🥇
Terra Classic
$40.00B
Most Expensive Crypto Hacks Leaderboard
The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.
-
$91B+
Total Value Lost
-
3595
Incidents Tracked
-
141
Chains Affected
-
65
$100M+ Incidents
Top 10 Biggest Hacks
Where the Largest Losses Concentrate
Top Chains by Losses
Top Techniques by Losses
Full Leaderboard
Showing 301-350 of 3595 ranked incidents
| Rank | Project | Amount Lost | Date | Chain | Technique | Attack Guide | Source |
|---|---|---|---|---|---|---|---|
| 301 | Nexus Mutual | $8.0M | ethereum | Key Leaked via Infrastructure | — | — | |
| 302 | Origin Protocol | $8.0M | ethereum | Flashloan Reentrancy Attack / Flash Loan Attack / Reentrancy | Flash Loan Attacks | View → | |
| 303 | LCX | $7.9M | ethereum | Hot-wallet compromise; initial access unknown | Access Control Attacks | View → | |
| 304 | Anyswap | $7.9M | bsc, ethereum, fantom | Access Control / Private Key Compromised (Bad ECDSA Implementation) / Weak Key Generation | Access Control Attacks | View → | |
| 305 | NoOnes | $7.9M | binance, ethereum, solana, tron | Cross-Chain Message Spoofing | — | — | |
| 306 | Warp Protocol | $7.8M | ethereum | Flash-loan manipulation of LP-token valuation | Flash Loan Attacks | View → | |
| 307 | KICKICO | $7.7M | ethereum | Hot Wallet Key Compromised | — | — | |
| 308 | CoinDash | $7.7M | ethereum | Frontend Attack / Frontend Compromise / Other | — | View → | |
| 309 | DFX Finance | $7.6M | ethereum | Other / Reentrancy | Reentrancy | View → | |
| 310 | Yala | $7.6M | ethereum, solana | Deployer Key Compromised | — | — | |
| 311 | Exactly | $7.6M | optimism | DebtManager Exploit / Improper Access Control / Reentrancy | Access Control Attacks | View → | |
| 312 | Rho Markets | $7.6M | scroll | Price Oracle Manipulation / Oracle Issue / Spot Price Manipulation | Oracle Manipulation & Price Manipulation | View → | |
| 313 | Verus-Ethereum Bridge | $7.5M | verus | Forged Proof / Other | Cross-Chain Bridge Attacks | View → | |
| 314 | JaredFromSubway.eth MEV Bot | $7.5M | ethereum | Other / MEV Bot Drained | — | View → | |
| 315 | CoinsPaid | $7.5M | bsc, ethereum | Hot Wallet Key Compromised | — | — | |
| 316 | Jimbos Protocol | $7.5M | arbitrum | Flashloan Slippage Attack / Other / Spot Price Manipulation | Flash Loan Attacks | View → | |
| 317 | BitBNS | $7.5M | - | Other / Private Key Compromised (Unknown Method) / Key Leaked via Infrastructure | Access Control Attacks | View → | |
| 318 | Hundred Finance | $7.4M | optimism | Flashloan Donate Function Logic Exploit / Oracle Issue / Donation Attack | Flash Loan Attacks | View → | |
| 319 | ValueDefi | $7.4M | ethereum | Flashloan Price Oracle Attack / Flash Loan Attack / Spot Price Manipulation | Flash Loan Attacks | View → | |
| 320 | Fantom Foundation | $7.4M | - | Suspected private-key compromise | Access Control Attacks | View → | |
| 321 | DxSale | $7.3M | bsc | Liquidity Rug | Access Control Attacks | View → | |
| 322 | BurgerSwap | $7.2M | binance, bsc | Flashloan Reentrancy Attack / Flash Loan Attack / Reentrancy | Flash Loan Attacks | View → | |
| 323 | Duelbits | $7.0M | bitcoin, bsc, ethereum, tron | Access Control | Access Control Attacks | View → | |
| 324 | Saga | $7.0M | saga | Infinite Mint and Dump / Other / Infinite Mint | — | View → | |
| 325 | Odin.Fun | $7.0M | icp | Liquidity valuation manipulation | Oracle Manipulation & Price Manipulation | View → | |
| 326 | DAO Maker Vesting | $7.0M | ethereum | Private Key Compromised (Unknown Method) / Other / Improper Access Control | Access Control Attacks | View → | |
| 327 | FinNexus | $7.0M | bsc, ethereum | Access Control / Private Key Compromised | Access Control Attacks | View → | |
| 328 | DragonEx | $7.0M | bitcoin, eos, etc, ethereum, nem, ripple | Rugpull / Key Leaked via Infrastructure | — | View → | |
| 329 | Bondly | $6.8M | ethereum | Private Key Compromised (Unknown Method) / Access Control / Phishing | Access Control Attacks | View → | |
| 330 | Velocore V2 | $6.8M | linea, zksync era | Fee Overflow Exploit / Other / Incorrect Fee Accounting | Access Control Attacks | View → | |
| 331 | Luna Yield | $6.7M | solana | Rugpull | — | View → | |
| 332 | TrustedVolumes | $6.7M | ethereum | Other / Caller Impersonation | Access Control Attacks | View → | |
| 333 | Casper Network | $6.7M | casper | Improper Access Control | Access Control Attacks | View → | |
| 334 | Alchemix | $6.5M | ethereum | Accidental debt forgiveness | — | View → | |
| 335 | Terra | $6.5M | terra2 | Other / IBC hooks exploit / Reentrancy | Reentrancy | View → | |
| 336 | Seneca | $6.5M | arbitrum, ethereum | Token approval exploit / Access Control / Token Approval Abuse | Access Control Attacks | View → | |
| 337 | Magnate Finance | $6.5M | base | Drained Contracts / Rugpull / Treasury Misappropriation | — | View → | |
| 338 | DEUS Finance | $6.5M | arbitrum, bsc, ethereum | Reversed allowance lookup | — | View → | |
| 339 | VeChain | $6.5M | vechain | Private Key Compromised | Access Control Attacks | — | |
| 340 | PicoStocks | $6.4M | - | Access Control | Access Control Attacks | View → | |
| 341 | Abracadabra Money | $6.4M | ethereum | Other / Borrow Logic Exploit / Rounding Error | Arithmetic Overflow & Underflow Attacks | View → | |
| 342 | Gamma Strategies | $6.4M | arbitrum | Flash Loan Attack / Price Manipulation Attack / Spot Price Manipulation | Flash Loan Attacks | View → | |
| 343 | Chain Fusion | $6.4M | ethereum | Private Key Compromised | Access Control Attacks | — | |
| 344 | AniMoon | $6.3M | - | Rugpull | — | View → | |
| 345 | Belt Finance | $6.3M | binance, bsc | Flashloan Price Oracle Attack / Flash Loan Attack / Incorrect Share Accounting | Flash Loan Attacks | View → | |
| 346 | Wemix | $6.2M | wemix | Private Key Compromised | Access Control Attacks | — | |
| 347 | Hundred Finance | $6.2M | gnosis chain | Flashloan Reentrancy Attack / Other / Reentrancy | Flash Loan Attacks | View → | |
| 348 | Safuu Protocol | $6.1M | - | Rugpull | — | View → | |
| 349 | Summer.fi | $6.0M | ethereum | NAV / Share-Price Manipulation | Flash Loan Attacks | View → | |
| 350 | Adapter Vault Drain | $6.0M | - | Access Control | Access Control Attacks | View → |
Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.
Understanding the Pattern Behind Billion-Dollar Losses
The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.
For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.
Frequently Asked Questions
How is this leaderboard ranked?
Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.
Does this include every attack type?
It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.
How can I learn to prevent these exploits?
Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.
Learn to Prevent High-Impact Smart Contract Hacks
$91B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.
Start your free security training
Get 25 free lessons and 4 guided exploit exercises.
Onboarding details by email within 2–3 business days.