🥇
Terra Classic
$40.00B
Most Expensive Crypto Hacks Leaderboard
The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.
-
$91B+
Total Value Lost
-
3595
Incidents Tracked
-
141
Chains Affected
-
65
$100M+ Incidents
Top 10 Biggest Hacks
Where the Largest Losses Concentrate
Top Chains by Losses
Top Techniques by Losses
Full Leaderboard
Showing 401-450 of 3595 ranked incidents
| Rank | Project | Amount Lost | Date | Chain | Technique | Attack Guide | Source |
|---|---|---|---|---|---|---|---|
| 401 | pNetwork | $4.6M | bsc | Misconfiguration / Key Leaked via Infrastructure | — | View → | |
| 402 | Across | $4.5M | solana | Other / Spoofed Event Log | — | View → | |
| 403 | CrediX | $4.5M | sonic | Private Key Compromised / Access Control | Access Control Attacks | View → | |
| 404 | TEDDY DOGE | $4.5M | - | Rugpull | — | View → | |
| 405 | xToken | $4.5M | ethereum | Flashloan Price Oracle Attack / Flash Loan Attack / Spot Price Manipulation | Flash Loan Attacks | View → | |
| 406 | Eleven Finance | $4.5M | bsc | Flashloan Burn Function Exploit / Other / Withdrawal Logic Flaw | Flash Loan Attacks | View → | |
| 407 | Picostocks | $4.4M | bitcoin | Private Key Compromised | Access Control Attacks | — | |
| 408 | Drop | $4.4M | neutron | Malicious Proposal | — | — | |
| 409 | Metawin | $4.4M | ethereum, solana | Access Control / Key Leaked via Infrastructure | Access Control Attacks | View → | |
| 410 | Raydium AMM | $4.4M | solana | Compromised pool-owner key | Access Control Attacks | View → | |
| 411 | Meter.io | $4.4M | ethereum | Other / Deposit Function Exploit / Missing Input Validation | — | View → | |
| 412 | ChainSwap | $4.4M | bsc, ethereum | Exploit Weak Authentication Check / Caller Impersonation | Access Control Attacks | View → | |
| 413 | ChainSwap | $4.4M | bsc, ethereum | Other / Bridge Logic Flaw | — | View → | |
| 414 | Radiant Capital | $4.3M | arbitrum | Flash Loan Attack / Flashloan New Market Exploit / Rounding Error | Arithmetic Overflow & Underflow Attacks | View → | |
| 415 | Terra (LUNA) | $4.3M | terra | Phishing | Phishing Attacks | — | |
| 416 | ALEX | $4.3M | stacks | Private Key Compromised (Phishing) / Access Control / Phishing | Access Control Attacks | View → | |
| 417 | AI Protocol | $4.3M | - | Phishing | Phishing Attacks | View → | |
| 418 | TronBank | $4.3M | tron | Backdoor Contract | — | — | |
| 419 | Link Drainer | $4.2M | - | Phishing | Phishing Attacks | View → | |
| 420 | Makina | $4.2M | ethereum | Flashloan Price Oracle Attack / Flash Loan Attack / Spot Price Manipulation | Flash Loan Attacks | View → | |
| 421 | DeFiAi | $4.2M | - | Rugpull | — | View → | |
| 422 | Shibarium | $4.1M | shibarium | Validator Stake Manipulation by Flashloan / Validator Key Compromised / Access Control | Access Control Attacks | View → | |
| 423 | Slope Wallet | $4.1M | solana | Wallet-key compromise | Access Control Attacks | View → | |
| 424 | Solfire | $4.1M | - | Rugpull | — | View → | |
| 425 | Suji Yan | $4.0M | - | Phishing | Phishing Attacks | View → | |
| 426 | Terraport Finance | $4.0M | terra classic | Other / Improper Access Control | Access Control Attacks | View → | |
| 427 | Kokomo Finance | $4.0M | optimism | Drained Contracts / Admin Drain / Rugpull | — | View → | |
| 428 | GMX Phishing | $4.0M | - | Phishing | Phishing Attacks | View → | |
| 429 | Webaverse | $4.0M | - | Other | — | View → | |
| 430 | Gala | $4.0M | - | Other | — | View → | |
| 431 | DAO Maker Vesting | $4.0M | ethereum | Access Control Exploit / Other / Improper Access Control | Access Control Attacks | View → | |
| 432 | Maze Protocol | $4.0M | - | Other | — | View → | |
| 433 | OneCoin | $4.0M | - | Rugpull | — | View → | |
| 434 | GBL | $4.0M | - | Rugpull | — | View → | |
| 435 | New Market Trading | $4.0M | arbitrum, base, ethereum | Improper Access Control | Access Control Attacks | View → | |
| 436 | Unleash Protocol | $3.9M | story | Multisig Governance Hack / Access Control / Private Key Compromised | Access Control Attacks | View → | |
| 437 | Flow Network | $3.9M | flow | Other / mint-and-dump Hack / Infinite Mint | — | View → | |
| 438 | ForceBridge | $3.9M | nervos | Acces Control Exploit / Improper Access Control / Access Control | Access Control Attacks | View → | |
| 439 | XCarnival | $3.8M | ethereum | Stale collateral order authorization | — | View → | |
| 440 | NEAR Intents | $3.8M | bsc | Bridge Logic Flaw / Other | — | View → | |
| 441 | B² Network | $3.8M | - | Access Control | Access Control Attacks | View → | |
| 442 | OnyxDAO | $3.8M | ethereum | Flash Loan Attack / Liquidation Logic Exploit / Liquidation Logic Flaw | Flash Loan Attacks | View → | |
| 443 | DODO AMM | $3.8M | ethereum | Access Control Exploit / Other / Improper Access Control | Access Control Attacks | View → | |
| 444 | Pink Drainer | $3.7M | - | Phishing | Phishing Attacks | View → | |
| 445 | Unknown User | $3.7M | - | Phishing | Phishing Attacks | View → | |
| 446 | Yo Yield | $3.7M | ethereum | Other / Slippage Exploit / Missing Slippage Check | — | View → | |
| 447 | Moonwell | $3.7M | base, optimism | Oracle Issue / Oracle Price Feed Manipulation / Spot Price Manipulation | Oracle Manipulation & Price Manipulation | View → | |
| 448 | UwU Lend | $3.7M | ethereum | Flashloan Price Oracle Attack / Flash Loan Attack / Spot Price Manipulation | Flash Loan Attacks | View → | |
| 449 | GMETA | $3.7M | - | Rugpull | — | View → | |
| 450 | Aperture Finance | $3.7M | base, bsc, ethereum | Other / Token Approval Abuse | Access Control Attacks | View → |
Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.
Understanding the Pattern Behind Billion-Dollar Losses
The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.
For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.
Frequently Asked Questions
How is this leaderboard ranked?
Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.
Does this include every attack type?
It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.
How can I learn to prevent these exploits?
Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.
Learn to Prevent High-Impact Smart Contract Hacks
$91B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.
Start your free security training
Get 25 free lessons and 4 guided exploit exercises.
Onboarding details by email within 2–3 business days.