Most Expensive Crypto Hacks Leaderboard

The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.

  • $91B+

    Total Value Lost

  • 3595

    Incidents Tracked

  • 141

    Chains Affected

  • 65

    $100M+ Incidents

Top 10 Biggest Hacks

Jump to full leaderboard
  1. 🥈

    Mantra

    $5.50B

  2. #4

    LuBian

    $3.50B

    bitcoin

  3. #7

    Thodex

    $2.00B

  4. #9

    Finiko

    $1.50B

  5. #10

    Bybit

    $1.40B

    ethereum

Where the Largest Losses Concentrate

Top Chains by Losses

  • ethereum $9,830M
  • bitcoin $5,404M
  • bsc $3,037M
  • solana $1,697M
  • polygon $1,539M

Top Techniques by Losses

  • Other $52,517M
  • Rugpull $15,631M
  • Private Key Compromised (Brute Force) / Weak Key Generation $3,500M
  • Safe Multisig wallet Phishing Exploit / Access Control / Signer Phishing $1,635M
  • Access Control / Hot Wallet Key Compromised $1,027M

Full Leaderboard

Showing 1901-1950 of 3595 ranked incidents

Largest Web3 incidents by USD amount lost
Rank Project Amount Lost Date Chain Technique Attack Guide Source
1901 Midgets Token $41K - Rugpull — View →
1902 Mango Inu $40K - Rugpull — View →
1903 StarFinancial $40K - Rugpull — —
1904 Asterix $40K ethereum Token Approval Abuse Access Control Attacks —
1905 DIMO $40K ethereum Private Key Compromised / Access Control / Deployer Key Compromised Access Control Attacks View →
1906 MotherOfAllMemes $40K - Rugpull — View →
1907 PCORE $40K - Rugpull — View →
1908 Lottery Swap $40K - Rugpull — View →
1909 Block Chain Games $40K - Rugpull — View →
1910 TheCatWorld $39K - Rugpull — View →
1911 DAO ventures $39K - Other — View →
1912 EDAO $39K - Rugpull — View →
1913 Friendchips.tech $39K - Rugpull — View →
1914 Trojan Wallet $39K - Other — View →
1915 LiveArtX $39K ethereum Access Control / Hot Wallet Key Compromised Access Control Attacks View →
1916 Galaxy DeFi $39K ethereum Honeypot — View →
1917 Pepe Trump $38K - Rugpull — View →
1918 Dracula $38K - Rugpull — View →
1919 Unlock Protocol $38K - Other — View →
1920 MystenLabs $38K - Rugpull — View →
1921 OptionRoom $38K - Other — View →
1922 SpankChain $38K ethereum Reentrancy Reentrancy —
1923 RAIDEN GOD Thunder $38K - Rugpull — View →
1924 Mars Farm $38K binance Rugpull — View →
1925 Mosca2 $38K bsc Incorrect Share Accounting — —
1926 Lets Go Farming Token $37K - Rugpull — —
1927 BitPaid $37K - Rugpull — View →
1928 EXcommunity $37K bsc Unknown — —
1929 Hyperliquid $37K arbitrum CEX Price Manipulation Attack / Risk Parameter Abuse Oracle Manipulation & Price Manipulation View →
1930 Ownly $37K bsc Reentrancy / Withdrawal Logic Flaw Reentrancy View →
1931 ANT Token $36K - Rugpull — View →
1932 Neutra Finance $36K arbitrum Spot Price Manipulation Oracle Manipulation & Price Manipulation —
1933 Orbit Swap $36K binance Rugpull — View →
1934 LunaFI $36K polygon Other / Reward Logic Flaw — View →
1935 EGD Finance $36K bsc Spot Price Manipulation Oracle Manipulation & Price Manipulation —
1936 Bitcoin BSC $36K - Rugpull — View →
1937 Solv3 network $36K ethereum Rugpull — View →
1938 DoinGud $35K polygon Swap Logic Flaw — —
1939 Cryptoger Club $35K - Rugpull — View →
1940 SAUDI Token $35K - Rugpull — View →
1941 LGT $35K - Rugpull — View →
1942 Skate Metaverse $35K - Rugpull — View →
1943 Hype Bet $35K ethereum Rugpull — View →
1944 DG $34K - Rugpull — View →
1945 OKO TOKEN $34K ethereum Honeypot — View →
1946 Void.Cash $34K - Rugpull — View →
1947 Holy Trinity $34K ethereum Rugpull — View →
1948 AIRWA $34K bsc Other / Improper Access Control Access Control Attacks View →
1949 JokInTheBox $34K ethereum Withdrawal Logic Flaw — —
1950 Iwr token $34K - Rugpull — View →

Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.

Understanding the Pattern Behind Billion-Dollar Losses

The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.

For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.

Frequently Asked Questions

How is this leaderboard ranked?

Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.

Does this include every attack type?

It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.

How can I learn to prevent these exploits?

Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.

Learn to Prevent High-Impact Smart Contract Hacks

$91B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.