Crypto hacks resulted in roughly $1.32B in losses during the first half of 2026, across 224 publicly disclosed incidents.
The largest losses came from access control failures, phishing attacks, and oracle issues.
Attack breakdown:
1. Access Control Failures
Compromised permissions and privileged access drove several of the biggest exploits:
• Kelp DAO: $292M
• Drift Protocol: $280M
• Humanity Protocol: $31M
• Step Finance: $30M
• Truebit: $26.5M
• Resolv Labs: $25M
• AFX: $24.15M
• BonkDAO: $21M
2. Phishing & Social Engineering
• Social Engineering Attack: $282M
3. Oracle Issues
• Ostium: $24M
• Blend Protocol: $10.86M
• Bonzo: $9M
A small number of incidents accounted for the majority of losses, with compromised permissions and privileged access driving many of the largest exploits.
The largest losses came from access control failures, phishing attacks, and oracle issues.
Attack breakdown:
1. Access Control Failures
Compromised permissions and privileged access drove several of the biggest exploits:
• Kelp DAO: $292M
• Drift Protocol: $280M
• Humanity Protocol: $31M
• Step Finance: $30M
• Truebit: $26.5M
• Resolv Labs: $25M
• AFX: $24.15M
• BonkDAO: $21M
2. Phishing & Social Engineering
• Social Engineering Attack: $282M
3. Oracle Issues
• Ostium: $24M
• Blend Protocol: $10.86M
• Bonzo: $9M
A small number of incidents accounted for the majority of losses, with compromised permissions and privileged access driving many of the largest exploits.