Crypto losses totaled approximately $1.32 billion across 344 incidents in the first half of 2026, according to a report by Web3 security firm CertiK. This figure represents a 46.8% decrease from the same period in 2025. However, analysts caution that this decline is misleading, as the previous year's total was heavily influenced by a single major theft.
Incident Breakdown
The report highlighted that two incidents, the Kelp DAO exploit and the Drift Protocol breach, accounted for nearly 44% of the total losses. The Kelp DAO incident resulted in losses of $291.3 million, while the Drift Protocol breach led to losses of $285.3 million. Notably, these incidents stemmed from operational and infrastructure security failures rather than traditional code vulnerabilities, CertiK's analysts noted.
Ronghui Gu, CertiK's CEO, remarked on the unusual distribution of losses, stating,
What stood out most was the shape of the losses.
He emphasized that while the headline figures suggest a safer ecosystem, the underlying data does not support that conclusion. The number of incidents also increased, rising to 194 in the second quarter of 2026 from 145 in the same quarter of 2025.
Security Concerns
Ido Sofer, founder of key-management firm Sodot, commented that attackers have adapted more quickly than defenders to the evolving security landscape. He noted that recent hacks, including those affecting Bybit and other platforms, indicate a shift in the nature of vulnerabilities being exploited.
The reported increase in incidents and significant losses could lead to heightened scrutiny on crypto security measures and regulatory frameworks. Investors in cryptocurrency and related assets may react to these developments, particularly in sectors focused on blockchain technology and security solutions.
Watch for further insights from CertiK regarding ongoing security trends in the crypto space and any potential regulatory responses to these incidents.