🥇
Terra Classic
$40.00B
Most Expensive Crypto Hacks Leaderboard
The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.
-
$104B+
Total Value Lost
-
3836
Incidents Tracked
-
124
Chains Affected
-
88
$100M+ Incidents
Top 10 Biggest Hacks
Where the Largest Losses Concentrate
Top Chains by Losses
Top Techniques by Losses
Full Leaderboard
Showing 301-350 of 3836 ranked incidents
| Rank | Project | Amount Lost | Date | Chain | Technique | Attack Guide | Source |
|---|---|---|---|---|---|---|---|
| 301 | flash.sx / vaults.sx | $13.0M | eos | Reentrancy | Reentrancy | — | |
| 302 | Massive Phishing | $12.9M | - | Phishing | Phishing Attacks | View → | |
| 303 | StablR | $12.8M | - | Access Control | Access Control Attacks | View → | |
| 304 | pNetwork | $12.7M | - | Other | — | View → | |
| 305 | Compounder Finance | $12.5M | ethereum | Drained Contracts / Rugpull / Admin Drain | — | View → | |
| 306 | Ionic | $12.3M | - | Other | — | View → | |
| 307 | CoinDash | $12.2M | - | Other | — | View → | |
| 308 | Cork V1 | $12.0M | ethereum | Access control bypass via hook / Other / Improper Access Control | Access Control Attacks | View → | |
| 309 | Polter Finance | $12.0M | fantom | Flashloan Price Oracle Attack / Oracle Issue / Spot Price Manipulation | Flash Loan Attacks | View → | |
| 310 | Ronin | $12.0M | - | Access Control | Access Control Attacks | View → | |
| 311 | Ronin Bridge | $12.0M | ethereum | MEV bot manipulation exploit / Uninitialized Proxy | Access Control Attacks | View → | |
| 312 | Fortress Trust | $12.0M | bitcoin, ethereum | Key Leaked via Infrastructure | — | — | |
| 313 | Defrost | $12.0M | avalanche | Oracle Manipulation / Private Key Compromised | Access Control Attacks | View → | |
| 314 | Defrost Finance | $12.0M | - | Rugpull | — | View → | |
| 315 | Triple-A | $11.8M | arbitrum, ethereum, tron | Access Control / Hot Wallet Key Compromised | Access Control Attacks | View → | |
| 316 | EXMO | $11.7M | multiple | Access Control / Hot Wallet Key Compromised | Access Control Attacks | View → | |
| 317 | PrismaLST | $11.6M | ethereum | Flashloan Trove Manipulation / Missing Input Validation | Flash Loan Attacks | View → | |
| 318 | Verus | $11.6M | - | Other | — | View → | |
| 319 | Somesing | $11.6M | ethereum | Unbacked Mint | — | — | |
| 320 | Yearn Finance | $11.5M | ethereum | Flashloan Misconfiguration Exploit / Flash Loan Attack / Oracle Misconfiguration | Flash Loan Attacks | View → | |
| 321 | Verus-Ethereum Bridge | $11.5M | verus | Forged Proof | — | — | |
| 322 | BitoPro | $11.5M | ethereum, polygon, solana, tron | Key Leaked via Infrastructure | — | — | |
| 323 | BitoPro BitoGroup | $11.5M | - | Access Control | Access Control Attacks | View → | |
| 324 | Garden | $11.4M | arbitrum, base, ethereum, solana | Private Key Compromised / Key Leaked via Infrastructure | Access Control Attacks | View → | |
| 325 | Venus Protocol | $11.2M | bsc | Stale Oracle Price | Oracle Manipulation & Price Manipulation | — | |
| 326 | Garden Finance | $11.0M | - | Other | — | View → | |
| 327 | Saddle Finance | $11.0M | ethereum | Flashloan Swap Logic Exploit / Other / Swap Logic Flaw | Flash Loan Attacks | View → | |
| 328 | bEarn Fi | $11.0M | binance | Flash Loan Attack | Flash Loan Attacks | View → | |
| 329 | ValueDefi | $11.0M | bsc, ethereum | Access Control Exploit / Other / Math Mistake Exploit / Other / Arithmetic Error / Improper Access Control | Access Control Attacks | View → | |
| 330 | Yearn Finance | $11.0M | ethereum | Flashloan Price Oracle Attack / Flash Loan Attack / Spot Price Manipulation | Flash Loan Attacks | View → | |
| 331 | Blend Pools V2 | $11.0M | stellar | Price Oracle Manipulation / Spot Price Manipulation | Oracle Manipulation & Price Manipulation | View → | |
| 332 | Blend Protocol | $10.9M | - | Oracle Issue | Oracle Manipulation & Price Manipulation | View → | |
| 333 | THORChain | $10.7M | - | - | — | View → | |
| 334 | THORChain | $10.7M | base, bitcoin, bsc, ethereum | Other / Bridge Logic Flaw | — | View → | |
| 335 | Kraken | $10.5M | bitcoin | Access Control / Improper Access Control | Access Control Attacks | View → | |
| 336 | Poly Network | $10.2M | - | Access Control | Access Control Attacks | View → | |
| 337 | Wanchain | $10.0M | cardano | Other / Signature Verification Flaw | — | View → | |
| 338 | Syscoin Bridge | $10.0M | syscoin | Forged Proof | — | — | |
| 339 | DogWifTools | $10.0M | solana | Private Key Compromised (Malware) / Key Stored Publicly | Access Control Attacks | View → | |
| 340 | Gifto | $10.0M | - | Rugpull | — | View → | |
| 341 | Dego Finance | $10.0M | bsc, cronos, ethereum | Private Key Compromised (Unknown Method) / Deployer Key Compromised | Access Control Attacks | View → | |
| 342 | Arbix Finance | $10.0M | bsc | Drained Contracts / Rugpull / Admin Drain | — | View → | |
| 343 | SharkTron | $10.0M | - | Rugpull | — | View → | |
| 344 | GateHub | $10.0M | ripple | Access Control / Private Key Compromised | Access Control Attacks | View → | |
| 345 | Youbit | $10.0M | bitcoin | Other / Hot Wallet Key Compromised | — | View → | |
| 346 | Cryptsy | $9.9M | bitcoin, litecoin | Access Control / Private Key Compromised | Access Control Attacks | View → | |
| 347 | Pizza | $9.9M | - | Other | — | View → | |
| 348 | LiFi Finance | $9.7M | linea, metis, zksync era | Router Exploit via Infinite Approvals / Token Approval Abuse | Access Control Attacks | View → | |
| 349 | Jeffrey Zirlin | $9.7M | - | Access Control | Access Control Attacks | View → | |
| 350 | Resupply | $9.6M | ethereum | Price Oracle Manipulation / Other / Donation Attack | Oracle Manipulation & Price Manipulation | View → |
Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.
Understanding the Pattern Behind Billion-Dollar Losses
The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.
For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.
Frequently Asked Questions
How is this leaderboard ranked?
Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.
Does this include every attack type?
It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.
How can I learn to prevent these exploits?
Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.
Learn to Prevent High-Impact Smart Contract Hacks
$104B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.