Q2 2026 becomes most hacked crypto quarter

TLDR

Q2 2026 set a new record for crypto hacks by incident count, with hundreds of millions of dollars stolen and exploits happening almost daily.

1. Multiple analytics firms report roughly 70 to 85 exploits and about $750 to $775 million stolen in Q2 2026, the highest quarterly hack count on record.
2. Two giant DeFi exploits, Drift Protocol and KelpDAO, drove most of the dollar losses, while a long tail of smaller bridge and key theft attacks boosted overall frequency.
3. Rising exploit frequency is undermining confidence in DeFi, contributing to a sharp drop in total value locked and forcing users, teams and regulators to prioritize security and incident response.

Deep Dive

1. Record Hacks And Losses

DefiLlama logged about 70 exploits in Q2 2026 with roughly $746 million stolen, roughly double the previous record for incidents in a single quarter but with smaller average losses than prior peaks, according to a DefiLlama based report.

CryptoRank, cited by another market tracker, counted 85 incidents and about $775 million stolen in Q2 2026, still placing it as the worst quarter on record for exploit activity by count, even though earlier years saw larger single events and higher peak monthly losses.

Across 2026 so far, these datasets point to roughly 121 hacks and close to $1 billion in losses, with several reports noting that total annual losses could exceed $1.2 billion if the pattern continues into the second half of the year.

2. Attack Patterns And Drivers

The quarter was defined by a mix of a few mega exploits and many small hits. April 2026 alone saw 28 to 30 incidents and more than $625 million stolen, dominated by the Drift Protocol exploit and the KelpDAO breach, which together accounted for over 90 percent of April losses, according to Q2 hack tallies.

DefiLlama and security firms highlight a shift from rare, huge exploits to a constant stream of smaller attacks, often under $5 million, many under $1 million. This pattern is consistent with bridges and cross?chain infrastructure being a favored target, along with key theft via phishing and social engineering, as described in incident breakdowns.

Nation state linked actors, especially North Korean groups, remain important. One report finds that in the first four months of 2026 they accounted for roughly 76 percent of global crypto hack losses, prompting a joint US Japan South Korea initiative to crack down on these operations, as detailed in a trilateral cooperation update.

3. DeFi Impact And What To Watch

These exploits hit decentralized finance (DeFi) particularly hard. CryptoRank data shows DeFi total value locked (TVL, the amount of capital deposited in DeFi protocols) dropping about 39 percent year to date, from roughly $115 billion in January to around $70 billion by late June, according to a DeFi TVL analysis.

Security firms note that while fund segmentation and risk controls may be limiting the size of individual losses, the sheer frequency of attacks is eroding user confidence, leading users to withdraw capital or concentrate it in a smaller set of perceived safer venues. Regulatory and technical responses, including better bridge design, stronger key management and patching of widely used enterprise software, are likely to shape how much risk remains in the system.

Confidence: high because DefiLlama, CryptoRank and PeckShield independently report similar Q2 incident counts and loss ranges.

Conclusion

Q2 2026 marked a structural shift in crypto security, with record exploit frequency and mid sized losses that add up over time. A handful of very large DeFi hacks, combined with a steady stream of bridge and key related incidents, is draining capital and confidence from the sector. How quickly teams harden bridges, upgrade key management and improve incident response will largely determine whether 2026 ends as a contained setback or a prolonged drag on DeFi growth.