Crypto projects lost between $1.1 billion (Blockaid) and $1.32 billion (CertiK) across 212 to 344 verified incidents in the first half of 2026, making it the most-hacked six-month period on record by incident count. The disparity between the two trackers reflects differing methodologies — Blockai...
"There will be hacks. The question is, is it going to be in your company or not. If a nation state is after you, it's going to be very hard." — Ronghui Gu, CEO, CertiK
Crypto projects lost between $1.1 billion (Blockaid) and $1.32 billion (CertiK) across 212 to 344 verified incidents in the first half of 2026, making it the most-hacked six-month period on record by incident count. The disparity between the two trackers reflects differing methodologies — Blockaid counts on-chain exploits only; CertiK includes phishing, social engineering, and physical coercion — but both firms agree on the structural shift: the weakest link has moved from code to keys and people.
North Korea's Lazarus Group and its TraderTraitor subunit accounted for approximately 55% of on-chain losses, or $609 million, according to TRM Labs. Two attacks — the $292 million KelpDAO bridge drain and the $286 million Drift Protocol vault compromise — together represented 76% of all attributed hack value. Neither exploit relied on a code vulnerability. Both were infrastructure and personnel compromises executed over months of social engineering.
The downstream effects exceeded the direct theft. KelpDAO's April 18 exploit triggered $13.21 billion in DeFi TVL outflows within 48 hours — a 45:1 contagion ratio. Aave's deposits fell from $26.4 billion to $14.3 billion. By mid-2026, total DeFi TVL had declined 39% year-to-date, according to CryptoRank.
Blockaid's mid-year security report, published July 29, 2026, documented 212 verified on-chain exploits totaling $1.1 billion in losses. This incident count was 3.4 times the number of high-threshold exploits recorded across all of 2025. CertiK's Hack3d: H1 2026 report placed the figure higher at $1.32 billion across 344 incidents, including off-chain vectors such as phishing ($366 million across 63 incidents) and physical coercion.
Total dollar losses remained below H1 2025's peak, which included the $1.5 billion Bybit hack — the single largest crypto exploit in history. However, the frequency of attacks accelerated materially: more individual incidents in six months than in any prior full calendar year.
The top four incidents — KelpDAO ($292M), Drift Protocol ($285M), CowSwap ($50.4M), and Humanity Protocol ($36M) — accounted for approximately $663 million, or 60% of Blockaid's total.
| Metric | H1 2026 | H1 2025 | Change | |---|---|---|---| | Verified on-chain exploits (Blockaid) | 212 | ~62 | +3.4x | | Total losses (Blockaid) | $1.1B | ~$1.8B* | -39% | | Total losses (CertiK) | $1.32B | — | — | | Lazarus-attributed losses | $609M | — | — | | Average loss per incident | $5.2M | — | — |
*H1 2025 included the $1.5B Bybit hack.
KelpDAO — April 18, 2026 — $292 million. Attackers linked to the Lazarus Group drained 116,500 rsETH from KelpDAO's liquid restaking protocol via its LayerZero cross-chain bridge. No code vulnerability was exploited. The breach centered on a misconfigured 1-of-1 Decentralized Verifier Network (DVN) setup, where a single compromised node was sufficient to validate fraudulent cross-chain messages. Attackers compromised internal RPC nodes and DDoS'd external nodes to isolate the verification layer. According to Chainalysis's post-incident analysis, the attackers spent months in preparation.
LayerZero acknowledged the configuration failure. "We made a mistake by allowing our DVN to act as a 1/1 DVN for high-value transactions," CoinDesk reported on May 9. KelpDAO disputed this characterization, arguing the root cause was a compromise of LayerZero's infrastructure, not a client-side misconfiguration.
Drift Protocol — April 1, 2026 — $286 million. Attackers emptied Drift's core vaults on Solana in 12 minutes using pre-signed administrative transactions. The operation relied on Solana's "durable nonces" feature: attackers built relationships with Drift Security Council members over months, eventually persuading them to unknowingly pre-sign transactions that transferred admin control. Drift's TVL collapsed from $550 million to under $250 million. Elliptic and TRM Labs attributed the attack to DPRK-linked actors based on laundering patterns and on-chain timestamps.
CertiK's data shows wallet compromise was the costliest attack vector in H1 2026: $444.5 million stolen across 33 incidents. Phishing ranked second at $366.3 million across 63 incidents. Smart contract code exploits — historically the dominant category — fell to third.
Blockaid's chain-level breakdown tells a similar story. Ethereum-based projects lost $332 million, primarily from code vulnerabilities. Solana-based projects lost $326 million, with 98% or more attributed to compromised keys and signing infrastructure rather than protocol bugs.
"The weakest link has moved from code to keys and people," CertiK CEO Ronghui Gu told Forbes on July 17, 2026. The shift reflects improved smart contract auditing practices — and attacker adaptation. Operational security failures and key theft now account for approximately 74% of total losses, according to Blockaid.
Cross-chain bridges remained the most targeted infrastructure class, with at least eight major bridge exploits in 2026 totaling $328.6 million in losses. The July 22-23 double breach of AFX Trade ($24.15 million) and Verus ($7.54 million) demonstrated the pattern's persistence: private key compromise of bridge validators, inadequate challenge periods, and rapid fund laundering through Tornado Cash.
The economic damage of crypto exploits extends well beyond the direct theft. KelpDAO's $292 million drain produced $13.21 billion in DeFi TVL outflows within 48 hours — a 45:1 contagion multiplier. For every dollar stolen, $45 of capital fled the sector.
Aave, the largest DeFi lending protocol, bore the brunt. Its TVL dropped from $26.4 billion to $14.3 billion — a 46% decline — as depositors pulled funds to avoid potential contagion from rsETH exposure. The protocol absorbed approximately $196 million in bad debt, according to CoinDesk.
April 2026 became "Black April" for DeFi. Industry trackers counted more than 20 separate exploits, with cumulative losses reaching $606 million in 18 days. Total DeFi TVL fell 39% year-to-date by mid-2026, according to CryptoRank, declining to $70 billion.
This contagion dynamic — where a single exploit triggers multi-billion-dollar capital flight from unrelated protocols — represents a systemic risk factor that aggregate hack loss figures fail to capture. The direct cost of H1 exploits was $1.1 billion. The indirect capital displacement was an order of magnitude larger.
Blockaid's report flagged AI agents with wallet access as the most likely source of novel exploit categories in H2 2026. The firm projected that AI agent deployments in crypto are growing approximately tenfold per year, expanding the attack surface proportionally.
Two categories of AI-specific attacks have already been documented:
Prompt injection. In May 2026, an attacker drained approximately $175,000 in DRB tokens from an AI agent's wallet by injecting malicious instructions through an NFT metadata field, according to SlowMist and OECD.AI incident records. A separate incident saw $170,000 extracted from a Grok-connected wallet in under one minute without code exploitation.
Permission chain abuse. CertiK described a category in which one AI system's output is treated as trusted financial authorization by a second system, with no independent verification of intent or source. An AI agent with wallet access functions as "a new kind of privileged key holder, except its decision-making can be manipulated through inputs in ways a human might catch and a poorly-guardrailed agent won't," CertiK's report stated.
SlowMist recommended that natural language outputs from AI systems be "strictly decoupled" from financial execution, and that high-value operations require multi-factor verification and anomaly detection.
CertiK's Intel3D report, published July 23, 2026, documented 52 verified wrench attacks in H1 2026, up 33.3% from 39 in H1 2025. Financial exposure rose from $10.5 million to $124.1 million — an 11.8x increase. Average exposure per incident climbed from $270,000 to $2.39 million.
Home invasions accounted for the sharpest increase: from 1 incident in H1 2025 to 20 in H1 2026. Kidnappings rose from 12 to 16. Four incidents involved torture; one involved murder.
Europe accounted for 39 of 52 verified cases. France alone represented 33, a concentration CertiK attributed to the country's visible crypto ecosystem and major data breaches (ANTS, France Travail) that exposed personal information of crypto holders.
CertiK cautioned that the figures reflect only publicly verified cases and that actual incidence is likely higher.
Blockaid's data split H1 losses roughly evenly between Ethereum ($332M) and Solana ($326M), with distinct attack profiles:
Ethereum: Losses concentrated in code vulnerabilities and bridge infrastructure failures. The KelpDAO exploit accounted for the majority. EVM Layer-2 exploits included incidents on Arbitrum (related to EIP-7702 implementation) and Aztec (ZK proof-boundary issues).
Solana: Over 98% of losses stemmed from compromised keys and signing infrastructure. Drift Protocol's administrative key compromise was the dominant incident. The chain's account model and durable nonces feature created attack vectors distinct from EVM-based chains.
Bridge infrastructure remained the connective tissue of cross-chain risk. LayerZero, the interoperability protocol underlying KelpDAO's bridge, processed transactions for dozens of protocols. A single misconfiguration in its verification layer enabled the year's largest exploit.
Not all stolen funds were permanently lost. Blockaid highlighted several recovery outcomes:
These recoveries, however, represent a fraction of total losses. The vast majority of stolen funds — particularly those attributed to state-backed actors — were laundered through mixing services and remain unrecovered. The AFX Trade attacker, for example, began routing funds through Tornado Cash within hours of the July 22 exploit.
The data describes an ecosystem in which security improvements in one domain — smart contract auditing — have pushed attackers toward softer targets: personnel, key management infrastructure, bridge configurations, AI agents, and the physical persons who hold crypto assets. The total economic cost extends far beyond the $1.1 billion in direct theft. When contagion-driven capital flight is included, the H1 2026 security environment displaced tens of billions in DeFi deposits and contributed to a 39% year-to-date decline in total value locked.
For protocol operators, the Blockaid and CertiK reports point toward a consistent set of structural requirements: multi-party key management with geographic distribution, elimination of single-point-of-failure verification networks, strict decoupling of AI agent outputs from financial execution, and withdrawal delays with independent emergency freeze capabilities. The question, as CertiK's CEO noted, is no longer whether attacks will occur but whether individual protocols have implemented the operational safeguards to survive them.