Most Expensive Crypto Hacks Leaderboard

The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.

  • $91B+

    Total Value Lost

  • 3598

    Incidents Tracked

  • 141

    Chains Affected

  • 65

    $100M+ Incidents

Top 10 Biggest Hacks

Jump to full leaderboard
  2. 🥈

    Mantra

    $5.50B

  4. #4

    LuBian

    $3.50B

    bitcoin

  7. #7

    Thodex

    $2.00B

  9. #9

    Finiko

    $1.50B

  10. #10

    Bybit

    $1.40B

    ethereum

Where the Largest Losses Concentrate

Top Chains by Losses

  • ethereum $9,830M
  • bitcoin $5,404M
  • bsc $3,037M
  • solana $1,697M
  • polygon $1,539M

Top Techniques by Losses

  • Other $52,517M
  • Rugpull $15,631M
  • Private Key Compromised (Brute Force) / Weak Key Generation $3,500M
  • Safe Multisig wallet Phishing Exploit / Access Control / Signer Phishing $1,635M
  • Access Control / Hot Wallet Key Compromised $1,027M

Full Leaderboard

Showing 3551-3598 of 3598 ranked incidents

Largest Web3 incidents by USD amount lost
Rank Project Amount Lost Date Chain Technique Attack Guide Source
3551 CostcoSwap — binance Honeypot — View →
3552 GodzillaFinance — binance Honeypot — View →
3553 dorgDAO — binance Honeypot — View →
3554 Paint — binance Honeypot — View →
3555 FREEPARKING — binance Honeypot — View →
3556 YodaCoin — binance Honeypot — View →
3557 Channels — binance Honeypot — View →
3558 RapidSwap — binance Honeypot — View →
3559 shadownite.com — binance Honeypot — View →
3560 Xend.finance — ethereum Honeypot — View →
3561 Polkacomma — binance Honeypot — View →
3562 Link Based — ethereum Abandoned — View →
3563 Inertia Money — ethereum Abandoned — View →
3564 Dasis Cash — ethereum Abandoned — View →
3565 Ultimate Set Dollar — ethereum Rugpull — View →
3566 Decentralized Privacy — ethereum Rugpull — View →
3567 Tree Finance — ethereum Abandoned — View →
3568 SAD2Token — ethereum Abandoned — View →
3569 Compound Labs — ethereum Oracle Issue Oracle Manipulation & Price Manipulation View →
3570 Compasswap Token — binance Rugpull — —
3571 Darkwebcoin — ethereum Other — View →
3572 SoftdrinkSwap — binance Abandoned — View →
3573 GALIL — ethereum Rugpull — —
3574 Grin — grin Validator Key Compromised — —
3575 PancakeSwap — - Other — View →
3576 Beer Garden — binance Abandoned — View →
3577 Hatch DAO — ethereum Rugpull — View →
3578 Hegic — ethereum Other / Deposit Logic Flaw — View →
3579 Synthetix — ethereum Oracle Misconfiguration Oracle Manipulation & Price Manipulation —
3580 Coinroom — - Rugpull — View →
3581 Poker EOS — eos Private Key Compromised Access Control Attacks —
3582 Qubicle — ethereum Honeypot — View →
3583 TronWow — tron Unknown — —
3584 TronBank — tron Infinite Mint — —
3585 TronCrush — tron Infinite Mint — —
3586 CoinBene — ethereum Suspected wallet compromise; cause unconfirmed — View →
3587 ToBet — eos Unknown — —
3588 EOS Max — eos Unknown — —
3589 EOS Lelego — eos Unknown — —
3590 Gate — bitcoin, ethereum Supply Chain Attack — —
3591 BlockVest — ethereum Honeypot — View →
3592 Zaif — bitcoin Hot-wallet server compromise Access Control Attacks View →
3593 Coinseed Token — ethereum Honeypot — View →
3594 Blockchain Terminal Token — ethereum Honeypot — View →
3595 SmartMesh — ethereum Infinite Mint — —
3596 BeautyChain — ethereum Infinite Mint — —
3597 ABTC — ethereum Honeypot — View →
3598 Silk Road — - Withdrawal-processing flaw — View →

Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.

Understanding the Pattern Behind Billion-Dollar Losses

The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.

For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.

Frequently Asked Questions

How is this leaderboard ranked?

Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.

Does this include every attack type?

It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.

How can I learn to prevent these exploits?

Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.

Learn to Prevent High-Impact Smart Contract Hacks

$91B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.

Start Free Trial → View Full Course