Crypto hacks in 2026 totaled $1.3 billion, marked by fewer but more targeted attacks.
Security & Exploits ·
Cryptocurrency theft reached $1.3 billion across 344 on-chain incidents in the first half of 2026, according to CertiK's Hack3D report. While this represented a nearly 47% decline from the prior year, the comparison is misleading: stripping out 2025's single $1.45 billion Bybit theft leaves 2026 roughly 28% higher on a comparable basis. The incident count also rose, with 194 exploits in the second quarter alone versus 145 a year prior.
The composition of losses shifted dramatically toward operational vulnerabilities rather than code flaws. Two incidents—the Kelp DAO and Drift Protocol breaches in April—accounted for nearly 44% of all H1 losses despite neither involving audited smart contract bugs. Wallet compromise emerged as the costliest attack category at over $444 million, averaging $13 million per event. Attackers increasingly targeted developer credentials, API keys, and deployment infrastructure rather than hunting for protocol code vulnerabilities.
Phishing attacks exemplified the trend toward precision targeting. While the number of phishing attempts fell by more than half, losses remained relatively stable, with just four sophisticated social-engineering operations producing roughly $310 million in total phishing losses. Classic code bugs, though still the most frequent attack vector at 204 incidents, accounted for a small fraction of total theft value.