Most Expensive Crypto Hacks Leaderboard

The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.

  • $101B+

    Total Value Lost

  • 3299

    Incidents Tracked

  • 74

    Chains Affected

  • 80

    $100M+ Incidents

Hall of Infamy

Top 10 Biggest Hacks

Jump to full leaderboard
  2. 🥈

    Mantra

    $5.50B

  4. #4

    LuBian

    $3.50B

    bitcoin

  8. #8

    Thodex

    $2.00B

  10. #10

    Finiko

    $1.50B

Breakdown

Where the Largest Losses Concentrate

Top Chains by Losses

  • ethereum $8,051M
  • bitcoin $4,415M
  • bsc $2,657M
  • solana $1,605M
  • polygon $1,512M

Top Techniques by Losses

  • Other $61,553M
  • Rugpull $15,684M
  • Access Control $4,030M
  • Private Key Compromised (Brute Force) $3,500M
  • Safe Multisig wallet Phishing Exploit / Access Control $1,635M
All Incidents

Full Leaderboard

Showing 201–250 of 3299 ranked incidents

Largest Web3 incidents by USD amount lost
Rank Project Amount Lost Date Chain Technique Attack Guide Source
201 Thala Labs $25.0M - Other — View →
202 dForce Lending $25.0M ethereum Reentrancy Reentrancy View →
203 Eth Contingency $25.0M - Rugpull — View →
204 SBI Crypto $24.0M bitcoin, bitcoincash, doge, ethereum, litecoin Access Control Access Control Attacks View →
205 Ankr $24.0M bsc Access Control Exploit / Access Control Access Control Attacks View →
206 xToken $24.0M ethereum Flashloan Price Oracle Attack / Flash Loan Attack Flash Loans Attacks View →
207 Bancor $23.5M ethereum Other — View →
208 Bald $23.1M base Drained Liquidity Pool / Rugpull — View →
209 Coindroplet $23.1M - Phishing Phishing Attacks View →
210 Bitrue $23.0M - Hot wallet hack / Access Control Access Control Attacks View →
211 AlphaPo $22.9M - Access Control Access Control Attacks View →
212 Gala Games $22.3M - Access Control Access Control Attacks View →
213 Elephant Money $22.2M bsc Flashloan Price Oracle Attack / Flash Loan Attack Flash Loans Attacks View →
214 Lykke $22.0M - Other — View →
215 Gala $22.0M ethereum Infinite Mint and Dump — View →
216 Pando Rings $22.0M mixin Price Oracle Attack Oracle Manipulation & Price Manipulation View →
217 HTX $21.9M - Access Control Access Control Attacks View →
218 Blizz Finance $21.8M avalanche Outdated Oracle Exploit Oracle Manipulation & Price Manipulation View →
219 BonkDAO $21.0M - Access Control Access Control Attacks View →
220 Hyperliquid User Private Key Compromise $21.0M - Access Control Access Control Attacks View →
221 FortuneWheel $21.0M - Other — View →
222 DEXX $21.0M solana Private Key Compromised (Stored Publicly) / Other Access Control Attacks View →
223 Transit Swap $21.0M bsc, ethereum Transfer Logic Exploit — View →
224 TBIS $21.0M - Rugpull — View →
225 Bilaxy $21.0M - Access Control Access Control Attacks View →
226 Freedom Protocol | Raccoon Network $20.8M - Rugpull — View →
227 Popsicle Finance $20.5M ethereum Flashloan Incentive Rewards Exploit / Other Flash Loans Attacks View →
228 Essence Finance $20.0M - Other — View →
229 US Government Crypto Wallet $20.0M ethereum - — View →
230 UwU Lend $20.0M ethereum Flashloan Price Oracle Attack Flash Loans Attacks View →
231 Sonne Finance $20.0M optimism Flashloan Donate Function Logic Exploit Flash Loans Attacks View →
232 Sonne $20.0M - Other — View →
233 Auros $20.0M - Other — View →
234 3Commas $20.0M - Other — View →
235 Superfluid $20.0M polygon CTX Exploit / Other — View →
236 Pickle $19.7M ethereum Vault Swap Exploit — View →
237 Pickle Finance $19.7M ethereum Other — View →
238 BonkDAO $19.3M - - — View →
239 Bithumb $19.2M - Access Control Access Control Attacks View →
240 CREAM Lending $18.8M ethereum Flashloan Reentrancy Attack Flash Loans Attacks View →
241 Pando $18.6M - Access Control Access Control Attacks View →
242 Lympo $18.5M - Access Control Access Control Attacks View →
243 Rhea Finance $18.4M - - — View →
244 Rhea Finance $18.4M - Other — View →
245 Snowdog $18.1M avalanche Drained Contracts — View →
246 BearnFi $18.0M bsc Flashloan Withdraw Logic Exploit Flash Loans Attacks View →
247 DEUS Finance $17.9M fantom Flashloan Price Oracle Attack / Flash Loan Attack Flash Loans Attacks View →
248 Electrum $17.7M - Access Control Access Control Attacks View →
249 Flare Token $17.0M - Rugpull — View →
250 SwapNet $17.0M base, ethereum Unlimited Approval Exploit / Other — View →

Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.

Context

Understanding the Pattern Behind Billion-Dollar Losses

The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.

For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.

Common Questions

Frequently Asked Questions

How is this leaderboard ranked?

Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.

Does this include every attack type?

It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.

How can I learn to prevent these exploits?

Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.

Learn to Prevent High-Impact Smart Contract Hacks

$101B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.

Start Free Trial → View Full Course