Most Expensive Crypto Hacks Leaderboard

The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.

  • $101B+

    Total Value Lost

  • 3299

    Incidents Tracked

  • 74

    Chains Affected

  • 80

    $100M+ Incidents

Top 10 Biggest Hacks

Jump to full leaderboard
  1. 🥈

    Mantra

    $5.50B

  2. #4

    LuBian

    $3.50B

    bitcoin

  3. #8

    Thodex

    $2.00B

  4. #10

    Finiko

    $1.50B

Where the Largest Losses Concentrate

Top Chains by Losses

  • ethereum $8,051M
  • bitcoin $4,415M
  • bsc $2,657M
  • solana $1,605M
  • polygon $1,512M

Top Techniques by Losses

  • Other $61,553M
  • Rugpull $15,684M
  • Access Control $4,030M
  • Private Key Compromised (Brute Force) $3,500M
  • Safe Multisig wallet Phishing Exploit / Access Control $1,635M

Full Leaderboard

Showing 1801–1850 of 3299 ranked incidents

Largest Web3 incidents by USD amount lost
Rank Project Amount Lost Date Chain Technique Attack Guide Source
1801 Kickboxer Tate $33K - Rugpull View →
1802 SpaceID $33K - Rugpull View →
1803 Zodiac Credit $33K - Rugpull View →
1804 KHABY Fan Token $33K - Rugpull View →
1805 Moonco.in $33K - Rugpull View →
1806 MTI Finance $32K ethereum Rugpull View →
1807 FlyghtLite $32K - Rugpull View →
1808 AutoTrade Finance $32K ethereum Honeypot View →
1809 Nemo Finance $32K ethereum Honeypot View →
1810 My Farm Pet $31K - Flash Loan Attack Flash Loans Attacks View →
1811 3913 token $31K - Flash Loan Attack Flash Loans Attacks View →
1812 Reaper Finance $31K ethereum Rugpull View →
1813 n00dleswap $31K - Reentrancy Reentrancy View →
1814 Apollo Swap $31K ethereum Honeypot View →
1815 BTC20Token $30K - Flash Loan Attack Flash Loans Attacks View →
1816 NONAME $30K ethereum Rugpull
1817 WOLF Protocol $30K ethereum Rugpull View →
1818 QuillDex $30K - Rugpull View →
1819 APPLE $30K - Rugpull View →
1820 Revert Finance $30K - Abandoned View →
1821 DOXED $30K - Rugpull View →
1822 Doodled Dragons $30K - Rugpull View →
1823 Unidark $30K ethereum Rugpull View →
1824 DiceSwap $30K binance Rugpull View →
1825 HermesVault $30K - Other View →
1826 wDAO EON $29K - Flash Loan Attack Flash Loans Attacks View →
1827 RETAWATCH $29K - Rugpull View →
1828 Vista Finance $29K - Flash Loan Attack Flash Loans Attacks View →
1829 YYS $29K - Flash Loan Attack Flash Loans Attacks View →
1830 Yzer Token $29K - Rugpull View →
1831 Dragonswap $29K binance Rugpull View →
1832 ASKACR Token $29K - Flash Loan Attack Flash Loans Attacks View →
1833 ProjectX $28K - Rugpull View →
1834 MOJO $28K - Rugpull View →
1835 Web3Memes $28K - Rugpull View →
1836 QWCF $27K - Rugpull View →
1837 LocalBitcoins $27K - Other View →
1838 UN Token $27K - Flash Loan Attack Flash Loans Attacks View →
1839 DARK DEFI $27K ethereum Honeypot View →
1840 Bondly Finance $26K ethereum Honeypot
1841 Zenith Finance $26K ethereum Rugpull View →
1842 Space Godzilla $26K - Flash Loan Attack Flash Loans Attacks View →
1843 SCAT $26K - Rugpull View →
1844 Dreams Come True $26K - Rugpull View →
1845 WinPlay $26K ethereum Rugpull View →
1846 CredixFinance $26K - Rugpull View →
1847 Saxon James Musk $26K - Rugpull View →
1848 TIM3 $25K ethereum Rugpull
1849 Horizon Finance $25K binance Rugpull View →
1850 PDR $25K - Rugpull View →

Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.

Understanding the Pattern Behind Billion-Dollar Losses

The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.

For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.

Frequently Asked Questions

How is this leaderboard ranked?

Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.

Does this include every attack type?

It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.

How can I learn to prevent these exploits?

Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.

Learn to Prevent High-Impact Smart Contract Hacks

$101B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.