Most Expensive Crypto Hacks Leaderboard

The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.

  • $91B+

    Total Value Lost

  • 3595

    Incidents Tracked

  • 141

    Chains Affected

  • 65

    $100M+ Incidents

Top 10 Biggest Hacks

Jump to full leaderboard
  1. 🥈

    Mantra

    $5.50B

  2. #4

    LuBian

    $3.50B

    bitcoin

  3. #7

    Thodex

    $2.00B

  4. #9

    Finiko

    $1.50B

  5. #10

    Bybit

    $1.40B

    ethereum

Where the Largest Losses Concentrate

Top Chains by Losses

  • ethereum $9,830M
  • bitcoin $5,404M
  • bsc $3,037M
  • solana $1,697M
  • polygon $1,539M

Top Techniques by Losses

  • Other $52,517M
  • Rugpull $15,631M
  • Private Key Compromised (Brute Force) / Weak Key Generation $3,500M
  • Safe Multisig wallet Phishing Exploit / Access Control / Signer Phishing $1,635M
  • Access Control / Hot Wallet Key Compromised $1,027M

Full Leaderboard

Showing 1801-1850 of 3595 ranked incidents

Largest Web3 incidents by USD amount lost
Rank Project Amount Lost Date Chain Technique Attack Guide Source
1801 RIFT Token $59K - Rugpull — View →
1802 CoW $59K ethereum Improper Access Control Access Control Attacks —
1803 MintRisesPrices $59K bsc Reentrancy Reentrancy —
1804 Arbitrum $59K - Rugpull — View →
1805 Openfabric AI $59K - Rugpull — View →
1806 Floki Inu $59K - Flash Loan Attack Flash Loan Attacks View →
1807 Victor the Fortune $58K - Other — View →
1808 SSPF $58K - Rugpull — View →
1809 NewDex $58K eos Infinite Mint — —
1810 BTC Guild $58K - Other — View →
1811 The Honest Ventures $58K - Other — View →
1812 MU&MUG $57K avalanche Spot Price Manipulation Oracle Manipulation & Price Manipulation —
1813 TrustPad $56K - Rugpull — View →
1814 Poz finance $56K binance Rugpull — View →
1815 dTRINITY $56K sonic Improper Access Control Access Control Attacks —
1816 Aave $56K ethereum Other / Arbitrary External Call Access Control Attacks View →
1817 Smart Bank Token $56K - Flash Loan Attack Flash Loan Attacks View →
1818 SQUID GAME $56K - Rugpull — View →
1819 Pike Finance $55K - Rugpull — View →
1820 MUBARA $55K - Phishing Phishing Attacks View →
1821 Nody $55K - Rugpull — View →
1822 Eden Network $54K - Access Control Access Control Attacks View →
1823 BNBpay $54K - Rugpull — View →
1824 SHADE INU Token $54K - Rugpull — —
1825 Symbiogenesis $54K - Rugpull — View →
1826 StarMan $53K - Rugpull — View →
1827 EspressoBot $53K - Rugpull — View →
1828 Bitcoin7 $53K - Other — View →
1829 Pythia $53K ethereum Reentrancy Reentrancy —
1830 GEMDAO $53K - Rugpull — View →
1831 BabyElon $53K - Rugpull — —
1832 Satt King $53K - Abandoned — View →
1833 EI Risitas $52K - Rugpull — View →
1834 Crypto DAO $52K bsc Missing Access Control Access Control Attacks View →
1835 Juicebox V3 $52K ethereum Missing Input Validation — —
1836 Platypus Finance $52K avalanche Reentrancy / Withdrawal Logic Flaw Reentrancy View →
1837 AORcoin $52K - Rugpull — View →
1838 Cornerchain $51K - Rugpull — —
1839 Doge Vault $51K - Other — View →
1840 ValentineFloki $51K - Honeypot — —
1841 Bit LC Inc. $51K - Access Control Access Control Attacks View →
1842 ULME Token $51K bsc Flash Loan Attack / Improper Access Control Access Control Attacks View →
1843 LV Metaverse $51K - Rugpull — View →
1844 Nimiq $50K polygon Signature Verification Flaw — —
1845 JB $50K bsc Spot Price Manipulation Oracle Manipulation & Price Manipulation —
1846 Thetanuts Finance $50K ethereum First Depositor Attack — —
1847 Revert Lend $50K base Staked Collateral Exploit / Other / Staking Logic Flaw Access Control Attacks View →
1848 Crown Token $50K - Rugpull — View →
1849 AGD $50K - Rugpull — View →
1850 Poloniex $50K bitcoin Withdrawal Logic Flaw / Other — View →

Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.

Understanding the Pattern Behind Billion-Dollar Losses

The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.

For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.

Frequently Asked Questions

How is this leaderboard ranked?

Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.

Does this include every attack type?

It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.

How can I learn to prevent these exploits?

Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.

Learn to Prevent High-Impact Smart Contract Hacks

$91B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.