Crypto Hack Losses Fall Nearly 50% in First Half of 2026, but Ecosystem Is No Safer

Onchain finance relies on public code and near-instant settlement, allowing attackers to move compromised assets within minutes after breaching private keys, bridges or smart contracts. Immunefi said the crypto industry lost about $972 million across 207 hacks in the first half of 2026. While losses stayed below $1 billion, the record incident count underscored the persistent security risk facing protocols, exchanges and investors.

Immunefi said in August that crypto hacks caused about $110 million in losses during July 2026. AFX Trade lost $24.15 million in a bridge attack on July 22, while Bonzo Lend suffered a roughly $9.05 million exploit on July 11. The platform also said its audit competitions had generated more than 10,000 vulnerability reports and paid over $6 million to researchers, with 80% of participating projects uncovering critical flaws previously missed by top-tier traditional audits.

Crypto “wrench attacks” use kidnapping, assault or other physical threats to force holders to surrender private keys or transfer digital assets. The tactic exploits a defining feature of cryptocurrency: blockchain transactions are generally irreversible, leaving victims with limited options once funds are sent. Criminal groups are also targeting relatives and other people close to wealthy holders, turning personal security into a growing risk alongside hacking and online fraud.

More than $30 million in cryptocurrency was stolen through violent attacks in the first half of 2026, according to a report from blockchain analytics firm Chainalysis, putting the year on pace for a record. The cases increasingly involved home invasions and threats against victims’ friends or family members. France recorded the largest number of publicly reported incidents through June 2026, emerging as the leading hotspot for such attacks.

Crypto security risks are increasingly concentrated outside smart-contract code, in the private keys, signers and governance systems that control access to digital assets. Security firm Immunefi says an audit can verify how a protocol’s code behaves without protecting the wider operational structure. Compromised credentials, excessive signer authority or weak governance can therefore allow attackers to move funds even when the underlying contracts contain no exploitable flaw.

As of July 30, 2026, cryptocurrency hacks had resulted in $972 million of stolen assets worldwide. Immunefi’s assessment found that most of the losses stemmed from failures involving private keys, authorized signers and governance controls rather than smart-contract vulnerabilities. The findings shift attention toward access management, key storage and approval procedures, underscoring that passing a code audit does not amount to a guarantee of system-wide security.

Crypto networks remain vulnerable because smart contracts and private-key authorization can allow attackers to move large sums rapidly when code or signing systems are compromised. The risks are particularly significant for Ethereum and Solana, which support extensive decentralized-finance ecosystems and handle substantial volumes of digital assets. Major breaches can inflict losses on users and protocols while undermining confidence in the security infrastructure supporting the broader cryptocurrency market.

Crypto-related hack losses exceeded $1 billion from January through June 2026 as the number of attacks reached a record high, according to a new report from blockchain security platform Blockaid. Ethereum recorded about $332 million in losses, while Solana suffered roughly $326 million, bringing their combined total to $658 million. Blockaid attributed much of the damage across the two networks to software vulnerabilities and breaches involving private-key signing structures.

Crypto wrench attacks use physical violence, detention or home intrusion to force digital-asset holders to surrender private keys or transfer funds. As cryptocurrency ownership expands, such crimes have become a growing security concern beyond conventional hacks and smart-contract exploits. They also expose a critical weakness in digital wealth protection: sophisticated wallet safeguards offer limited defense when attackers can identify and physically target an owner.

CertiK said global crypto wrench attacks rose 33.3% year on year in the first half of 2026, while financial exposure surged roughly twelvefold to $124 million. Home invasions overtook kidnappings as the leading form of attack during the six-month period, marking a shift toward assaults at victims’ residences. Europe accounted for 75% of reported cases, making it by far the largest regional concentration identified in the blockchain security company’s report.

Cybersecurity challenges have grown increasingly severe across the cryptocurrency market in recent years, affecting both investor confidence and the adoption and development of decentralized finance. As blockchain technology evolves, security concerns have shifted from common smart-contract vulnerabilities to less visible architectural weaknesses involving infrastructure, private-key management and cross-chain configurations. That has made attacks far harder to defend against and turned security into a key gauge of the industry's development.

Crypto projects suffered 207 hacks in the first half of 2026, an all-time high, according to a new report from blockchain security firm Immunefi. Total losses nevertheless fell sharply to $972 million, down nearly half from the same period last year. The figures suggest that while attacks have become significantly more frequent, projects' defenses and loss-containment measures are beginning to deliver results as the industry grows more mature.

Cryptocurrency platforms and cross-chain bridges hold large amounts of onchain assets, leaving them vulnerable to attackers who can drain substantial sums quickly when smart contracts or code contain flaws. Crypto security firm CertiK tracks such losses, with monthly changes reflecting cybersecurity risks across the industry and the impact of major attacks.

CertiK reported that losses from crypto exploits totaled $68.3 million in May 2026, down about 90% from $650 million in April. The month's larger losses stemmed from exploits involving the Verus Protocol cross-chain bridge and THORChain. By attack vector, code vulnerabilities were the leading cause of losses.

North Korea-linked hacking groups have long targeted cryptocurrency platforms, with organizations such as Lazarus particularly adept at attacking DeFi protocols. Because stolen assets can be moved rapidly across borders, such attacks not only threaten investors and protocol security but also renew concerns about North Korea obtaining funds through digital assets.

A TRM Labs report found that North Korea-linked hackers accounted for 76% of total cryptocurrency thefts in 2026. In April, hackers stole about $577 million from DeFi protocols including Drift Protocol and Kelp DAO over 18 days. Global crypto hack losses exceeded $630 million that month, the highest since February 2025.

Blockchain security company CertiK said the cryptocurrency industry faces AI-enhanced social engineering and attacks exploiting protocol vulnerabilities. North Korean hackers are also using generative AI to fabricate identities and make scams more convincing, exposing exchanges, DeFi protocols and investors' assets to increasingly complex risks across platforms.

A CertiK report showed that cryptocurrency hacks have caused more than $600 million in losses so far in 2026. It predicted that deepfakes, phishing and software supply-chain compromises will drive the year's biggest attacks. The company urged investors to improve their awareness of offline storage, multifactor authentication and transaction verification.

Blockchain security firm PeckShield tracks losses from cryptocurrency hacks and scams, providing a gauge of risks involving DeFi protocols, private-key management and transaction security. Losses in February 2026 fell to their lowest level since March 2025, suggesting a temporary decline in major exploits, though phishing scams remain a significant threat.

Crypto hack and scam losses totaled $26.5 million in February 2026, down 69.2% from January and their lowest level in nearly 11 months, according to PeckShield. Major incidents during the month included a price-manipulation attack on YieldBlox and losses at IoTeX stemming from a private-key leak.