Record Number of Crypto Hacks, and Much Less Money Stolen
Researchers counted 207 incidents in the first half of the year, more than double a year earlier, while total losses fell 57% to about $972 million — with state-linked groups responsible for two-thirds of it.
Two numbers describe crypto security in the first half of 2026, and they point in opposite directions.
Researchers recorded 207 hacks and exploits, more than double the 83 in the same period a year earlier and the highest six-month count on record. Total funds stolen fell about 57%, to roughly $972 million.
More attacks, less money. Both facts have the same underlying cause.
The industry hardened, and attackers adapted
The largest thefts of previous years came from smart contract bugs in protocols holding enormous pooled balances. Years of audits, bug bounties and formal verification have made those failures rarer and smaller.
So attackers moved. For the first time, compromised keys and accounts — not code flaws — were the leading cause of decentralized finance incidents by count. That is a shift from breaking software to breaking people: phishing, social engineering, and in the most sophisticated cases, operatives obtaining employment or trust inside a target organization over months.
Two of the year's largest incidents followed that pattern, including a $285 million theft from a derivatives protocol in April in which attackers spent months engineering their way around multi-signature controls, and a $292 million exploit of a cross-chain bridge with a single-verifier configuration.
The state-sponsored share
Groups linked to North Korea accounted for roughly $643 million, about two-thirds of everything stolen in the period. That concentration turns crypto security from a private engineering problem into a national security one, and it explains why blockchain analytics firms now work as closely with law enforcement as with exchanges.
What it means for the market
Losses of this size are small relative to a market capitalization in the trillions, and they no longer move prices the way they did in earlier cycles. The consequences show up elsewhere: in insurance costs, in custody requirements written into institutional mandates, and in the regulatory frameworks now being drafted.
The industry's argument for the past two years has been that it has matured enough to hold institutional money. Halving the amount stolen while the number of attempts doubled is the strongest evidence yet for that claim — and the concentration of losses in a handful of very large, socially engineered breaches is the strongest evidence against complacency about it.
