Most Expensive Crypto Hacks Leaderboard

The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.

  • $91B+

    Total Value Lost

  • 3595

    Incidents Tracked

  • 141

    Chains Affected

  • 65

    $100M+ Incidents

Top 10 Biggest Hacks

Jump to full leaderboard
  1. 🥈

    Mantra

    $5.50B

  2. #4

    LuBian

    $3.50B

    bitcoin

  3. #7

    Thodex

    $2.00B

  4. #9

    Finiko

    $1.50B

  5. #10

    Bybit

    $1.40B

    ethereum

Where the Largest Losses Concentrate

Top Chains by Losses

  • ethereum $9,830M
  • bitcoin $5,404M
  • bsc $3,037M
  • solana $1,697M
  • polygon $1,539M

Top Techniques by Losses

  • Other $52,517M
  • Rugpull $15,631M
  • Private Key Compromised (Brute Force) / Weak Key Generation $3,500M
  • Safe Multisig wallet Phishing Exploit / Access Control / Signer Phishing $1,635M
  • Access Control / Hot Wallet Key Compromised $1,027M

Full Leaderboard

Showing 1851-1900 of 3595 ranked incidents

Largest Web3 incidents by USD amount lost
Rank Project Amount Lost Date Chain Technique Attack Guide Source
1851 GAME $50K - Reentrancy Reentrancy View →
1852 LW $49K bsc Other / Spot Price Manipulation Oracle Manipulation & Price Manipulation View →
1853 BAT Token $49K - Rugpull — View →
1854 e-STD $49K - Rugpull — View →
1855 User $48K - Phishing Phishing Attacks View →
1856 LAURA $48K - Other — View →
1857 AquaDAO $48K - Other — View →
1858 Rapid Set Dollar $48K ethereum Rugpull — View →
1859 Bonfire $47K bsc Phishing / Improper Access Control Access Control Attacks View →
1860 Magic $47K - Rugpull — —
1861 Weft V2 $47K radix Spot Price Manipulation Oracle Manipulation & Price Manipulation —
1862 BWR $47K - Rugpull — View →
1863 Bistroo $47K - Other — View →
1864 Cheebs $46K - Other — View →
1865 Prophet Project $46K ethereum Rugpull — View →
1866 One For The Books $46K - Rugpull — View →
1867 HashFree $46K - Rugpull — View →
1868 Hunter Doge $46K - Rugpull — View →
1869 Tableland $46K - Phishing Phishing Attacks View →
1870 LPC Token $45K bsc Other / Arithmetic Error — View →
1871 Ragnarok Online Invasion $45K bsc Access Control / Improper Access Control Access Control Attacks View →
1872 BEVO NFT $45K bsc Other / Incorrect Share Accounting — View →
1873 Cryptopia Exchange $45K multiple Access Control / Hot Wallet Key Compromised Access Control Attacks View →
1874 Sirius Token $45K - Rugpull — View →
1875 Rose Finance $45K - Flash Loan Attack Flash Loan Attacks View →
1876 ElonMVP $44K - Rugpull — View →
1877 NFT Cross Chain $44K - Rugpull — View →
1878 EC token $44K - Rugpull — View →
1879 TiFi $44K bsc Spot Price Manipulation Oracle Manipulation & Price Manipulation —
1880 ChainGPT $43K - Rugpull — View →
1881 GenomesDAO $43K - Other — View →
1882 ether.fi Liquid $43K ethereum Arbitrary External Call Access Control Attacks —
1883 Greatest Of All Time (GOAT) $43K - Rugpull — View →
1884 Stepp2p $43K bsc Unknown — —
1885 Usual $43K ethereum Arbitration Exploit / Other / Missing Input Validation — View →
1886 Stargate Finance $43K ethereum Phishing Phishing Attacks —
1887 HarryPotterObamaJustinHuobiSun $43K - Rugpull — View →
1888 DoraFactory $42K - Other — View →
1889 MOON Token $42K - Rugpull — View →
1890 Liquid Core $42K ethereum Rugpull — View →
1891 V4 Swap Router by z0r0z $42K - Access Control Access Control Attacks View →
1892 Velodrome Finance $42K optimism Other / DNS Hijack — View →
1893 Coin $42K - Rugpull — View →
1894 Leo Finance $42K ethereum Other / Infinite Mint — View →
1895 iProtocol $42K ethereum Rugpull — View →
1896 DualPools $41K bsc Flash Loan Attack / Rounding Error Flash Loan Attacks View →
1897 SLS $41K - Rugpull — View →
1898 Sorra Finance $41K ethereum Reward Logic Flaw — —
1899 ZoomerCoin $41K ethereum Flashloan Governance Attack Flash Loan Attacks —
1900 Doge Twitter Token $41K - Rugpull — View →

Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.

Understanding the Pattern Behind Billion-Dollar Losses

The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.

For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.

Frequently Asked Questions

How is this leaderboard ranked?

Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.

Does this include every attack type?

It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.

How can I learn to prevent these exploits?

Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.

Learn to Prevent High-Impact Smart Contract Hacks

$91B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.