $70K arbitrum Reentrancy Reentrancy View →
1752 IRYS AI $70K bsc Backdoor Contract — —
1753 Karastar $69K - Access Control Access Control Attacks View →
1754 Theory Craft Fames $69K - Rugpull — View →
1755 ArbShibaAI $68K - Rugpull — View →
1756 MyBitcoin $68K - Other — View →
1757 AzukiDAO $68K ethereum Replay Attack / Signature Replay / Other Replay Attacks View →
1758 Dogecoin 3.0 $68K - Rugpull — View →
1759 BabyShia $68K - Rugpull — View →
1760 Wise Lending V2 $66K arbitrum, ethereum Flashloan Exploit / Improper Access Control Access Control Attacks —
1761 MainnetSettler $66K ethereum Token Approval Abuse Access Control Attacks —
1762 Force Dao $66K ethereum Honeypot — View →
1763 Saga DAO $66K solana Access Control / Private Key Compromised Access Control Attacks View →
1764 FlyCow $65K bsc Incorrect Share Accounting — View →
1765 Hackerdao $65K bsc Flash Loan Attack / Improper Access Control Access Control Attacks —
1766 Bankroll $65K bsc Other / Arithmetic Error — View →
1767 FloorDAO $65K ethereum Other / Reward Logic Flaw — View →
1768 LightLink token $65K - Rugpull — View →
1769 Dogioh $65K - Rugpull — View →
1770 SLM Token $65K ethereum Honeypot — —
1771 AST Token $65K - Other — View →
1772 Deez Nuts $64K - Rugpull — View →
1773 Custom sAVAX Rebalancer $64K avalanche Arbitrary External Call Access Control Attacks —
1774 DEAT token $64K - Rugpull — View →
1775 Jewels $64K - Rugpull — View →
1776 Kosta Finance $63K ethereum Rugpull — —
1777 Echelon DAO $63K binance Honeypot — —
1778 Valinity $63K - Oracle Issue Oracle Manipulation & Price Manipulation View →
1779 GUIDO The Mechanics $63K - Rugpull — View →
1780 Fantom $62K - Access Control Access Control Attacks View →
1781 Meta Magic Coin $62K - Rugpull — View →
1782 Genswap $62K - Rugpull — View →
1783 ETX Infinity $62K - Rugpull — View →
1784 AES $62K bsc Rounding Error — —
1785 Carol Protocol $61K - Flash Loan Attack Flash Loan Attacks View →
1786 Strong Finance $61K - Rugpull — View →
1787 Grizzifi $61K bsc Reward Logic Flaw — —
1788 YFDash $61K ethereum Rugpull — View →
1789 MONA $61K bsc BurnAddress Accounting Exploit / Incorrect Share Accounting — View →
1790 K33pr $61K ethereum Rugpull — View →
1791 A6 Token $61K - Rugpull — View →
1792 Beamsplittr $61K - Rugpull — View →
1793 Swapnex $61K - Rugpull — View →
1794 HLG $61K - Rugpull — View →
1795 ACB $60K bsc Other / Spot Price Manipulation Oracle Manipulation & Price Manipulation View →
1796 YPT $60K - Rugpull — View →
1797 EosRoyale $60K eos Unknown — —
1798 Carillonium $59K - Rugpull — View →
1799 Rise Protocol $59K ethereum Rugpull — View →
1800 FIO Protocol $59K - Rugpull — View →

Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.

Understanding the Pattern Behind Billion-Dollar Losses

The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.

For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.

Frequently Asked Questions

How is this leaderboard ranked?

Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.

Does this include every attack type?

It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.

How can I learn to prevent these exploits?

Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.

Learn to Prevent High-Impact Smart Contract Hacks

$91B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.