The crypto industry witnessed a record 83 hacks in Q2 2026, leading to losses of $755.3 million, significantly affecting the ecosystem.
The cryptocurrency sector faced a staggering number of security breaches in the second quarter of 2026, with a total of 83 hacks recorded, marking a new high for the industry. These incidents resulted in losses amounting to $755.3 million.
As noted by analysts from Unfolded and DeFiLlama, the surge in breaches signifies a significant shift in the hacking landscape, with smaller, more frequent attacks replacing the previously common large-scale hacks. A substantial portion of the losses stemmed from notable attacks like the KelpDAO breach, which alone accounted for $293 million in losses, and the Drift Protocol exploit, which led to another $280 million in damages.
In the cross-chain bridge domain, losses reached $351 million, with the LayerZero OFT bridge incident linked to KelpDAO being a major contributor, representing 38% of these losses. Other causes included compromised administrative access and token price manipulation, while theft of private keys accounted for a mere 5.66% of total losses.
Despite the alarming number of hacks, the current financial impact is significantly lower compared to the record losses witnessed in the fourth quarter of 2020, which totaled $3.56 billion. Dmitry Tarasyuk, Product Director at CORE3 and CER.live, attributed the increase in hacking incidents to diminished liquidity in the ecosystem, with Total Value Locked (TVL) plummeting from $164 billion to about $73 billion. He pointed out a troubling disparity between the rapid pace of protocol development and the inadequacies of their risk management frameworks, illustrating the vulnerability of projects that employ multisig schemes ineffectively.
The impact of these vulnerabilities was highlighted by a recent $10 million hack of the THORChain cross-chain protocol, forcing the team to halt operation of the protocol and restrict trading activities. Additionally, the Humanity Protocol project reported a breach on June 8, resulting in an estimated $31 million loss.
