Analysts at Immunefi have summarized the results of the first half of 2026: during this period, crypto projects lost approximately $972 million as a result of 207 incidents. Although the number of attacks reached a record high, the total damage significantly decreased compared to the same period in 2025. This indicates that the market is gradually adapting to threats: average losses per hack are decreasing, which is a positive signal for the industry.
The decline is particularly noticeable in the DeFi sector: losses here fell by 74% from the peak values of 2022 — from $2.62 billion to $680.3 million. This progress has been made possible by the active implementation of bug bounty programs, regular security audits, and an increase in the number of qualified cybersecurity professionals. These measures allow for the identification and elimination of bugs before they can be exploited by attackers.
However, the structure of threats has changed. The main risks have shifted from smart contract vulnerabilities to infrastructure failures, private key compromises, and errors in cross-chain configurations. This indicates that attackers are adapting to enhanced code-level protection and are seeking weaker points — the human factor and technical errors in complex multi-chain architectures.
My comment: The trend of decreasing losses amid a rising number of attacks is a sign of market maturity. However, the shift in focus to infrastructure risks requires projects to reconsider their security approaches: it is not enough to simply audit smart contracts; attention must be paid to key protection and cross-network interaction. In the coming years, these areas will become key to preventing major losses.