Crypto hacks top $1B in H1 2026

TLDR

Crypto hacks and security incidents stole over $1 billion in the first half of 2026, making it the most heavily hacked six?month period on record.

1. Blockaid verified around 212 exploits and roughly $1.01.1 billion in losses, with major hits on Ethereum, Solana and cross?chain protocols like KelpDAO and Drift.
2. Most losses now come from operational security failures and key compromises, with a North Korea linked cluster responsible for more than half of stolen funds.
3. Security firms expect continued attacks, including AI related exploits, making stronger key management, governance, and bridge security critical for users and projects.

Deep Dive

1. Scale Of H1 Losses

Blockchain security firm Blockaids H1 2026 report finds more than $1 billion stolen across about 212 verified exploits, calling it the most?hacked half?year on record by incident count, even though value stolen is below H1 2025s Bybit mega?hack. Multiple summaries put losses in the 1.01.1 billion range and confirm that Blockaid logged more exploit incidents in the first six months of 2026 than in all of 2025, with Ethereum projects losing about $332 million and Solana about $326 million by chain.Blockaid report

Other security trackers using narrower definitions report slightly lower totals, around $972 million over 207 hacks, showing that precise figures depend on whether you count infrastructure compromises and centralized platforms.Immunefi data

2. How Attacks Are Changing

Blockaid and Immunefi highlight a shift from pure smart contract bugs toward operational security failures. Around 74 percent of H1 2026 losses came from compromised keys, signers, governance, and off?chain infrastructure rather than code defects.Blockaid H1 summary

The biggest single incidents, the roughly $292 million KelpDAO bridge exploit and the roughly $285 million Drift Protocol drain, were driven by compromised verification or privileged access rather than a classic contract bug.Crypto security losses A North Korea linked cluster, including Lazarus subgroup TraderTraitor, is attributed with about 55 percent of H1 losses, showing how state?aligned actors now dominate the largest thefts.

3. Implications And What To Watch

Reports warn that attacks are likely to continue, with Blockaid explicitly flagging AI related exploits as an emerging vector, and Immunefi noting that most value now leaves through keys and governance rather than code alone.Losses exceeded $1 billion

For everyday users, the key risks are compromised wallets, fake apps, and phishing that capture seed phrases or signing authority. For protocols, the weak points are validator and bridge infrastructure, multisig setups, and poorly guarded governance controls.

Conclusion

Crypto security in H1 2026 was defined not just by the more than $1 billion stolen, but by a record number of incidents and a clear shift toward attacks on keys, bridges, and governance. Unless projects harden operational security and users tighten wallet hygiene, the trend of frequent, high?impact exploits could persist or worsen into the second half of 2026.