The first half of 2026 saw a significant decrease in financial losses from cyberattacks on cryptocurrency projects. According to data obtained from my own security market analysis, total damages amounted to approximately $972 million, distributed across 207 recorded incidents. While the number of attacks reached a record high, the overall volume of losses noticeably declined compared to 2025. The key trend is a reduction in the average damage per hack, indicating improved effectiveness of protective mechanisms.
DeFi sector shows record decline in losses
The most impressive dynamics are observed in the decentralized finance (DeFi) sector. Losses here fell by 74% from the peak values of 2022, when damages reached $2.62 billion. In the current half-year, this figure has dropped to $680.3 million. This sharp decline is directly linked to the widespread adoption of bug bounty programs, regular code audits, and an increase in the number of qualified security professionals.
Shift in threat vector: from smart contracts to infrastructure
Incident analysis reveals a fundamental shift in attackers' tactics. While vulnerabilities in smart contracts were previously the main targets, the primary risks have now shifted toward infrastructure failures, private key compromises, and errors in cross-chain configurations. This is an alarming signal for the industry: even with flawless smart contract code, vulnerabilities at the level of key management and cross-chain bridges remain a serious gap.
Cryptalist Expert Opinion: The drop in losses below the psychological threshold of $1 billion is undoubtedly a positive signal, but the record number of attacks reminds us that the war with hackers is far from over. Investors and developers should reconsider their priorities: strengthening the protection of private keys and infrastructure should become a top priority in light of the evolving threats.