Most Expensive Crypto Hacks Leaderboard

The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.

  • $91B+

    Total Value Lost

  • 3597

    Incidents Tracked

  • 141

    Chains Affected

  • 65

    $100M+ Incidents

Top 10 Biggest Hacks

Jump to full leaderboard
  1. 🥈

    Mantra

    $5.50B

  2. #4

    LuBian

    $3.50B

    bitcoin

  3. #7

    Thodex

    $2.00B

  4. #9

    Finiko

    $1.50B

  5. #10

    Bybit

    $1.40B

    ethereum

Where the Largest Losses Concentrate

Top Chains by Losses

  • ethereum $9,830M
  • bitcoin $5,404M
  • bsc $3,037M
  • solana $1,697M
  • polygon $1,539M

Top Techniques by Losses

  • Other $52,517M
  • Rugpull $15,631M
  • Private Key Compromised (Brute Force) / Weak Key Generation $3,500M
  • Safe Multisig wallet Phishing Exploit / Access Control / Signer Phishing $1,635M
  • Access Control / Hot Wallet Key Compromised $1,027M

Full Leaderboard

Showing 2301-2350 of 3597 ranked incidents

Largest Web3 incidents by USD amount lost
Rank Project Amount Lost Date Chain Technique Attack Guide Source
2301 Umami finance — - Other — View →
2302 Spark — ethereum Honeypot — View →
2303 3Commas — multi chain Exchange API credential exposure — View →
2304 Golden Moon — binance Honeypot — View →
2305 Gemini — - Phishing Phishing Attacks View →
2306 TIFIToken — bsc Spot Price Manipulation Oracle Manipulation & Price Manipulation —
2307 Lodestar V0 — arbitrum Flashloan Price Oracle Attack / Spot Price Manipulation / Flash Loan Attack Flash Loan Attacks View →
2308 NOVAToken — bsc Admin Drain — —
2309 BBOX — bsc Spot Price Manipulation Oracle Manipulation & Price Manipulation —
2310 RFB — bsc Missing Input Validation — —
2311 Ratio Finance — solana Private Key Compromised (Unknown Method) / Key Brute Forced Access Control Attacks View →
2312 Overnight Finance — avalanche Unknown — —
2313 Fairmoon — binance Honeypot — View →
2314 GeoDB — - Other — View →
2315 Bad Guys by RPF — ethereum Incorrect Share Accounting — —
2316 Acala — acala Infinite Mint — View →
2317 Impermax — ethereum, polygon Other / Private Key Compromised Access Control Attacks View →
2318 Vauld — - Other — View →
2319 GoldenEsse — binance Honeypot — View →
2320 Transaction Control Protocol — ethereum Honeypot — View →
2321 Drift Trade — solana Profit withdrawal accounting failure — View →
2322 Ebuy Finance — binance Honeypot — View →
2323 TreasureDAO — - Other — View →
2324 StaticFire — binance Honeypot — View →
2325 Internet Computer — binance Honeypot — View →
2326 Gelato — - Other — View →
2327 ScareCrow — - Abandoned — View →
2328 Coinsuper — - Other — View →
2329 SkyDog — binance Honeypot — View →
2330 ShibaElonMars — binance Honeypot — View →
2331 UNIYSWAP — - Rugpull — View →
2332 Mystery — - Rugpull — View →
2333 FlokiFarmToken — - Rugpull — View →
2334 OliveOptions — binance Honeypot — View →
2335 Daughter Doge Revenge Token — - Rugpull — View →
2336 AwakenedToken — - Rugpull — View →
2337 LionKingToken — - Rugpull — View →
2338 SaturnBeam — - Rugpull — View →
2339 Polyrock Finance — - Rugpull — View →
2340 PolyRainbowToken — - Rugpull — View →
2341 Symmetry.Markets — - Rugpull — View →
2342 PolarBearToken — - Rugpull — View →
2343 Safari.Yield Finance — binance Honeypot — View →
2344 xMINT BSC — binance Honeypot — View →
2345 MEMEKiller — binance Honeypot — View →
2346 Boon Tech — ethereum Rugpull — View →
2347 OpportyToken — ethereum Rugpull — View →
2348 RGL — ethereum Rugpull — View →
2349 BlockChain of Things — ethereum Rugpull — View →
2350 ACO — ethereum Honeypot — View →

Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.

Understanding the Pattern Behind Billion-Dollar Losses

The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.

For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.

Frequently Asked Questions

How is this leaderboard ranked?

Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.

Does this include every attack type?

It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.

How can I learn to prevent these exploits?

Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.

Learn to Prevent High-Impact Smart Contract Hacks

$91B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.