The first half of 2026 marked the most-hacked six-month period in cryptocurrency history by incident count, with Blockaid verifying 212 exploits that drained over $1.1 billion. North Korea-linked actors drove approximately 66% of these losses, primarily through the $292 million KelpDAO and $285 million Drift Protocol breaches. While smart contract bugs remain the most frequent attack vector, infrastructure compromises like compromised keys and governance manipulation accounted for 76% of the stolen value, heavily impacting Ethereum and Solana.
H1 2026 exploit incidents
- ▪Immunefi reported that cryptocurrency projects lost approximately $972 million across 207 hack incidents during the first half of 2026.
- ▪Blockaid verified 212 exploit incidents during the first half of 2026, which is more than the firm recorded in the entirety of 2025.
- ▪Quill Audits reported that decentralized finance projects lost $935.3 million across 87 hacks during the first half of 2026.
- ▪Cryptocurrency projects lost over $1 billion across a record number of verified exploit incidents during the first half of 2026, according to a report by Blockaid.
North Korea-linked hacks
- ▪Blockaid stated that North Korean social engineering campaigns on LinkedIn targeting multi-signature signers compromised infrastructure to produce two of the four largest exploits in the first half of 2026.
- ▪North Korea-linked hackers accounted for the largest share of stolen cryptocurrency during the first half of 2026, including the $285 million Drift exploit and the $292 million KelpDAO exploit.
- ▪DPRK-linked actors were responsible for approximately 66% of total cryptocurrency losses in the first half of 2026, according to data from TRM Labs.
Infrastructure attack vectors
- ▪An attacker drained approximately $20 million from the BonkDAO treasury in July 2026 by spending $4 million to pass a malicious governance proposal in a low-turnout vote.
- ▪Infrastructure compromises, including social engineering attacks, were responsible for approximately 76% of the total value lost in cryptocurrency exploits during the first half of 2026.
- ▪Humanity Protocol lost more than $30 million in June 2026 due to a compromised private key on a team member's machine.
Ethereum chain losses
- ▪Blockaid stated that high-value protocols, including restaking, stablecoins, and decentralized exchange aggregators, concentrate on Ethereum, making it a primary target for mega code exploits.
- ▪Ethereum projects lost $332 million to exploits during the first half of 2026, representing the highest losses of any blockchain network.
Solana chain losses
- ▪Blockaid stated that attackers targeting the Solana blockchain focus on compromising signer infrastructure rather than exploiting smart contract code.
- ▪Ethereum projects lost $332 million to exploits during the first half of 2026, representing the highest losses of any blockchain network.
Smart contract vulnerabilities
- ▪Smart contract vulnerabilities were the most common attack vector by incident count in the first half of 2026, with TRM Labs attributing 125 of its 207 recorded incidents to contract exploits.
- ▪Immunefi research from 2021 to 2025 indicates that 93.9% of programs running five years or more surface a confirmed critical vulnerability.
Story comments
Loading comments…