The Biggest Crypto Hacks Since 2025, Ranked by Money Lost
Crypto hacks have wiped out billions of dollars since 2025, with some of the industry’s biggest platforms suffering massive breaches. The Bybit hack alone resulted in an estimated $1.5 billion in losses, dwarfing every other attack on the list.
This graphic, produced in partnership with Inigo, ranks the 10 biggest crypto hacks since 2025 by the value of assets stolen.
Ranking the Most Costly Crypto Hacks
Bybit’s February 2025 breach became the largest crypto hack in history. Hackers compromised a third-party developer’s workstation and secretly inserted malicious code into the transaction process.
The manipulation made a transfer appear legitimate, while the funds were actually being routed to wallets controlled by the attackers.
| Rank | Company | Amount | Date |
|---|---|---|---|
| 1 | Bybit | $1.5B | Feb 21 2025 |
| 2 | KelpDAO | $292M | Apr 18 2026 |
| 3 | Drift Trade | $285M | Apr 1 2026 |
| 4 | Cetus | $223M | May 22 2025 |
| 5 | Balancer | $128M | Nov 3 2025 |
| 6 | Bitget | $100M | Apr 20 2025 |
| 7 | Nobitex | $90M | Jun 18 2025 |
| 8 | Phemex | $85M | Jan 23 2025 |
| 9 | UPCX | $70M | Apr 1 2025 |
| 10 | Infini | $50M | Feb 24 2025 |
Source: The Block, Yahoo Finance, Binance and Chainalysis. Data as of Apr. 30, 2026. Based on the value of crypto assets lost in the hack, which in some cases was partially recovered later.
The next two largest crypto hacks both occurred in April 2026. In the case of KelpDAO, attackers compromised a third-party system used to verify transactions between blockchains.
The breach allowed hackers to fake a deposit of collateral and trigger the release of roughly $292 million in crypto assets that were never actually backed. In simple terms, the system believed valid collateral had been locked on one blockchain, so it approved the transfer of real funds on another.
In the Drift Trade hack, attackers used social engineering to gain privileged access to the platform. Once inside, the hackers created a fake token, manipulated its value to make it appear legitimate, and used it as collateral to borrow roughly $285 million in real crypto assets—despite the collateral being effectively worthless.
Weaknesses in Crypto Security
Many of the biggest crypto hacks since 2025 were caused by weaknesses in third-party crypto systems and infrastructure. The KelpDAO attack, for example, highlighted how security gaps between platforms and external partners can create opportunities for attackers—especially when critical transactions do not require additional verification steps.
The recent wave of attacks also underscores the growing importance of real-time on-chain threat detection, automated security controls, and stronger oversight of partner integrations.