🥇
Terra Classic
$40.00B
Most Expensive Crypto Hacks Leaderboard
The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.
-
$104B+
Total Value Lost
-
3836
Incidents Tracked
-
124
Chains Affected
-
88
$100M+ Incidents
Top 10 Biggest Hacks
Where the Largest Losses Concentrate
Top Chains by Losses
Top Techniques by Losses
Full Leaderboard
Showing 201-250 of 3836 ranked incidents
| Rank | Project | Amount Lost | Date | Chain | Technique | Attack Guide | Source |
|---|---|---|---|---|---|---|---|
| 201 | StableMagnet | $27.0M | binance, bsc | Drained Contracts and User Wallets / Rugpull / Backdoor Contract | — | View → | |
| 202 | Truebit | $26.5M | ethereum | Bonding Curve Exploit / Other / Arithmetic Error | — | View → | |
| 203 | Huobi | $26.4M | ethereum | Private Key Compromised (Unknown Method) / Hot Wallet Key Compromised | Access Control Attacks | View → | |
| 204 | Fixed Float | $26.1M | - | Access Control | Access Control Attacks | View → | |
| 205 | MEV Boost Exploit | $26.1M | - | Other | — | View → | |
| 206 | FixedFloat | $26.1M | bitcoin, ethereum | Private Key Compromised / Key Leaked via Infrastructure | Access Control Attacks | View → | |
| 207 | Kronos Research | $26.0M | ethereum | API Key unauthorized access / API Key Compromised | — | View → | |
| 208 | Coinbin | $26.0M | ethereum | Access Control / Admin Drain | Access Control Attacks | View → | |
| 209 | Whale Wallet Drain | $25.6M | - | Phishing | Phishing Attacks | View → | |
| 210 | ThalaSwap | $25.5M | aptos | Drained Liquidity Pool / Missing Input Validation | — | View → | |
| 211 | Lendf.me | $25.2M | ethereum | Reentrancy / Other | Reentrancy | View → | |
| 212 | Indodax | $25.2M | ethereum, optimism, polygon | Access Control Exploit / Other / Key Leaked via Infrastructure | Access Control Attacks | View → | |
| 213 | Resolv Labs | $25.0M | - | - | — | View → | |
| 214 | Resolv | $25.0M | ethereum | Private Key Compromised / Access Control / Key Leaked via Infrastructure | Access Control Attacks | View → | |
| 215 | Thala Labs | $25.0M | - | Other | — | View → | |
| 216 | dForce Lending | $25.0M | ethereum | Reentrancy | Reentrancy | View → | |
| 217 | Eth Contingency | $25.0M | - | Rugpull | — | View → | |
| 218 | AFX Trade | $24.1M | - | - | — | View → | |
| 219 | AFX | $24.1M | - | Access Control | Access Control Attacks | View → | |
| 220 | AFX Bridge | $24.1M | arbitrum | Validator Key Compromised | — | — | |
| 221 | Ostium | $24.0M | arbitrum | Oracle Issue / Private Key Compromised | Access Control Attacks | View → | |
| 222 | SBI Crypto | $24.0M | bitcoin, bitcoincash, doge, ethereum, litecoin | Access Control / Hot Wallet Key Compromised | Access Control Attacks | View → | |
| 223 | Ankr | $24.0M | bsc | Access Control Exploit / Access Control / Improper Access Control | Access Control Attacks | View → | |
| 224 | xToken | $24.0M | ethereum | Flashloan Price Oracle Attack / Flash Loan Attack / Spot Price Manipulation | Flash Loan Attacks | View → | |
| 225 | Bancor | $23.5M | ethereum | Other / Hot Wallet Key Compromised | — | View → | |
| 226 | Bald | $23.1M | base | Drained Liquidity Pool / Rugpull / Liquidity Rug | — | View → | |
| 227 | Coindroplet | $23.1M | - | Phishing | Phishing Attacks | View → | |
| 228 | Bitrue | $23.0M | - | Hot wallet hack / Access Control / Hot Wallet Key Compromised | Access Control Attacks | View → | |
| 229 | AlphaPo | $22.9M | - | Access Control | Access Control Attacks | View → | |
| 230 | Lykke | $22.4M | bitcoin, ethereum | Other / Hot Wallet Key Compromised | — | View → | |
| 231 | Gala Games | $22.3M | - | Access Control | Access Control Attacks | View → | |
| 232 | Gala | $22.3M | ethereum | Infinite Mint and Dump / Infinite Mint | — | View → | |
| 233 | Elephant Money | $22.2M | bsc | Flashloan Price Oracle Attack / Flash Loan Attack / Spot Price Manipulation | Flash Loan Attacks | View → | |
| 234 | Pando Rings | $22.0M | mixin | Price Oracle Attack / Spot Price Manipulation | Oracle Manipulation & Price Manipulation | View → | |
| 235 | HTX | $21.9M | - | Access Control | Access Control Attacks | View → | |
| 236 | Blizz Finance | $21.8M | avalanche | Outdated Oracle Exploit / Stale Oracle Price | Oracle Manipulation & Price Manipulation | View → | |
| 237 | Bilaxy | $21.7M | ethereum | Access Control / Hot Wallet Key Compromised | Access Control Attacks | View → | |
| 238 | BonkDAO | $21.0M | solana | Access Control / Malicious Proposal | Access Control Attacks | View → | |
| 239 | Hyperliquid User Private Key Compromise | $21.0M | - | Access Control | Access Control Attacks | View → | |
| 240 | FortuneWheel | $21.0M | - | Other | — | View → | |
| 241 | DEXX | $21.0M | solana | Private Key Compromised (Stored Publicly) / Other / Private Key Compromised | Access Control Attacks | View → | |
| 242 | TBIS | $21.0M | - | Rugpull | — | View → | |
| 243 | Freedom Protocol | Raccoon Network | $20.8M | - | Rugpull | — | View → | |
| 244 | Popsicle Finance | $20.7M | ethereum | Flashloan Incentive Rewards Exploit / Other / Reward Logic Flaw | Flash Loan Attacks | View → | |
| 245 | Essence Finance | $20.0M | - | Other | — | View → | |
| 246 | US Government Crypto Wallet | $20.0M | ethereum | Private Key Compromised | Access Control Attacks | View → | |
| 247 | UwU Lend | $20.0M | ethereum | Flashloan Price Oracle Attack / Spot Price Manipulation | Flash Loan Attacks | View → | |
| 248 | Sonne Finance | $20.0M | optimism | Flashloan Donate Function Logic Exploit / Donation Attack | Flash Loan Attacks | View → | |
| 249 | Sonne | $20.0M | - | Other | — | View → | |
| 250 | MEV-Boost Relay | $20.0M | ethereum | Key Leaked via Infrastructure | — | — |
Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.
Understanding the Pattern Behind Billion-Dollar Losses
The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.
For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.
Frequently Asked Questions
How is this leaderboard ranked?
Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.
Does this include every attack type?
It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.
How can I learn to prevent these exploits?
Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.
Learn to Prevent High-Impact Smart Contract Hacks
$104B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.