started · updated
Crypto platforms lose $3.6 billion to hacks despite security audits
Cryptocurrency platforms lost more than $3.6 billion to cyberattacks and stolen credentials between January 2025 and July 2026, according to a report by CoinGecko. The findings highlight a significant gap in current security measures, as approximately 88% of the stolen funds originated from platforms that had completed independent security audits, and about 60% of the affected platforms had undergone such vetting.
The largest single incident involved Bybit, which suffered a $1.4 billion theft in February 2025; blockchain intelligence firm Elliptic attributed this attack to North Korea. Other major losses included a $320 million hack on the Liquid Network blockchain, $292 million lost by KelpDAO, and $285 million lost by Drift Protocol.
Experts noted that standard audits often fail to cover the full spectrum of risk, such as external infrastructure vulnerabilities, unaudited code updates, or systemic features manipulated through governance attacks. Only about 11% of the documented incidents involved flaws within the specific scope of smart contract audits.
Entities
Bybit · CoinGecko · Drift Protocol · Elliptic · KelpDAO · Liquid Network
Claims
What the coverage asserts, and how many sources carry each claim.
- [● 5 SOURCES] KelpDAO lost approximately $292 million. retailwit.com · www.tekedia.com · www.pymnts.com · adevarul.ro · www.stiripesurse.ro
- [● 5 SOURCES] Cryptocurrency platforms lost over $3.6 billion to hacks and theft between January 2025 and July 2026. retailwit.com · www.tekedia.com · www.pymnts.com · adevarul.ro · www.stiripesurse.ro
- [DISPUTED] About 60% of the affected platforms had undergone independent security audits. retailwit.com · www.tekedia.com · www.pymnts.com · adevarul.ro · www.stiripesurse.ro
- [● 5 SOURCES] Drift Protocol lost approximately $285 million. retailwit.com · www.tekedia.com · www.pymnts.com · adevarul.ro · www.stiripesurse.ro
- [● 3 SOURCES] The theft from Bybit was attributed to North Korea. www.tekedia.com · adevarul.ro · www.stiripesurse.ro
- [● 5 SOURCES] Bybit suffered a $1.4 billion theft in February 2025. retailwit.com · www.tekedia.com · www.pymnts.com · adevarul.ro · www.stiripesurse.ro
- [DISPUTED] Approximately 88% of stolen funds came from platforms that had completed independent security audits. retailwit.com · www.tekedia.com · www.pymnts.com · adevarul.ro · www.stiripesurse.ro
- [● 2 SOURCES] A hack on the Liquid Network blockchain resulted in a $320 million loss. retailwit.com · www.pymnts.com