Most Expensive Crypto Hacks Leaderboard

The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.

  • $101B+

    Total Value Lost

  • 3300

    Incidents Tracked

  • 74

    Chains Affected

  • 80

    $100M+ Incidents

Top 10 Biggest Hacks

Jump to full leaderboard
  1. 🥈

    Mantra

    $5.50B

  2. #4

    LuBian

    $3.50B

    bitcoin

  3. #8

    Thodex

    $2.00B

  4. #10

    Finiko

    $1.50B

Where the Largest Losses Concentrate

Top Chains by Losses

  • ethereum $8,051M
  • bitcoin $4,415M
  • bsc $2,654M
  • solana $1,605M
  • polygon $1,512M

Top Techniques by Losses

  • Other $61,553M
  • Rugpull $15,684M
  • Access Control $4,030M
  • Private Key Compromised (Brute Force) $3,500M
  • Safe Multisig wallet Phishing Exploit / Access Control $1,635M

Full Leaderboard

Showing 1951–2000 of 3300 ranked incidents

Largest Web3 incidents by USD amount lost
Rank Project Amount Lost Date Chain Technique Attack Guide Source
1951 BabyDAO $8K - Rugpull View →
1952 K.O.N.G Token $7K ethereum Rugpull View →
1953 Ren Swap $7K ethereum Honeypot View →
1954 Impermax $7K - Other View →
1955 Rfyield Finance $7K ethereum Rugpull View →
1956 Polynomial Protocol $7K - Other View →
1957 FlippazOne $7K - Access Control Access Control Attacks
1958 Rubixi $7K - Access Control Access Control Attacks View →
1959 CHERRY $7K ethereum Honeypot View →
1960 ELLA $6K ethereum Rugpull View →
1961 Ohohoh.io $6K ethereum Rugpull View →
1962 Bitscalper $6K - Rugpull View →
1963 Douyea $6K ethereum Honeypot View →
1964 UnlimitedBase Finance $6K ethereum Rugpull View →
1965 Foxy.farm $6K ethereum Rugpull View →
1966 Harvester Network $6K ethereum Honeypot View →
1967 CREW $6K ethereum Rugpull View →
1968 dxHub $5K ethereum Rugpull View →
1969 Veil Cash $5K base misconfigured Groth16 verifier View →
1970 Arcade $5K - Access Control Access Control Attacks View →
1971 BTB Token $5K - Flash Loan Attack Flash Loans Attacks View →
1972 Banksy $5K - Rugpull View →
1973 Rotex $5K ethereum Rugpull View →
1974 Jointventure Finance $4K ethereum Rugpull
1975 LocalBitcoins $4K - Access Control Access Control Attacks View →
1976 ShabuVault $4K ethereum Rugpull View →
1977 Overbase Finance $4K ethereum Rugpull View →
1978 FutureBase.Finance $4K ethereum Rugpull View →
1979 PUMP $4K ethereum Rugpull
1980 Groot.finance $4K ethereum Rugpull View →
1981 GrowBase Finance $4K ethereum Rugpull View →
1982 Monster Chain $4K ethereum Honeypot
1983 Binary Protocol $4K ethereum Rugpull View →
1984 Contribute Protocol $4K ethereum Rugpull
1985 Delicacy DeFi $4K binance Rugpull View →
1986 Peapods Finance $4K - Other View →
1987 iBLUE $3K ethereum Rugpull
1988 Reflect3 Finance $3K ethereum Rugpull View →
1989 Deriswap $3K ethereum Rugpull View →
1990 TRBAS3 $3K ethereum Rugpull View →
1991 Lootx Finance $3K ethereum Honeypot View →
1992 EASYPump $3K ethereum Honeypot View →
1993 Vegetables Finance $3K ethereum Rugpull
1994 burn12 $3K ethereum Rugpull
1995 Q DAO Governance token v2.0 $3K binance Honeypot Dao Governance Attacks View →
1996 K3psav.Finance $3K ethereum Rugpull View →
1997 x20 finance $3K ethereum Rugpull View →
1998 Keep3r.info $2K ethereum Honeypot View →
1999 House of paper $2K ethereum Honeypot View →
2000 Devilishburning Farm $2K ethereum Rugpull View →

Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.

Understanding the Pattern Behind Billion-Dollar Losses

The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.

For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.

Frequently Asked Questions

How is this leaderboard ranked?

Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.

Does this include every attack type?

It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.

How can I learn to prevent these exploits?

Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.

Learn to Prevent High-Impact Smart Contract Hacks

$101B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.