The short version
- Biggest crypto hacks: Binance’s breach, which the exchange puts at about $6.3 billion, is now No. 1, ahead of LuBian’s $3.5 billion (2020) and Bybit’s $1.5 billion (2025).
- Eight of the top 10 came down to stolen keys, logins or tricked signers rather than code bugs, and five of the top 15 happened in 2026.
- The crew is watching the $2.4 billion in ETH and BTC the attacker still holds after about $3 billion was frozen; TRM Labs blames North Korea’s TraderTraitor, the unit behind Bybit.
The biggest crypto hacks used to be measured against Bybit. Not anymore. On Thursday, an attacker pulled what Binance now puts at about $6.3 billion out of the world’s largest exchange, more than four times the $1.5 billion Bybit lost in February 2025 and more than the next two thefts on the list put together.
So where does everything else land? We went through all 1,330 incidents in DefiLlama’s hack database, checked the top of the list against company statements, FBI notices and on-chain research, and added the old Bitcoin heists a DeFi tracker can undercount.
This is Binance’s own account of the Binance hack, posted early Friday:
Binance's initial investigation suggests that the security incident may involve a compromised DevOps engineer’s laptop, which allowed an attacker to gain access to a service container and submit unauthorized withdrawal transactions. We have found no evidence of any wallet private
The Biggest Crypto Hacks in History, Ranked
How we ranked it: the dollar value of what left the victim’s wallets on the day it happened, before any freeze or return. A hack here means someone broke into a platform or its keys. Ponzi schemes and collapses don’t count, and neither do thefts from one person. Those come further down.
Five of the 15 happened in 2026, and three of them in the last eight weeks alone. Just outside the list sit PlayDapp ($290 million, 2024), KuCoin ($281 million, 2020) and India’s WazirX ($235 million, 2024). Any of them would have topped a ranking ten years ago, when Bitfinex’s $72 million was the big one.
Sponsored · Affiliate link
Save 20% on fees trading on WEEX
Base Camp may earn a commission if you sign up. It never affects what we write.
How Did Binance Take the Top Spot?
Through one laptop, by Binance’s first account of the largest crypto hack on record. The exchange said a DevOps engineer’s computer was compromised, which let the attacker into a service container that could send withdrawal requests. It has found “no evidence of any wallet private key leak.” It didn’t need one. A system allowed to ask for signatures got them.
Blockchain analytics firm TRM Labs traced $6.36 billion leaving Binance across ten chains, most of it in about 20 minutes from 20:05 UTC on Thursday. It blames TraderTraitor, North Korea’s top hacking unit, “with high confidence.”
Binance puts the frozen amount at about $3 billion, TRM at about $2.7 billion, much of it stablecoins Tether and Circle locked within hours. The attacker still holds more than 420,000 ETH and 18,270 BTC, about $2.4 billion no issuer can freeze. Binance says it will cover all losses from SAFU, its emergency fund for users, and company money.
LuBian, Bybit and Ronin: Who Came Next?
LuBian is the hack almost nobody saw. The Chinese mining pool lost 127,426 BTC on December 28, 2020, and neither side ever said a word. Arkham found it on-chain in 2025: the pool’s keys came from a weak generator that could be brute-forced. In October 2025, the US Justice Department moved to seize 127,271 BTC it ties to Prince Group chairman Chen Zhi, coins traced back to the LuBian wallets.
The Bybit hack was the record everyone quoted for 20 months. Attackers broke into a developer machine at its multisig wallet provider, Safe, and changed what Bybit’s signers saw on screen, so they approved a transfer that handed over a cold wallet. The FBI named North Korea within days. Bybit covered the hole and kept withdrawals open.
Ronin, the bridge behind the game Axie Infinity, lost 173,600 ETH and 25.5 million USDC in March 2022. The attackers held five of its nine validator keys, enough to sign any withdrawal they liked, and nobody noticed for six days. It took a user who couldn’t withdraw 5,000 ETH to raise the alarm.
Which Hacks Got the Money Back?
Fewer than you’d hope. Poly Network’s attacker returned nearly all $611 million in 2021, saying they had done it for fun. Euler’s $197 million came back in 2023. In September, the Liquid Network attackers returned about 85% of the Bitcoin they minted from nothing, and kept the rest, calling it a bounty.
Most of the others were covered, not recovered. Jump Crypto refilled Wormhole’s 120,000 ETH within a day. Bybit and Bitget paid from their own balance sheets, and Binance says it will do the same. The stolen coins themselves, mostly ETH and BTC that no issuer can freeze, were usually gone through mixers and swaps within weeks.
What If You Count Today’s Prices?
Then Mt. Gox wins by a mile. The Tokyo exchange said 850,000 BTC were gone when it collapsed in 2014, about $470 million then. At $78,227 per Bitcoin at the time of writing, that’s $66.5 billion. About 200,000 BTC later turned up in an old wallet, and repayments only started in 2024.
LuBian’s coins are worth about $10 billion today. Bitfinex, missing from the top 15 because it lost only about $72 million in August 2016, would be near $9.4 billion now for its roughly 119,750 BTC. US agents seized over 94,000 of them in 2022.
What Doesn’t Make This List?
Frauds and failures, however big. FTX’s collapse left an $8 billion hole in customer accounts, but that was the company’s own doing; only the $450 million drained on the night it filed for bankruptcy counts as a hack. Ponzi schemes such as PlusToken took in billions without breaking into anything.
Thefts from single holders stay off too. The largest of 2026 so far: on January 10, one person lost about $282 million in BTC and LTC after scammers posing as wallet support talked them out of it.
SIDE TRAIL: Crypto Hacks Fell to $129M in October, and DeFi Had Its Quietest Month of 2026
What Do the Biggest Crypto Hacks Have in Common?
People and keys, far more than code. Of the top 10, only Poly Network and the BNB Bridge were smart contract bugs. The other eight came down to private keys, logins, signers or a trusted machine. The FBI has tied three of the 15 to North Korea’s hackers: Ronin, Bybit and DMM Bitcoin. TRM now adds Binance and names the same TraderTraitor unit the FBI blamed for Bybit, so one team holds No. 1 and No. 3.
Crypto exchange hacks dominate because exchanges sit on the biggest pots. Seven of the top 15 were centralized exchanges, the top one included.
TRAIL MAP: Your First Crypto Wallet, Set Up Safely: Hot vs Cold and the Seed Phrase
For traders, that points one way: keep on an exchange only what you trade, and hold the rest in a cold wallet you control. Binance users will be made whole. The next exchange on this list might not have $6 billion to spare.
In crypto since 2016. Trades the macro picture and reads the market on the high timeframes.
More from TheCryptoMonk →
