🥇
Terra Classic
$40.00B
Most Expensive Crypto Hacks Leaderboard
The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.
-
$91B+
Total Value Lost
-
3595
Incidents Tracked
-
141
Chains Affected
-
65
$100M+ Incidents
Top 10 Biggest Hacks
Where the Largest Losses Concentrate
Top Chains by Losses
Top Techniques by Losses
Full Leaderboard
Showing 351-400 of 3595 ranked incidents
| Rank | Project | Amount Lost | Date | Chain | Technique | Attack Guide | Source |
|---|---|---|---|---|---|---|---|
| 351 | Pundi AI | $6.0M | - | Access Control | Access Control Attacks | View → | |
| 352 | DeltaPrime | $6.0M | arbitrum | Private Key Compromised (Unknown Method) / Access Control / Private Key Compromised | Access Control Attacks | View → | |
| 353 | Remilia | $6.0M | ethereum | Access Control / Private Key Compromised | Access Control Attacks | View → | |
| 354 | LendHub | $6.0M | heco | Collateral Offboarding Mistake / Incorrect Share Accounting / Other | — | View → | |
| 355 | Audius | $6.0M | ethereum | Malicious Governance Proposal / Malicious Proposal / Other | Access Control Attacks | View → | |
| 356 | My Big Coin | $6.0M | - | Rugpull | — | View → | |
| 357 | Kronos Dao | $6.0M | - | Other | — | View → | |
| 358 | MapleChange | $5.9M | - | Other | — | View → | |
| 359 | Loopscale | $5.8M | solana | Unvalidated pricing program | Oracle Manipulation & Price Manipulation | View → | |
| 360 | Squid Game | $5.7M | bsc | Rugpull / Drained Liquidity Pool / Liquidity Rug | — | View → | |
| 361 | EigenLayer | $5.7M | ethereum | Impersonation Scam | Phishing Attacks | — | |
| 362 | Roll | $5.7M | ethereum | Private Key Compromised (Unknown Method) / Access Control / Hot Wallet Key Compromised | Access Control Attacks | View → | |
| 363 | OKEx | $5.6M | ethereum classic | Forged Proof | — | — | |
| 364 | XSURGE | $5.6M | - | Flash Loan Attack | Flash Loan Attacks | View → | |
| 365 | Wasabi | $5.5M | base, berachain, blast, ethereum | Access Control / Deployer Key Compromised | Access Control Attacks | View → | |
| 366 | Agave | $5.5M | gnosis chain | Liquidation callback reentrancy | Flash Loan Attacks | View → | |
| 367 | Gravity Bridge | $5.4M | ethereum | Access Control / Validator Key Compromised | Access Control Attacks | View → | |
| 368 | ETERBASE | $5.4M | algorand, bitcoin, ethereum, tezos, tron, xrp | Access Control / Hot Wallet Key Compromised | Access Control Attacks | View → | |
| 369 | Friendsies | $5.3M | - | Rugpull | — | View → | |
| 370 | Bitstamp | $5.3M | bitcoin | Access Control / Phishing | Access Control Attacks | View → | |
| 371 | Aeternity | $5.2M | aeternity | Validator Key Compromised | — | — | |
| 372 | Truflation | $5.2M | - | Private Key Compromised (Malware) / Malware / Access Control | Access Control Attacks | View → | |
| 373 | BEAM | $5.2M | - | Phishing | Phishing Attacks | View → | |
| 374 | Cyrus Finance | $5.0M | bsc | Flashloan Pool Shares Exploit / Spot Price Manipulation | Flash Loan Attacks | View → | |
| 375 | BetterBank | $5.0M | pulsechain | Infinite Mint and Dump / Other / Reward Logic Flaw | — | View → | |
| 376 | ZKSwap | $5.0M | ethereum | Forged Proof | — | — | |
| 377 | ZKsync | $5.0M | zksync era | Private Key Compromised (Unknown Method) / Access Control / Private Key Compromised | Access Control Attacks | View → | |
| 378 | 1inch | $5.0M | ethereum | Calldata underflow and resolver hijack / Arbitrary External Call / Reentrancy | Access Control Attacks | View → | |
| 379 | PolyNetwork | $5.0M | polynetwork | Reentrancy / Unknown | Reentrancy | View → | |
| 380 | Loopring | $5.0M | loopring | Compromised guardian recovery service | Access Control Attacks | View → | |
| 381 | Poly Network | $5.0M | bsc, ethereum, polygon | Private Key Compromised (Unknown Method) / Forged Proof / Access Control | Access Control Attacks | View → | |
| 382 | Shata Capital | $5.0M | - | Access Control | Access Control Attacks | View → | |
| 383 | Osmosis | $5.0M | osmosis | Other / Withdrawal Logic Flaw | — | View → | |
| 384 | SurgeBNB | $5.0M | bsc | Flashloan Reentrancy Attack / Reentrancy | Flash Loan Attacks | View → | |
| 385 | Thorchain DEX | $5.0M | ethereum | Over-ride Logic Exploit / Other / Bridge Logic Flaw | — | View → | |
| 386 | XDX Swap | $5.0M | huobi eco chain | Other / Bridge Logic Flaw | — | View → | |
| 387 | Bitrue | $5.0M | cardano, ripple | Access Control / Improper Access Control | Access Control Attacks | View → | |
| 388 | Yapizon | $5.0M | bitcoin | Other / Hot Wallet Key Compromised | — | View → | |
| 389 | Astroport | $4.9M | neutron | Access Control / Malicious Proposal | Access Control Attacks | View → | |
| 390 | Shezmu | $4.9M | ethereum | Unprotected mint function | — | View → | |
| 391 | DeltaPrime | $4.8M | arbitrum, avalanche | Debt Swap Exploit / Other / Missing Input Validation | — | View → | |
| 392 | Super Sushi Samurai | $4.8M | blast | Infinite Mint and Dump / Infinite Mint | — | View → | |
| 393 | ZBExchange | $4.8M | multi chain | Other / Hot Wallet Key Compromised | — | View → | |
| 394 | Tapioca DAO | $4.7M | arbitrum | Private Key Compromised (Social Engineering) / Access Control / Impersonation Scam | Access Control Attacks | View → | |
| 395 | Secret Network | $4.7M | ethereum, secret | Unbacked Cross-Chain Mint | — | View → | |
| 396 | Ola Finance | $4.7M | fuse | Reentrancy / Other | Reentrancy | View → | |
| 397 | Aqua | $4.7M | - | Rugpull | — | View → | |
| 398 | DuelBits | $4.6M | ethereum | Suspected wallet-access compromise | Access Control Attacks | View → | |
| 399 | Bitcoin Savings and Trust | $4.6M | - | Rugpull | — | View → | |
| 400 | Future Protocol | $4.6M | bsc | Incorrect Share Accounting | — | — |
Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.
Understanding the Pattern Behind Billion-Dollar Losses
The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.
For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.
Frequently Asked Questions
How is this leaderboard ranked?
Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.
Does this include every attack type?
It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.
How can I learn to prevent these exploits?
Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.
Learn to Prevent High-Impact Smart Contract Hacks
$91B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.
Start your free security training
Get 25 free lessons and 4 guided exploit exercises.
Onboarding details by email within 2–3 business days.