Crypto hacks hit record $1B half-year losses

TLDR

Losses from crypto hacks in the first half of 2026 exceeded around $1 billion, making it the most attack heavy six month period on record for the industry.

1. Blockaid and other security firms report roughly $1.0 to $1.1 billion stolen across more than 200 incidents, a record for hack frequency even if not for total dollars.
2. Ethereum (ETH) and Solana (SOL) projects account for most losses, driven less by smart contract bugs and more by compromised keys, signing infrastructure, and organized North Korea linked groups.
3. The trend shifts crypto risk toward operational security and emerging AI driven exploits, meaning users and protocols need to harden key management, infrastructure, and monitoring rather than relying only on audits.

Deep Dive

1. Record Half Year In Numbers

Onchain security platform Blockaid reports about $1.1 billion stolen across 212 verified incidents in H1 2026, more exploits than in all of 2025, making it the most hacked half year by incident count. Their H1 report is summarized in coverage from Crypto.news and Cointelegraph.

Other trackers like Immunefi and Quill Audits show slightly lower totals, around $935 to $972 million, but they still identify a record six month period for hack frequency. The difference reflects methodology rather than a contradiction, and all agree the number of incidents and victims is climbing.

Importantly, total dollars stolen are lower than H1 2025, which included a single $1.5 billion Bybit exploit, but the breadth of attacks across many protocols is wider and more systemic this year.

Confidence: high, based on multiple converging security reports.

2. Chains, Attack Vectors, And Actors

By chain, Ethereum related projects lost about $332 million and Solana about $326 million, according to the Blockaid report cited by Cointelegraph.

On Ethereum, many losses came from mega code exploits and bridge bugs in high value protocols such as restaking platforms and DEX aggregators, with the KelpDAO bridge attack alone costing roughly $292 million.

On Solana, more than 98 percent of losses were not smart contract bugs but compromised keys and signing infrastructure, with Drift Protocol and Step Finance among the hardest hit, as detailed in Crypto.news summary. Blockaid attributes a large share of stolen funds, including KelpDAO and Drift, to North Korea linked clusters like Lazarus, which together account for more than half of total losses.

3. Shifting Risk And What To Watch

Blockaid estimates roughly 74 percent of H1 2026 losses came from operational security failures compromised devices, credentials, private keys, signing systems, and off chain infrastructure rather than pure smart contract code flaws.

Looking ahead, the report flagged emerging AI driven exploits, noting early incidents where autonomous agents and prompt injection led to unauthorized signing, and predicting more AI related security failures in H2 2026. The Blockaid and Immunefi datasets also show continued pressure on bridges and key management systems, even as traditional DeFi exploit dollar totals fall from their 2022 peak.

For individual users and protocols, the practical takeaway is to prioritize hardened key storage, segregated signing devices, strict access controls, real time transaction intent checks, and careful platform selection, not just reliance on a one time audit.

Conclusion

This record half year for crypto hacks reflects a shift from isolated code bugs toward systemic weaknesses in key management, bridge design, and off chain infrastructure.

For Ethereum and Solana ecosystems in particular, the data suggests that security work now has to focus on operational discipline and emerging AI attack surfaces, while users should treat platform security assurances as a core part of any crypto decision, not an afterthought.