🥇
Terra Classic
$40.00B
Most Expensive Crypto Hacks Leaderboard
The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.
-
$104B+
Total Value Lost
-
3836
Incidents Tracked
-
124
Chains Affected
-
88
$100M+ Incidents
Top 10 Biggest Hacks
Where the Largest Losses Concentrate
Top Chains by Losses
Top Techniques by Losses
Full Leaderboard
Showing 351-400 of 3836 ranked incidents
| Rank | Project | Amount Lost | Date | Chain | Technique | Attack Guide | Source |
|---|---|---|---|---|---|---|---|
| 351 | zkLend | $9.6M | starknet | Empty Market Exploit / Other / First Depositor Attack | — | View → | |
| 352 | BreedTech | $9.4M | - | Rugpull | — | — | |
| 353 | Cover Protocol | $9.4M | ethereum | Incentives Function Mistake / Other / Arithmetic Error | — | View → | |
| 354 | MyAlgo | $9.2M | algorand | Cloudflare Key Compromised / CDN Compromise | — | View → | |
| 355 | CoinTiger (PTT) | $9.2M | ethereum | Key Leaked via Infrastructure | — | — | |
| 356 | Moola Market | $9.1M | celo | Price Oracle Attack / Other / Spot Price Manipulation | Oracle Manipulation & Price Manipulation | View → | |
| 357 | Astra Nova | $9.1M | ethereum | Private Key Compromised | Access Control Attacks | — | |
| 358 | Bonzo Finance | $9.1M | - | - | — | View → | |
| 359 | Bonzo | $9.1M | hedera | Oracle Issue / Spot Price Manipulation | Oracle Manipulation & Price Manipulation | View → | |
| 360 | Yearn Finance | $9.0M | - | Other | — | View → | |
| 361 | Yearn Ether | $9.0M | ethereum | yETH stablepool Exploit / Incorrect Share Accounting | — | View → | |
| 362 | DCF | $9.0M | - | Other | — | View → | |
| 363 | dYdX V3 | $9.0M | ethereum | Price Manipulation Attack / Risk Parameter Abuse | Oracle Manipulation & Price Manipulation | View → | |
| 364 | Impermax | $9.0M | ethereum, polygon | Other / Private Key Compromised | Access Control Attacks | View → | |
| 365 | Trade.io | $9.0M | - | Access Control | Access Control Attacks | View → | |
| 366 | Punk Protocol | $8.9M | ethereum | Delegatecall Exploit / Other / Delegatecall Hijack | Access Control Attacks | View → | |
| 367 | Safemoon | $8.9M | bsc | Access Control Exploit / Access Control / Improper Access Control | Access Control Attacks | View → | |
| 368 | Zoth ZeUSD | $8.8M | ethereum | Private Key Compromised (Unknown Method) / Private Key Compromised | Access Control Attacks | View → | |
| 369 | ERC20 Permit | $8.8M | - | Phishing | Phishing Attacks | View → | |
| 370 | Crema Finance | $8.8M | solana | Access Control Exploit / Other / Improper Access Control | Access Control Attacks | View → | |
| 371 | WOOFi Swap | $8.8M | arbitrum | Price Oracle Manipulation / Flash Loan Attack / Spot Price Manipulation | Flash Loan Attacks | View → | |
| 372 | Mt. Gox | $8.8M | bitcoin | Improper Access Control | Access Control Attacks | — | |
| 373 | Mt. Gox | $8.8M | - | Other | — | View → | |
| 374 | Ionic Protocol | $8.6M | mode | Fake Collateral Exploit / Impersonation Scam | Phishing Attacks | View → | |
| 375 | Platypus Finance | $8.5M | avalanche | Flashloan Reentrancy Attack / Flash Loan Attack / Unknown | Flash Loan Attacks | View → | |
| 376 | Term Labs | $8.5M | - | Other | — | View → | |
| 377 | TermFinance Vaults | $8.5M | ethereum | Malicious Proposal | Flash Loan Attacks | — | |
| 378 | Trust Wallet | $8.5M | bitcoin, ethereum, solana | Private Key Compromised (Supply Chain Attack) / Access Control / Supply Chain Attack | Access Control Attacks | View → | |
| 379 | Bunni V2 | $8.4M | ethereum, unichain | Liquidity Distribution Function Exploit / Other / Rounding Error | — | View → | |
| 380 | ALEX | $8.4M | stacks | malicious transfer() method / Caller Impersonation | Access Control Attacks | View → | |
| 381 | Zoth | $8.3M | - | Access Control | Access Control Attacks | View → | |
| 382 | MakerDAO | $8.3M | ethereum | Stale Oracle Price | Oracle Manipulation & Price Manipulation | — | |
| 383 | Blizz Finance | $8.3M | - | Rugpull | — | View → | |
| 384 | Crypto DAO | $8.2M | bsc | Improper Access Control | Access Control Attacks | — | |
| 385 | Gamma | $8.2M | ethereum | Access Control Exploit / Arithmetic Error / Reentrancy | Access Control Attacks | View → | |
| 386 | Haven Protocol | $8.2M | haven | Other / Infinite Mint | — | View → | |
| 387 | bZx | $8.1M | ethereum | Other | — | View → | |
| 388 | Coinsbuy | $8.1M | - | - | — | View → | |
| 389 | Coinsbuy | $8.1M | ethereum, tron | Access Control / Improper Access Control | Access Control Attacks | View → | |
| 390 | IoTeX | $8.0M | ethereum | Private Key Compromised / Access Control / Validator Key Compromised | Access Control Attacks | View → | |
| 391 | LI.FI | $8.0M | - | Other | — | View → | |
| 392 | Bittensor | $8.0M | - | Private Key Compromised (Supply Chain Attack) / Access Control / Malware | Access Control Attacks | View → | |
| 393 | HTX | $8.0M | ethereum | Private Key Compromised (Unknown Method) / Access Control / Hot Wallet Key Compromised | Access Control Attacks | View → | |
| 394 | BitKeep | $8.0M | - | Phishing | Phishing Attacks | View → | |
| 395 | Uniswap (Phishing Attack) | $8.0M | ethereum | Phishing | Phishing Attacks | — | |
| 396 | Uniswap | $8.0M | - | Phishing | Phishing Attacks | View → | |
| 397 | Thorchain DEX | $8.0M | ethereum | Refund Logic Exploit / Other / Withdrawal Logic Flaw | — | View → | |
| 398 | Nexus Mutual | $8.0M | ethereum | Key Leaked via Infrastructure | — | — | |
| 399 | Origin Protocol | $8.0M | ethereum | Flashloan Reentrancy Attack / Flash Loan Attack / Reentrancy | Flash Loan Attacks | View → | |
| 400 | LCX | $7.9M | ethereum | Private Key Compromised (Unknown Method) / Access Control / Key Leaked via Infrastructure | Access Control Attacks | View → |
Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.
Understanding the Pattern Behind Billion-Dollar Losses
The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.
For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.
Frequently Asked Questions
How is this leaderboard ranked?
Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.
Does this include every attack type?
It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.
How can I learn to prevent these exploits?
Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.
Learn to Prevent High-Impact Smart Contract Hacks
$104B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.