Crypto Hacks in First Half of 2026 – Report

Cryptocurrency hacks remain one of the industry’s most persistent security challenges. Attackers carried out 207 separate hacks and stole USD 972 million in the first half of 2026.

The largest incident targeted Drift Protocol, where attackers stole approximately $295 million, making it the biggest cryptocurrency hack of H1 2026.

Compared with H1 2025, the industry experienced more attacks but significantly lower financial losses, reporting around $2.3 billion last year. This indicates that attackers are increasingly focused on a larger number of smaller and medium-sized exploits.

Smart contract vulnerabilities remained the most common attack vector, while private key compromises and infrastructure breaches accounted for many of the largest individual losses.

Ethereum remained the most targeted blockchain, recording 56 incidents, followed by BNB Chain, Base, and Arbitrum. This is due to its dominant DeFi ecosystem and the significant value of assets secured on the network.

According to blockchain security researchers, North Korean linked threat groups accounted for roughly $643 million, or around 66% of all crypto funds stolen during H1 2026. Nearly all of that loss came from the Drift Protocol and KelpDAO attacks.

The data shows a clear difference between ordinary hackers and highly organized state-backed hacking groups carrying out much bigger attacks.

List of Crypto Hacks H1 – 2026

What’s more concerning from these attacks is that, out of the largest hacks, only one project fully recovered its stolen assets, while two others managed to freeze just over $74 million.

More than $620 million remained effectively lost. This is due to an increase in attack techniques, which continue to evolve.

Breaking Down H1 2026 Crypto Hacks

Looking at the table, attack activity continued to increase during the first half of 2026. May recorded the highest number of hacks (41), followed by June (36) and April (34). 

However, April caused the biggest losses, with hackers stealing about $631 million, nearly 68% of all crypto losses in the first six months of the year.

Top Security Threats Facing Crypto

1. Private Keys Became More Valuable Than Smart Contract Bugs

Although smart contract vulnerabilities remained the most common attack type, the largest financial losses, around 40% of all, came from compromised private keys and administrator credentials. 

This includes Drift Protocol, Humanity Protocol, Resolv, Wasabi Protocol, Gravity Bridge, Fluid, StablR, and Polymarket, where attackers compromised private keys backed up on a developer’s local machine via targeted malware.

2. Oracle Manipulation Is Still a Big Problem

Oracle manipulation is still one of the biggest risks for DeFi. Hacks on Blend Pools V2, Aave V3, Sharwa Finance, Edel, and Ploutos Money show that wrong price data can help hackers steal funds and drain liquidity. Even projects that passed security audits were affected when their price feeds failed.

3. AI-Based Crypto Scams Are Rising Fast

AI-powered crypto scams are increasing every day. According to the Chainalysis 2026 Crypto Crime Report, these scams make about 4.5 times more money than traditional scams.

Hackers now use AI-generated videos and voices to fool exchange identity checks (KYC), trick customer support teams, and pretend to be company executives to approve large crypto transfers.

They also use AI bots that work 24/7, allowing them to launch personalized scams against crypto users.