[REVISION HISTORY]

2026 crypto hack surge (H1-H2)

Updated 9 times since CLSTR started tracking revisions of this situation.

What changed

2026-09-09 07:56 UTC → 2026-09-09 17:11 UTC · added ~~removed~~

The first half of 2026 saw a record rise in cryptocurrency-related attacks, with 207 incidents resulting in approximately $972 million stolen—more than double the 83 incidents recorded during the same period in 2025. North Korean-affiliated groups were major contributors, responsible for roughly 66% of stolen funds, totaling nearly $643 million. Attack vectors have evolved to include smart contract vulnerabilities, private key theft, and sophisticated social engineering. Notable exploits include the $295 million Drift Protocol attack on Solana and the KelpDAO breach. Additionally, the sector faced risks from data leaks, such as a reported sale of data belonging to 2.3 million French cryptocurrency holders. By August 2026, the landscape shifted toward more frequent but smaller-scale attacks. According to PeckShield, August saw a record 50 major security incidents, a 67 percent increase from July. However, total monthly losses dropped to approximately $136.3 million, a 49 percent decline from the $270 million lost in July. This decline was driven by a sharp drop in the average loss per incident, from $9 million to roughly $2.7 million. One significant event involved an attack on the Tectonic lending protocol on the Cronos network, where attackers attempted to extract roughly $74 million via governance token manipulation. Cronos validators halted block production after approximately $6 million was bridged to Ethereum, subsequently restoring the network to a state prior to the attack to trap the majority of the assets. ~~Other smaller attacks in August included protocols such as Moonwell, Termlabs, and Coinsbuy.~~ Recent ~~data from~~ analysis by CoinGecko ~~indicates~~ reveals that between January 2025 and July 2026, cryptocurrency platforms lost more than $3.63 billion to cyberattacks and access key thefts. A significant finding indicates a gap in current security measures: approximately 88 percent of stolen funds originated from platforms that had completed independent security audits, and roughly 60 percent of affected platforms had undergone such checks.

Versions

Only revisions since CLSTR began indexing content versions appear here. Select a version to see what changed compared to the one before it.