The Largest Crypto Hacks in History Ranked by Dollar Value and Bitcoin Stolen

Binance’s $6.3 Billion Catastrophe Places Crypto’s Greatest Heists Underneath the Microscope

Cryptocurrency has produced fortunes, technological breakthroughs, and a rare assortment of safety disasters. Some assaults exploited refined vulnerabilities in blockchain infrastructure, whereas others relied on stolen credentials, compromised non-public keys, or weaknesses within the human beings entrusted with defending billions of {dollars}.

The most recent reported incident involving Binance has pushed these historic comparisons again into the highlight. Based on the newest findings, roughly $6.3 billion to $6.4 billion in digital belongings was faraway from Binance wallets on Oct. 29, 2026, probably making it the biggest cryptocurrency theft ever recorded by greenback worth. The figures stay provisional, and the estimates attributed to blockchain analytics corporations shouldn’t be confused with the findings of a accomplished forensic investigation.

But greenback figures solely inform a part of the story. Bitcoin’s huge appreciation over the previous decade means an incident that seemed comparatively modest when it occurred can dwarf at this time’s billion-dollar exploits when measured within the amount of BTC stolen. In the meantime, the quantity initially taken doesn’t essentially symbolize the final word monetary harm, significantly when belongings are frozen, recovered, or reimbursed.

The 20 Largest Crypto Hacks Ranked by Greenback Worth

The primary comparability ranks cryptocurrency thefts by their estimated U.S. greenback values on the time of every incident somewhat than present-day valuations. It contains alternate breaches, bridge exploits, and unauthorized transfers, though the circumstances of sure circumstances complicate their classification as standard hacks. Recoveries and reimbursements are handled individually from the preliminary quantities compromised.

The primary placing statement is the gap separating Binance from the remainder of the sphere. Its reported $6.3 billion loss is greater than 4 instances the worth of Bybit’s February 2025 breach, beforehand considered the business’s largest single cryptocurrency theft by greenback worth.

However even the headline totals demand scrutiny. The BSC Token Hub exploit, for instance, concerned roughly $570 million in newly minted BNB, though considerably much less was efficiently moved past the affected ecosystem. Equally, the Poly Community attacker ultimately returned a lot of the stolen belongings, illustrating the appreciable distinction between the preliminary worth compromised and the quantity completely misplaced.

Binance, Bybit and the Billion-Greenback Period

The Oct. 29 Binance incident represents a brand new magnitude of reported alternate safety failure. Blockchain investigators traced roughly $6.3 billion in transfers throughout practically a dozen blockchains, together with Ethereum, Bitcoin, Tron, and Solana. Onchain slueths additional recognized 18,270 BTC among the many stolen belongings and attributed the operation to North Korea’s Tradertraitor group. Binance, in the meantime, pledged to cowl buyer balances by means of its emergency reserves and company assets, whereas companions reportedly froze roughly $3 billion in affected belongings.

The Bybit breach on Feb. 21, 2025, beforehand occupied the highest place. Attackers compromised the transaction approval course of throughout an ether cold-wallet switch, making a malicious transaction seem reputable to licensed signers. Roughly 400,000 ETH and associated belongings, valued at round $1.46 billion to $1.5 billion, have been stolen. The FBI subsequently attributed the assault to North Korean operatives, whereas Bybit secured further liquidity to honor buyer withdrawals.

Ronin, Poly Community and the Bridge Exploits

Ronin Community’s March 2022 assault demonstrated how a restricted variety of compromised validator keys may compromise a whole bridge. Attackers obtained management over 5 of 9 validators and withdrew 173,600 ETH alongside 25.5 million USDC. Relying on the valuation date, the stolen belongings have been value roughly $540 million to $625 million. U.S. authorities attributed the operation to North Korea’s Lazarus Group.

Poly Community suffered a unique form of catastrophe in August 2021. A flaw within the cross-chain protocol’s entry controls permitted unauthorized transfers valued at roughly $610 million. In contrast to most massive cryptocurrency thefts, nonetheless, the attacker subsequently returned practically all of the belongings, remodeling what initially seemed to be a catastrophic loss into one of many business’s most uncommon restoration episodes.

The BSC Token Hub incident in October 2022 concerned a vulnerability that permitted the unauthorized creation of two million BNB. Though these tokens carried a nominal worth approaching $570 million to $586 million, solely a fraction escaped the ecosystem earlier than intervention. That distinction issues as a result of newly minted tokens valued at market costs should not essentially equal to instantly realizable proceeds.

Coincheck, FTX and Mt Gox

Japan’s Coincheck misplaced roughly 523 million NEM tokens in January 2018 after attackers compromised a scorching pockets. The belongings have been value roughly $530 million on the time, making the incident one of many largest alternate breaches of its period. Coincheck subsequently compensated affected prospects utilizing firm funds.

FTX skilled an estimated $450 million to $477 million in unauthorized cryptocurrency transfers throughout its November 2022 collapse. The withdrawals occurred amid chapter proceedings and a rare breakdown in company controls. As a result of the incident coincided with broader insolvency and alleged misuse of buyer belongings, some historic rankings exclude it from standard hacking comparisons.

Then there’s Mt Gox, whose historic significance is sort of not possible to seize utilizing its authentic greenback valuation. The alternate disclosed roughly 850,000 lacking BTC in 2014, together with buyer and company holdings, earlier than finding roughly 200,000 BTC in an outdated pockets. The preliminary shortfall was valued round $473 million at chapter, however the remaining lack of roughly 650,000 BTC has turn out to be vastly extra consequential as bitcoin’s market worth has appreciated.

Bitget, Wormhole and Liquid Community

Bitget’s reported September 2026 incident initially carried an estimated worth of $351.6 million, subsequently revised to roughly $387.5 million after investigators recognized further affected belongings. The provided analysis describes compromised withdrawal infrastructure and says the alternate supposed to make use of its safety fund to cowl buyer losses. Attribution to North Korean actors stays an evaluation somewhat than a confirmed official discovering.

Wormhole misplaced roughly $320 million to $326 million in February 2022 when attackers exploited a signature-validation vulnerability to create 120,000 wrapped ETH with out the required backing. Bounce Crypto later replenished the lacking collateral, stopping the exploit from changing into an equal everlasting loss for customers.

The September 2026 Liquid Community incident concerned roughly 4,000 BTC, with the provided account describing the actors as white-hat hackers who later returned 3,400 BTC. That account requires cautious therapy: the claimed return considerably adjustments the financial impression, and the analysis doesn’t present an entire primary-source reconstruction of the occasion.

DMM Bitcoin, KelpDAO and Drift Protocol

DMM Bitcoin misplaced 4,502.9 BTC in Might 2024, valued at roughly $305 million to $308 million. Investigators tied the theft to North Korean social engineering concentrating on a wallet-management supplier. The Japanese alternate finally organized buyer compensation and wound down its operations, exhibiting how a safety incident can turn out to be an existential enterprise downside even when reimbursement is promised.

Two reported incidents in April 2026 added one other estimated $577 million to the business’s safety invoice. KelpDAO suffered an roughly $292 million compromise involving off-chain infrastructure, whereas Drift Protocol misplaced an estimated $285 million to $295 million. Investigators suspected North Korean involvement within the Drift incident, though the attribution remained provisional within the provided materials.

Kucoin, WazirX, Cetus, Mixin, Euler and Nomad

Kucoin’s September 2020 breach concerned compromised hot-wallet non-public keys and estimates starting from $150 million to $280 million in affected belongings. The alternate subsequently reported recovering a considerable proportion of the funds by means of monitoring, freezes, and cooperation with different platforms, illustrating how coordinated responses can cut back an assault’s lasting monetary penalties.

WazirX suffered roughly $230 million to $235 million in losses in July 2024 after a multisignature pockets was compromised. The incident disrupted withdrawals and buying and selling, triggering restructuring and restoration efforts. The assault was attributed to the Lazarus Group, with the custody association itself changing into a central focus of scrutiny.

The remaining circumstances illustrate how vulnerabilities prolong properly past centralized exchanges. Cetus Protocol’s Might 2025 exploit concerned roughly $223 million, whereas Mixin Community reported roughly $200 million in losses in September 2023. Euler Finance misplaced roughly $197 million in March 2023 by means of a flash-loan-assisted exploit, though negotiations finally resulted within the return of roughly 90% of the stolen funds. Nomad Bridge, in the meantime, suffered an roughly $190 million exploit in August 2022 after a message-validation weak spot allowed fraudulent withdrawals.

The Greatest Bitcoin Thefts Inform an Totally Totally different Story

Greenback-denominated rankings favor newer incidents, when cryptocurrency markets commanded considerably greater valuations. Measuring historic thefts by the variety of bitcoin stolen produces a dramatically completely different hierarchy, one dominated by early alternate breaches, compromised wallets, and losses that occurred when BTC traded at a fraction of its present-day worth.

For comparability, the rating desk under makes use of a set reference worth of $78,000 per bitcoin. These calculations are hypothetical valuations of historic BTC portions, not estimates of the belongings nonetheless managed by attackers or the quantities that might realistically be recovered.

This comparability adjustments the complete historic hierarchy. Mt Gox’s authentic reported shortfall of 850,000 BTC would carry a hypothetical valuation of $66.3 billion at $78,000 per coin, greater than ten instances the estimated greenback worth of the October 2026 Binance incident. Even the roughly 650,000 BTC remaining after the old-wallet discovery can be value $50.7 billion on the identical reference worth.

The 2016 Bitfinex theft additionally turns into significantly extra imposing when measured in bitcoin. Attackers took 119,756 BTC, value roughly $72 million on the time. On the reference worth used on this evaluation, an identical quantity can be value roughly $9.34 billion, though U.S. authorities subsequently seized a considerable portion of the stolen cash.

Lubian Mining presents one other extraordinary however disputed case. Arkham Intelligence alleged that 127,426 BTC was stolen from the mining operation in December 2020 due to weaknesses in private-key era. The alleged loss can be value roughly $9.94 billion at $78,000 per coin. Nonetheless, unresolved questions on possession, the mechanism, and later U.S. seizure proceedings imply it shouldn’t be introduced as a conclusively established alternate or mining-pool hack.

Early cryptocurrency historical past additionally contains the Linode-linked thefts affecting a number of companies in 2012, the reported lack of 25,000 BTC from the pockets referred to as Allinvain in 2011, and incidents involving Cryptsy, Bitstamp and Mintpal. These circumstances have been financially smaller at modern bitcoin costs, however their BTC portions are huge in contrast with many trendy exploits.

Binance’s October 2026 incident additionally warrants inclusion within the bitcoin-denominated comparability, with the alternate recording 18,270 BTC among the many belongings transferred in the course of the reported outflows. That’s separate from the roughly 7,000 BTC stolen from Binance in Might 2019. The newer incident’s bitcoin element alone can be value about $1.43 billion on the $78,000 reference worth, though its general greenback worth was pushed by a wider assortment of digital belongings.

CZ Says the Largest Greenback Theft Is Not the Largest Bitcoin Theft

Binance founder Changpeng Zhao, extensively referred to as CZ, addressed the excellence between dollar-denominated losses and bitcoin portions in a press release provided for this report. His argument facilities on a deceptively easy level: the largest headline determine doesn’t essentially determine essentially the most consequential incident for customers, markets or the cryptocurrency provide.

“Noticed just a few discussions about dimension of hack, why impression to bitcoin worth is small, and many others. $6.3 billion is the largest in USD phrases, however not in BTC phrases. MtGox was 650,000 BTC,” Zhao wrote on X. “Different essential numbers to contemplate: % of bitcoin (in relation to BTC whole provide), ie, market impression. MtGox is large there once more at 5%+. Variety of customers impacted, and % of consumer belongings impacted. MtGox (the biggest CEX on the time) and FTX (not small) have been all close to 100% of customers and their [assets].”

CZ added:

“Most essential: Who’s impacted? Does the platform cowl all of it? (just one sufferer), as in latest two CEX circumstances and Binance. Clearly, nonetheless a significant catastrophe for the business, Binance (and me). It hurts, however we survive. Most significantly, we defend our customers.”

The assertion, reproduced as provided, raises an essential query about how the business measures safety failures. Gross theft figures describe the belongings compromised, however they don’t reveal how a lot prospects finally lose, whether or not the affected firm stays solvent or how a lot of the stolen cryptocurrency will be recovered.

Wall Avenue analysts are telling purchasers to purchase the dip after the $6.3 billion Binance hack, and Bitwise CIO Matt…