Crypto hacks soared to unprecedented levels during the first six months of 2026, with 207 attacks recorded, more than double the number reported in the same period last year. Despite this spike, the total amount stolen remained under $1 billion, representing a significant decrease compared to the $2.3 billion lost in early 2025.
The majority of these breaches stemmed from smart contract exploits, which accounted for 60 percent of the cases. However, a closer look reveals a deeper issue: most of the lost value originated from failures in operational infrastructure such as compromised keys, custody systems, and signing mechanisms. This indicates that while code auditing has advanced, the security of the systems managing crypto assets has lagged behind.
North Korean-linked threat actors remained the dominant force behind these cyberattacks, responsible for approximately two-thirds of the stolen funds. Their influence was particularly strong in the first quarter of 2026, with their share peaking at over 75 percent before other groups increased activity, lowering it to 66 percent by midyear.
The decentralized finance (DeFi) sector suffered disproportionately from these attacks. A notable incident involved the KelpDAO exploit, where attackers used counterfeit tokens to manipulate lending protocols, leading to a liquidity crisis and a bank run on Aave pools. This event contributed to widespread investor mistrust and a flight of capital from DeFi platforms, totaling $55 billion in outflows during the first half of 2026.
As a result, the total value locked (TVL) in DeFi protocols has declined sharply, dropping to about $70 billion—a two-year low—down from $120 billion earlier in the year. This depletion of capital underscores the mounting security risks facing decentralized finance amid an already bearish market climate.
These trends highlight critical vulnerabilities in crypto infrastructure that extend beyond smart contract code, emphasizing the urgent need for enhanced operational security measures to protect digital assets and restore investor confidence.