"The surge in crypto security incidents is alarming," stated a spokesperson from CertiK following their recent report on the state of blockchain security. The report reveals that the total losses due to hacks and scams in the first half of 2026 reached approximately $1.316 billion across 344 distinct incidents. This figure indicates a troubling trend in the cryptocurrency landscape, showcasing a notable increase in financial exploitation.
Among the most significant losses, Kelp DAO, Drift Protocol, and a targeted phishing attack accounted for about 65% of the total amount lost. Notably, the phishing incident alone cost victims around $284 million. These breaches primarily involved compromises of RPC infrastructure and administrative permissions, focusing on backend systems rather than vulnerabilities in public smart contract code. The average loss per incident was approximately $3.82 million, starkly contrasting with the median loss of $138,703, highlighting how a few major hacks skew the overall statistics.
Despite recovering around $115.3 million from various incidents, which brought the adjusted loss figure down to roughly $1.2 billion, the findings from CertiK indicate that the situation is dire, particularly when compared to previous years. For context, the first half of 2025 saw a total of $1.45 billion lost due to the Bybit breach. When excluding that exceptional event, it appears that losses have increased by approximately 28% year-on-year.
Different metrics are often used to evaluate the impact of these incidents. Gross loss refers to the total value taken from a protocol or victim before any recoveries. In contrast, realized extraction measures the assets successfully converted into transferable value by attackers. This nuanced understanding is essential, as merely focusing on gross losses can misrepresent the actual financial damage. The crypto sector continues to grapple with these challenges as it seeks to bolster security measures and protect users from future exploits. This material is for informational purposes only and does not constitute financial advice.
