Most Expensive Crypto Hacks Leaderboard

The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.

  • $101B+

    Total Value Lost

  • 3300

    Incidents Tracked

  • 74

    Chains Affected

  • 80

    $100M+ Incidents

Top 10 Biggest Hacks

Jump to full leaderboard
  1. 🥈

    Mantra

    $5.50B

  2. #4

    LuBian

    $3.50B

    bitcoin

  3. #8

    Thodex

    $2.00B

  4. #10

    Finiko

    $1.50B

Where the Largest Losses Concentrate

Top Chains by Losses

  • ethereum $8,051M
  • bitcoin $4,415M
  • bsc $2,654M
  • solana $1,605M
  • polygon $1,512M

Top Techniques by Losses

  • Other $61,553M
  • Rugpull $15,684M
  • Access Control $4,030M
  • Private Key Compromised (Brute Force) $3,500M
  • Safe Multisig wallet Phishing Exploit / Access Control $1,635M

Full Leaderboard

Showing 2001–2050 of 3300 ranked incidents

Largest Web3 incidents by USD amount lost
Rank Project Amount Lost Date Chain Technique Attack Guide Source
2001 Gh1z.finance $2K ethereum Rugpull View →
2002 Sauron $2K ethereum Honeypot View →
2003 Keep3rX.finance $2K ethereum Rugpull View →
2004 Mother of All Ponzis $1K ethereum Rugpull View →
2005 L4CK $1K ethereum Rugpull
2006 Bloody Finance $1K ethereum Rugpull View →
2007 Ba5ic finance $1K ethereum Rugpull View →
2008 Horus Finance $991 ethereum Honeypot View →
2009 Maxliq.ml $898 ethereum Rugpull View →
2010 Farmland Network $892 ethereum Rugpull View →
2011 MetaMoonMars $866 - Other View →
2012 Sonic Swap $824 ethereum Rugpull View →
2013 AutobotDefi $797 - Rugpull View →
2014 Trump Swap $795 ethereum Honeypot View →
2015 Enjo $762 ethereum Rugpull View →
2016 CAP5 $760 ethereum Rugpull
2017 Gaia protocol $598 ethereum Rugpull View →
2018 Potatos Finance $569 binance Rugpull View →
2019 Waronrug degen token $555 ethereum Rugpull
2020 DAOstreetbets $548 binance Honeypot View →
2021 SAILSAN $426 ethereum Rugpull
2022 GoldenFarm $396 binance Rugpull View →
2023 BOMBHEAD token $342 ethereum Honeypot
2024 Dswap $330 ethereum Rugpull
2025 Jin Finance $277 ethereum Honeypot View →
2026 Syscoin - - View →
2027 Neutrl ethereum DNS Hijacking Attack View →
2028 DGLD base Infinite Mint and Dump View →
2029 Panoptic V1.1 base, ethereum, unichain - View →
2030 Tectonic cronos Price Oracle Attack Oracle Manipulation & Price Manipulation View →
2031 Ambient ethereum Domain Hijack View →
2032 Rivus DAO ethereum Third-party Dev Backdoor Exploit View →
2033 DeFi Fake Tokens - Other
2034 Harbor Protocol comdex - View →
2035 ElonDoge binance Honeypot View →
2036 Swerve Finance - Other View →
2037 Umami finance - Other View →
2038 Spark ethereum Honeypot View →
2039 Golden Moon binance Honeypot View →
2040 Gemini - Phishing Phishing Attacks View →
2041 Ratio Finance solana Private Key Compromised (Unknown Method) Access Control Attacks View →
2042 Fairmoon binance Honeypot View →
2043 GeoDB - Other View →
2044 Xave Finance - Other View →
2045 Vauld - Other View →
2046 GoldenEsse binance Honeypot View →
2047 Transaction Control Protocol ethereum Honeypot View →
2048 Ebuy Finance binance Honeypot View →
2049 TreasureDAO - Other View →
2050 StaticFire binance Honeypot View →

Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.

Understanding the Pattern Behind Billion-Dollar Losses

The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.

For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.

Frequently Asked Questions

How is this leaderboard ranked?

Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.

Does this include every attack type?

It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.

How can I learn to prevent these exploits?

Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.

Learn to Prevent High-Impact Smart Contract Hacks

$101B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.