Most Expensive Crypto Hacks Leaderboard

The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.

  • $91B+

    Total Value Lost

  • 3595

    Incidents Tracked

  • 141

    Chains Affected

  • 65

    $100M+ Incidents

Top 10 Biggest Hacks

Jump to full leaderboard
  1. 🥈

    Mantra

    $5.50B

  2. #4

    LuBian

    $3.50B

    bitcoin

  3. #7

    Thodex

    $2.00B

  4. #9

    Finiko

    $1.50B

  5. #10

    Bybit

    $1.40B

    ethereum

Where the Largest Losses Concentrate

Top Chains by Losses

  • ethereum $9,830M
  • bitcoin $5,404M
  • bsc $3,037M
  • solana $1,697M
  • polygon $1,539M

Top Techniques by Losses

  • Other $52,517M
  • Rugpull $15,631M
  • Private Key Compromised (Brute Force) / Weak Key Generation $3,500M
  • Safe Multisig wallet Phishing Exploit / Access Control / Signer Phishing $1,635M
  • Access Control / Hot Wallet Key Compromised $1,027M

Full Leaderboard

Showing 2101-2150 of 3595 ranked incidents

Largest Web3 incidents by USD amount lost
Rank Project Amount Lost Date Chain Technique Attack Guide Source
2101 ROBOT SHIB $14K - Rugpull — View →
2102 OKX NFT Aggregator $14K bsc Access Control Exploit / Improper Access Control Access Control Attacks View →
2103 Convex Finance $14K ethereum Other / DNS Hijack — View →
2104 50BTC $14K - Other — View →
2105 Numbers Protocol $14K ethereum Other / Bridge Logic Flaw — View →
2106 Fractal Protocol $14K arbitrum Reentrancy Reentrancy —
2107 HireVibes AirDropsDAC $14K eos Private Key Compromised Access Control Attacks —
2108 DeriTrade $13K - Rugpull — View →
2109 Alexa $13K - Other — View →
2110 Twerk Finance $13K ethereum Rugpull — View →
2111 MicDao $13K bsc Spot Price Manipulation Oracle Manipulation & Price Manipulation —
2112 AUR Protocol $13K bsc Improper Access Control Access Control Attacks —
2113 sDAO $13K bsc Unknown — —
2114 Hypechill fund $13K ethereum Rugpull — View →
2115 X319 $13K bsc Improper Access Control Access Control Attacks —
2116 Tranquility Defi $13K ethereum Rugpull — View →
2117 ChaddyFinance $13K binance Rugpull — View →
2118 Whale Loans $12K - Other — View →
2119 Lixir Finance $12K ethereum Signature Verification Flaw — —
2120 BBX Token $12K bsc Other / Spot Price Manipulation Oracle Manipulation & Price Manipulation View →
2121 JHY Token $12K binance Incorrect Share Accounting — —
2122 XSD Token $12K - Logic / AMM invariant manipulation using flash-loan funding Flash Loan Attacks View →
2123 Bitcoin Syndicate $12K - Access Control Access Control Attacks View →
2124 RFbtc $12K ethereum Rugpull — View →
2125 GMT $12K - Rugpull — —
2126 Mure $12K ethereum Signature Verification Flaw — —
2127 Fractal Defi $12K ethereum Rugpull — View →
2128 D4ppdao Token $12K ethereum Rugpull — View →
2129 JohnLennonC0IN $11K - Rugpull — View →
2130 OceanLifeToken $11K - Flash Loan Attack Flash Loan Attacks View →
2131 Tenderize V2 $11K ethereum Proxy Upgrade Skim / Unknown — View →
2132 GPU.NET $11K ethereum Unknown — —
2133 PulldogSwap $11K binance Honeypot — View →
2134 WhaleBit $10K polygon Spot Price Manipulation Oracle Manipulation & Price Manipulation —
2135 SAV3R $10K ethereum Rugpull — View →
2136 Bing Swap $10K binance Rugpull — View →
2137 NFTG $10K bsc Improper Access Control Access Control Attacks —
2138 ALP $10K bsc Improper Access Control Access Control Attacks —
2139 The Onigiri Neko $10K - Rugpull — View →
2140 Indexed Finance $10K ethereum Swap Logic Flaw — —
2141 Fake DAI Token $10K - Other — View →
2142 Gooniez Gang $10K - Other — View →
2143 SuperMarioBros $10K ethereum Rugpull — View →
2144 Set Protocol $10K ethereum TOCTOU Valuation / Malicious Hook Reentrancy View →
2145 Focus $10K ethereum Rugpull — View →
2146 Mantle $10K ethereum Rugpull — View →
2147 EOS.WIN $9K eos Unknown — —
2148 Saturn $9K bsc Spot Price Manipulation Oracle Manipulation & Price Manipulation —
2149 Vadia Finance $9K ethereum Rugpull — View →
2150 Reflation $9K ethereum Rugpull — —

Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.

Understanding the Pattern Behind Billion-Dollar Losses

The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.

For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.

Frequently Asked Questions

How is this leaderboard ranked?

Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.

Does this include every attack type?

It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.

How can I learn to prevent these exploits?

Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.

Learn to Prevent High-Impact Smart Contract Hacks

$91B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.