#What do the recent hacking incidents reveal about cryptocurrency security?
The first half of 2026 stands out as a particularly precarious time for the cryptocurrency sector, as it has recorded the highest number of hacks in any six-month period. Blockaid’s report, released on July 28, highlights 212 confirmed exploits that resulted in losses exceeding $1.1 billion across various platforms, wallets, and infrastructure in the crypto ecosystem.
Interestingly, while the incident count reached an unprecedented peak, the financial losses actually decreased compared to prior years. In 2025, approximately $2.3 billion was lost, heavily influenced by the catastrophic Bybit incident, which alone contributed to a $1.5 billion loss. Without factoring in such significant breaches, the figures for 2026 would paint an even grimmer picture.
#How did North Korea contribute to the losses?
Entities linked to North Korea played a substantial role in the losses during this period, accounting for roughly 66% of total stolen funds. This information comes from independent tracking by TRM Labs, which identified 207 hacking incidents resulting in approximately $972 million being siphoned off. Two notable attacks included the KelpDAO exploit and the Drift Protocol incident, leading to losses of around $292 million and $285 million, respectively. Together, these events contributed to over half of all funds lost during this timeframe.
A sharper way to see the markets in just 5 minutes.
Same news, different lens. We cut through the noise and hand you the overlooked ideas and the deeper read the crowd misses. Join 38,000+ investors seeing the markets differently.
#What types of attacks were most effective?
Although infrastructure breaches, which include various social engineering attacks, made up a smaller portion of the incidents, they were responsible for approximately 76% of the total value lost. Conversely, smart contracts emerged as the prevalent target for hackers, with TRM Labs documenting around 125 out of the 207 recorded incidents as smart contract exploits. This indicates a systemic vulnerability within smart contracts that could benefit from improved engineering practices.
Ethereum and Solana were the chains that suffered the heaviest losses, with stolen amounts of $332 million and $326 million respectively. Together, these two platforms accounted for close to 60% of all stolen funds in this period.
#Why is there a discrepancy between the number of incidents and total losses?
Despite tracking 212 incidents, Blockaid noted a loss of $1.1 billion. Dividing that figure by the number of incidents reveals an average loss of around $5.2 million per exploit, which is comparatively lower than the nearly $10 million average loss per exploit in H1 2025, again skewed by the Bybit breach. The landscape is evolving, with the increase in protocols and bridges contributing to a growing attack surface. Averaging more than one breach per day highlights the urgency for enhanced security measures.
#What implications do these findings have for regulatory oversight?
The significant role of North Korean-linked groups in the crypto thefts raises additional questions regarding regulatory scrutiny. With an estimated $643 million funneled through crypto platforms, governments may argue for stricter regulations. The 125 smart contract vulnerabilities identified could potentially be mitigated through more rigorous engineering standards, while the high-value targets of infrastructure breaches indicate that more focused security measures are essential.
Investors should stay vigilant as the threat landscape continues to evolve. Understanding these dynamics will not only help in mitigating risks but also in making informed decisions in the fast-paced world of cryptocurrency.