🥇
Terra Classic
$40.00B
Most Expensive Crypto Hacks Leaderboard
The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.
-
$104B+
Total Value Lost
-
3836
Incidents Tracked
-
124
Chains Affected
-
88
$100M+ Incidents
Top 10 Biggest Hacks
Where the Largest Losses Concentrate
Top Chains by Losses
Top Techniques by Losses
Full Leaderboard
Showing 151-200 of 3836 ranked incidents
| Rank | Project | Amount Lost | Date | Chain | Technique | Attack Guide | Source |
|---|---|---|---|---|---|---|---|
| 151 | CoinDCX | $44.2M | - | Access Control / Hot Wallet Key Compromised | Access Control Attacks | View → | |
| 152 | GMX | $42.0M | - | Other | — | View → | |
| 153 | GMX V1 Perps | $42.0M | arbitrum | Re-entrancy Exploit / Reentrancy | Reentrancy | View → | |
| 154 | Binance | $41.7M | bitcoin | Access Control / Hot Wallet Key Compromised | Access Control Attacks | View → | |
| 155 | SwissBorg | $41.5M | solana | Third-party API compromise / Other / API Key Compromised | — | View → | |
| 156 | Stake.com | $41.4M | bsc, ethereum, polygon | Private Key Compromised (Unknown Method) / Other / Hot Wallet Key Compromised | Access Control Attacks | View → | |
| 157 | Bo Shen Wallet Hack | $41.1M | - | Access Control | Access Control Attacks | View → | |
| 158 | Step Finance | $40.0M | solana | Private Key Compromised / Access Control | Access Control Attacks | View → | |
| 159 | Grim Finance | $40.0M | fantom | Flashloan Reentrancy Attack / Reentrancy | Flash Loan Attacks | View → | |
| 160 | Coinrail | $40.0M | ethereum | Access Control / Improper Access Control | Access Control Attacks | View → | |
| 161 | Digging for Gold | $39.0M | - | - | — | View → | |
| 162 | Alpha Finance | $37.5M | ethereum | Flashloan Pool Shares Exploit / Flash Loan Attack / Borrow Logic Flaw | Flash Loan Attacks | View → | |
| 163 | CoinsPaid | $37.3M | - | Social Engineering / Other / Impersonation Scam | Phishing Attacks | View → | |
| 164 | Humanity Protocol | $36.4M | - | - | — | View → | |
| 165 | Cream Finance | $36.2M | - | Other | — | View → | |
| 166 | Upbit | $36.0M | solana | Private Key Compromised / Other / Malware | Access Control Attacks | View → | |
| 167 | IRA Financial / Gemini | $36.0M | ethereum | API Key Compromised | — | — | |
| 168 | IRA Financial | $36.0M | - | Other | — | View → | |
| 169 | Vee Finance | $36.0M | avalanche | Flashloan Price Oracle Attack / Other / Spot Price Manipulation | Flash Loan Attacks | View → | |
| 170 | Scream | $35.0M | - | Oracle Issue | Oracle Manipulation & Price Manipulation | View → | |
| 171 | Crypto.com | $34.4M | bitcoin, ethereum | Private Key Compromised (Unknown Method) / Access Control / Session Key Compromised | Access Control Attacks | View → | |
| 172 | Parity | $34.0M | - | Other | — | View → | |
| 173 | Harvest Finance | $33.8M | ethereum | Flashloan Price Oracle Attack / Flash Loan Attack / Spot Price Manipulation | Flash Loan Attacks | View → | |
| 174 | Ackerman Ponzi | $33.0M | - | Other | — | View → | |
| 175 | Humanity | $32.0M | bsc, ethereum | Private Key Compromised | Access Control Attacks | — | |
| 176 | DEFI100 | $32.0M | - | Rugpull | — | View → | |
| 177 | Meerkat Finance | $32.0M | binance, bsc | Drained Contracts / Rugpull / Admin Drain | — | View → | |
| 178 | Bitpoint | $32.0M | bitcoin, ethereum, litecoin, xrp | Access Control / Key Leaked via Infrastructure | Access Control Attacks | View → | |
| 179 | Fintoch | $31.7M | - | Rugpull | — | View → | |
| 180 | MonoX | $31.4M | ethereum, polygon | Swap Function Exploit / Other / Swap Logic Flaw | — | View → | |
| 181 | Humanity Protocol | $31.0M | - | Access Control | Access Control Attacks | View → | |
| 182 | Bithumb | $31.0M | ethereum | Access Control / Key Leaked via Infrastructure | Access Control Attacks | View → | |
| 183 | Tether | $31.0M | bitcoin | Other / Private Key Compromised | Access Control Attacks | View → | |
| 184 | Spartan Protocol | $30.5M | binance | Flash Loan Attack | Flash Loan Attacks | View → | |
| 185 | Spartan | $30.5M | bsc | Flashloan Pool Shares Exploit / Incorrect Share Accounting | Flash Loan Attacks | View → | |
| 186 | SnowdogDAO | $30.0M | - | Rugpull | — | View → | |
| 187 | Parity | $30.0M | ethereum | Uninitialized Proxy | Access Control Attacks | — | |
| 188 | Herencia Artifex | $29.6M | - | Other | — | View → | |
| 189 | Transit Swap | $28.9M | bsc, ethereum | Transfer Logic Exploit / Missing Input Validation | — | View → | |
| 190 | Transit Swap | $28.9M | - | Other | — | View → | |
| 191 | Deribit Exchange | $28.3M | - | Access Control | Access Control Attacks | View → | |
| 192 | BigONE | $28.0M | bitcoin, bsc, ethereum, solana, tron | Access Control / Supply Chain Attack | Access Control Attacks | View → | |
| 193 | Deribit | $28.0M | - | Private Key Compromised (Unknown Method) / Hot Wallet Key Compromised | Access Control Attacks | View → | |
| 194 | Aave V3 | $27.8M | ethereum | CAPO Oracle Misconfiguration / Oracle Misconfiguration | Oracle Manipulation & Price Manipulation | View → | |
| 195 | Wintermute | $27.6M | - | Other | — | View → | |
| 196 | Wintermute | $27.6M | optimism | Cross Chain Multisig Deployment Exploit / Improper Access Control | Access Control Attacks | View → | |
| 197 | Paid Network | $27.4M | ethereum | Infinite Mint and Dump / Other / Infinite Mint | — | View → | |
| 198 | Bitmarket | $27.1M | - | Rugpull | — | View → | |
| 199 | Binance User | $27.1M | - | Access Control | Access Control Attacks | View → | |
| 200 | Penpie | $27.0M | ethereum | Reentrancy | Reentrancy | View → |
Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.
Understanding the Pattern Behind Billion-Dollar Losses
The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.
For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.
Frequently Asked Questions
How is this leaderboard ranked?
Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.
Does this include every attack type?
It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.
How can I learn to prevent these exploits?
Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.
Learn to Prevent High-Impact Smart Contract Hacks
$104B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.