Most Expensive Crypto Hacks Leaderboard

The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.

  • $91B+

    Total Value Lost

  • 3595

    Incidents Tracked

  • 141

    Chains Affected

  • 65

    $100M+ Incidents

Top 10 Biggest Hacks

Jump to full leaderboard
  1. 🥈

    Mantra

    $5.50B

  2. #4

    LuBian

    $3.50B

    bitcoin

  3. #7

    Thodex

    $2.00B

  4. #9

    Finiko

    $1.50B

  5. #10

    Bybit

    $1.40B

    ethereum

Where the Largest Losses Concentrate

Top Chains by Losses

  • ethereum $9,830M
  • bitcoin $5,404M
  • bsc $3,037M
  • solana $1,697M
  • polygon $1,539M

Top Techniques by Losses

  • Other $52,517M
  • Rugpull $15,631M
  • Private Key Compromised (Brute Force) / Weak Key Generation $3,500M
  • Safe Multisig wallet Phishing Exploit / Access Control / Signer Phishing $1,635M
  • Access Control / Hot Wallet Key Compromised $1,027M

Full Leaderboard

Showing 2151-2200 of 3595 ranked incidents

Largest Web3 incidents by USD amount lost
Rank Project Amount Lost Date Chain Technique Attack Guide Source
2151 Health $9K - Other — View →
2152 Mocha Set Dollar $9K ethereum Rugpull — View →
2153 Chi Protocol $8K ethereum Redeem Logic Flaw / Peg Check Bypass — View →
2154 Proxy_b7e1 $8K bsc Unknown — —
2155 Goose Finance $8K bsc Share Accounting Flaw / Incorrect Share Accounting Flash Loan Attacks View →
2156 VRug $8K ethereum Liquidity Rug — —
2157 Brother finance $8K ethereum Honeypot — View →
2158 Sloth Inu $8K - Rugpull — View →
2159 Relay3rV1 $8K ethereum Rugpull — View →
2160 Robinhood $8K bsc Social Account Takeover Phishing Attacks —
2161 Mt. Gox $8K - Other — View →
2162 CYBER SOLIDITY $8K ethereum Rugpull — View →
2163 Metropolis.finance $8K ethereum Rugpull — View →
2164 BabyDAO $8K - Rugpull — View →
2165 K.O.N.G Token $7K ethereum Rugpull — View →
2166 Ren Swap $7K ethereum Honeypot — View →
2167 FFGame $7K eos Unknown — —
2168 Rfyield Finance $7K ethereum Rugpull — View →
2169 Arrakis V1 $7K ethereum Spot Price Manipulation Oracle Manipulation & Price Manipulation View →
2170 Aventa $7K ethereum Unknown — —
2171 DOGGO $7K ethereum Withdrawal Logic Flaw — —
2172 SEAMAN $7K bsc Unknown — —
2173 Polynomial Protocol $7K optimism Other / Missing Input Validation — View →
2174 FlippazOne $7K - Access Control Access Control Attacks —
2175 Unverified_35bc $7K bsc Reentrancy Reentrancy —
2176 Rubixi $7K - Access Control Access Control Attacks View →
2177 CHERRY $7K ethereum Honeypot — View →
2178 ELLA $6K ethereum Rugpull — View →
2179 Ohohoh.io $6K ethereum Rugpull — View →
2180 Bitscalper $6K - Rugpull — View →
2181 Douyea $6K ethereum Honeypot — View →
2182 EAC $6K bsc Spot Price Manipulation Oracle Manipulation & Price Manipulation —
2183 UnlimitedBase Finance $6K ethereum Rugpull — View →
2184 Foxy.farm $6K ethereum Rugpull — View →
2185 Harvester Network $6K ethereum Honeypot — View →
2186 CREW $6K ethereum Rugpull — View →
2187 Bitmor $6K base Token Approval Abuse Access Control Attacks —
2188 APC $6K bsc Spot Price Manipulation Oracle Manipulation & Price Manipulation —
2189 MBC & ZZSH $6K bsc Improper Access Control Access Control Attacks —
2190 dxHub $5K ethereum Rugpull — View →
2191 Veil Cash $5K base misconfigured Groth16 verifier / Proof Verifier Bug — View →
2192 Arcade $5K - Access Control Access Control Attacks View →
2193 BTB Token $5K - Flash Loan Attack Flash Loan Attacks View →
2194 SpookySwap $5K fantom Frontend Compromise — —
2195 Banksy $5K - Rugpull — View →
2196 Rotex $5K ethereum Rugpull — View →
2197 Jointventure Finance $4K ethereum Rugpull — —
2198 LocalBitcoins $4K - Access Control Access Control Attacks View →
2199 ShabuVault $4K ethereum Rugpull — View →
2200 Overbase Finance $4K ethereum Rugpull — View →

Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.

Understanding the Pattern Behind Billion-Dollar Losses

The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.

For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.

Frequently Asked Questions

How is this leaderboard ranked?

Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.

Does this include every attack type?

It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.

How can I learn to prevent these exploits?

Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.

Learn to Prevent High-Impact Smart Contract Hacks

$91B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.