In the first half of 2026, cryptocurrency projects lost more than US$1 billion due to vulnerabilities.
Blockaid, a blockchain security company, released a report on July 28 stating that in the first half of 2026, cryptocurrency projects lost more than US$1 billion due to vulnerability exploitation. The company said the number of verified attacks during the six-month period has exceeded the total for all of 2025.
Although the number of incidents increased, the total loss amount was lower than the same period last year. Data for 2025 was significantly affected by the $1.5 billion loss of Bybit's hacking, which remains the largest single cryptocurrency hacking incident in history.
North Korea-linked hackers stole nearly $600 million
Blockaid attributed two major exploits to hackers linked to the North Korean government. Among them, the Drift platform lost US$285 million and the KelpDAO platform lost US$292 million. Both incidents were related to related parties of the Democratic People's Republic of Korea (DPRK), totaling approximately US$577 million in the first half of the year.
These two incidents used the same tactic: a LinkedIn based social engineering attack that resulted in the multi-signer's accounts being hacked. Blockaid pointed out that this technique accounted for two of the four major incidents in this issue, and there are currently no structural changes to prevent its continued use.
The total losses calculated by multiple security companies vary. Immunefi recorded 207 incidents with approximately $972 million in losses;Quill Audits recorded 87 DeFi hacking incidents with $935.3 million in losses. All three companies confirmed that the first half of 2026 was the six-month period with the highest number of incidents in history. Immunefi also pointed out that DeFi vulnerability exploitation losses in 2026 have dropped by 74% from the peak in 2022.
Ethereum and Solana projects suffered the most
Ethereum (ETH)-based projects lost US$332 million during this period, the highest of any chain tracked by Blockaid. Projects based on Solana (SOL) followed closely, with a loss of $326 million. Blockaid said Ethereum's losses were concentrated on high-value agreements, including re-pledge platforms and decentralized exchange aggregators. Solana's losses stem mainly from attacks on the signer's infrastructure, not smart contract code vulnerabilities.
Blockaid's report lists AI proxy exploit as a risk in the second half of 2026. The $216,000 hack against the Bankr platform was the first such attack. The company said AI agent deployments are growing at a rate of about 10 times per year and expects more similar incidents to occur in the second half of 2026, with prompt injection being the most likely means, followed by tool abuse and unauthorized transaction signatures.

Exchange Ranking
Top Exchanges
24h Volume Ranking
Popularity Ranking
Exchange BTC Balance
Proof of Reserves
Decentralized Exchanges
Funding Rate
Funding Heatmap
Liquidation Data
Max Pain
Long/Short Ratio
Whale L/S Ratio
Binance/Okex/Huobi L/S
Bitfinex Margin L/S
ETF Tracker
Solana ETF
XRP ETF
Hong Kong ETF
Bitcoin Treasuries
Crypto Reversal
Ethereum Reserves
HyperLiquid Wallet Analysis
Hyperliquid Whale Watch
Large Transactions
On-chain Movement
Bitcoin ROI
Stablecoin Market Cap
Options Analysis
News
Articles
Economic Calendar
Features
Wallet
Contract Calculator
Security
Collections
Watchlist
Following
ETH
SOL