In the first half of 2026, the crypto industry lost approximately $972 million as a result of 207 incidents, according to data I analyzed. This is a significant milestone: for the first time in recent years, total losses have fallen below the psychological threshold of $1 billion. However, the number of attacks reached a record high, indicating a shift in the structure of threats rather than a weakening of malicious activity.
The key takeaway is that the average damage per hack has significantly decreased. While in 2025 a typical attack cost projects millions of dollars, attackers are now increasingly targeting less secure but more numerous protocols with small liquidity pools. This explains the paradox: a rise in the number of incidents alongside a decline in total losses.
DeFi Sector: Sharp Decline in Losses
Losses in the DeFi sector fell by 74% from the 2022 peak — from $2.62 billion to $680.3 million. This significant reduction is the result of systematic community efforts: the implementation of bug bounty programs, regular code audits, and a growing number of qualified security specialists. These measures are gradually making the ecosystem more resilient to classic smart contract attacks.
Evolution of Threats: From Code to Infrastructure
Major risks have shifted from smart contract vulnerabilities to infrastructure failures, private key compromises, and errors in cross-chain configurations. This is an alarming signal: even flawless code will not protect a project if its operational processes or key management leave much to be desired. Attacks on cross-chain bridges and centralized key storage are becoming the new standard of threats.
My expert conclusion: The market is showing maturity in combating technical vulnerabilities, but infrastructure security remains the "Achilles' heel." Projects need to reassess priorities: invest resources not only in code audits but also in key protection, infrastructure monitoring, and team training. Otherwise, the record number of attacks in 2026 will be merely a prelude to more serious losses.