DeFi hacks jump 67% in August

TLDR

Reports from blockchain security firms show that DeFi and broader crypto hacks rose sharply in August 2026, even as total stolen value actually fell.

1. PeckShield counted 50 major crypto hacks in August, a 67% jump from 30 in July, with around $136.3 million stolen.
2. Despite more incidents, losses dropped about 49.5% month on month, largely because one big exploit (TectonicFi) was partially contained on Cronos.
3. The pattern is more frequent, smaller attacks and persistent key-management flaws, so users and protocols need stronger operational security beyond just audits.

Deep Dive

1. What The 67% Jump Means

Blockchain security firm PeckShield reported 50 significant hacks in August 2026, up 67% from the 30 incidents in July, in multiple summaries of its monthly data such as this crypto hacks overview.

Those 50 incidents included DeFi lending protocols like TectonicFi on Cronos, Moonwell on Base, and projects like Term Labs, TAC Protocol, mantra/">MANTRA and BounceBit, as detailed in coverage from Bitcoin.com and U.Today.

Other trackers such as DefiLlama and TRM Labs show a wider 2026 trend: more total hacks than in 2025, with hundreds of incidents year to date, underlining that DeFi remains a high-risk environment for exploitable contracts and infrastructure.

2. Why Losses Fell Despite More Hacks

Even with more hacks, estimated losses in August were about $136.3 million, down roughly 49.5% from Julys roughly $270 million according to PeckShields figures summarized by crypto.news and TheStreet via Yahoo Finance.

Average loss per incident dropped sharply, from roughly $9 million in July to about $2.7 million in August, as highlighted in another August hack recap. A key reason is that Cronos validators paused the chain during the TectonicFi exploit, trapping most of the roughly $74 million in stolen assets and letting only about $6 million escape.

More broadly, data from CoinGecko shows $3.63 billion lost across 245 incidents since early 2025, with many attacks hitting audited protocols and mid-tier DeFi platforms rather than only the largest blue chips, as noted in this longer-term security report.

3. How DeFi Users Can Respond

Security researchers point out that many of Augusts exploits involved compromised privileged keys or single points of failure in governance, not just obvious bugs in the main smart contracts. One response is products like AEREDIUMs AERSeal, which move admin powers to threshold key systems so no single private key controls an entire protocol, described in this security-focused launch.

For everyday DeFi users, practical defenses include favoring protocols with clear post-deployment monitoring, active bug bounties, multi-sig or threshold-governed admin keys, and transparent incident response histories. Data from Immunefi and others shows bug bounty programs are increasingly catching serious flaws before attackers can exploit them.

Conclusion

DeFi didnt suddenly become safer in August; attackers simply hit more targets while extracting less per incident, thanks partly to network-level interventions and better containment. For crypto users, the takeaway is that smart-contract and key-governance risk remains central: choosing venues with strong, evolving security practices is just as important as chasing yield or narrative exposure.