Q2 crypto hacks hit $764M losses

TLDR

Around $764 million was stolen in crypto hacks in Q2 2026, making it one of the worst quarters for crypto security since 2025.

1. Blockchain security firm Hacken reports about $764 million lost across 67 incidents in Q2, up 58 percent from Q1, with two mega exploits driving most losses.
2. The vast majority of value stolen came from compromised keys and infrastructure, not smart contract bugs, and North Korealinked actors accounted for most of the funds.
3. Institutions, regulators, and prediction markets now treat security incidents as a structural risk, with markets pricing a high chance that 2026 hack losses exceed $1.2 billion.

Deep Dive

1. Scale Of Q2 Losses

Hackens Q2 2026 Security and Compliance Report puts total hack losses at roughly $764 million, across 67 tracked incidents, a 58.3 percent jump from Q1s $482.7 million and the highest since Q2 2025. Coinpedias summary notes that Drift Protocol and KelpDAO were the largest events, each losing around $290 million.

This concentration means a few large DeFi and bridge failures dominate quarterly loss figures, even though many smaller exploits also occurred. It reinforces that a single weak link in a major protocol can move the entire industrys risk statistics.

2. Where Security Failed Most

According to Hackens Q2 report, compromised keys, signers, and backend infrastructure accounted for 88.3 percent of the roughly $764 million stolen, while smart contract bugs caused most incidents but only about 11 percent of total value lost. Fourteen exploited projects had already been audited, showing audits alone did not cover the attack surface.

Hacken also attributes about 75.5 percent of stolen funds to DPRK (North Korea)linked actors, and highlights the first documented AI-driven prompt-injection theft, about $174,000, as a sign that automated exploit discovery is emerging. Institutional allocators quoted in the report now screen for timelocks, withdrawal whitelists, multiparty controls, and single-key dependencies instead of relying purely on past audits.

3. What To Watch Next

Crypto prediction markets tracked by CryptoBriefing price roughly a 79 percent probability that total crypto hack values will exceed $1.2 billion in 2026, suggesting participants expect continued large incidents. At the same time, European and US rules like MiCA and the GENIUS Act are tightening obligations on custodians and service providers, indirectly pushing better security standards.

For individual users, reports from CertiK show rising physical wrench attacks, and Hackens data shows that projects with continuous monitoring, bug bounties, and robust key controls are still a minority. Practically, the signals to watch are: how major protocols harden key and signer setups, whether bridges migrate away from fragile multisigs, and whether projects adopt ongoing monitoring instead of one-off audits.

Confidence: high, based on converging Q2 2026 reports from Hacken, CertiK, and market data.

Conclusion

Q2 2026s roughly $764 million in crypto hack losses reflects fewer, larger operational failures rather than many tiny code bugs. Major bridges and DeFi platforms remain the main sources of systemic risk, especially where keys, signers, or governance can be captured.

For crypto users and institutions, the key shift is that security now means controlling who can move funds and change systems, not just checking smart contracts. Watching how projects strengthen operational security and how regulators and markets react will be critical for judging future risk.