Q2 2026: Crypto Hacks Hit Record High

Q2 2026 Sees Record High in Crypto Hacks, Losses Mount

Decentralized finance (DeFi) platforms have been hit by 121 hacks this year, resulting in approximately $942 million in losses, according to a report released this week by crypto market tracker CryptoRank.

The second quarter of 2026 proved to be the most volatile period on record for the crypto sector, with 85 incidents and an estimated $775 million stolen. This surge in attacks coincides with a broader struggle in the cryptocurrency market, marked by declining investor confidence. The total value locked (TVL) in DeFi protocols has seen a consistent monthly decrease throughout the year, falling from around $115 billion in January to $70 billion by late June.

CryptoRank’s data indicates that the 85 incidents in Q2 2026 represent a significant increase, exceeding the second-highest frequency of exploits—which occurred in Q1 2026—by 49. However, the total dollar value of losses in the second quarter did not reach previous peaks. The data provider noted that two major attacks in April accounted for the majority of the quarter’s losses.

Major Heists Fuel Q2 Losses

Drift Protocol and KelpDAO collectively lost $590 million, a sum that represents more than half of all DeFi losses recorded in 2026. Drift Protocol reported that attackers made off with approximately $285 million in user assets. Investigations by blockchain intelligence firm TRM Labs have linked this operation to hacking groups with ties to North Korea.

According to TRM, the preparatory stages of the attack began on-chain as early as March 11 with a 10 ETH withdrawal from Tornado Cash. This transaction followed months of in-person meetings between proxies of the Pyongyang regime and Drift employees. TRM Labs stated in a report published April 30 that “the attacker used social engineering to induce Drift Security Council multisig signers into pre-signing transactions that appeared routine but carried hidden authorizations for critical admin actions.”

Just over two weeks later, North Korea’s Lazarus Group targeted KelpDAO, a liquid restaking protocol, exploiting its LayerZero bridge infrastructure and stealing roughly $290 million worth of rsETH. Chainalysis reported at the time that the attackers forged a cross-chain message on April 18 after compromising two remote procedure call nodes utilized by LayerZero’s Decentralized Verifier Network. Concurrently, the criminals launched a distributed denial-of-service attack on a third node, manipulating the system to rely on compromised verifiers. This compromised verification process allowed for the creation of rsETH tokens on Ethereum without the corresponding assets being burned on Unichain.

Broader Market Impact and Shifting Landscape

In the immediate aftermath of these attacks, the lending protocol Aave experienced a sharp decline in its TVL, dropping from $26.4 billion to $14.3 billion, with $12 billion in funds withdrawn, representing a decrease of approximately 46%.

This significant dip in Aave’s TVL was not an isolated incident. CryptoRank’s data confirms that the value locked across all of DeFi declined every month in 2026, falling from $115.3 billion in January to just over $70 billion in June. While hacks were not the sole driver of this decline, the firm suggested that the increased frequency of such incidents likely eroded user confidence, leading to a broader shift away from the sector.

However, the current downturn is less severe than the one experienced during the 2021-2022 cycle, when DeFi TVL plummeted by more than 70% in seven months. CryptoQuant notes that the current decline has been more gradual, and the market structure has evolved. The stablecoin supply has grown to approximately $300 billion, real-world asset tokenization is expanding, and capital is now more dispersed across various sectors, including derivatives, infrastructure, and lending, rather than being concentrated in a few automated market makers (AMMs) and yield farms.

Among the largest ecosystems by TVL, only Tron and Hyperliquid have shown growth this year, with Tron gaining 5% and Hyperliquid adding nearly 7%, solidifying its position as a dominant venue for on-chain perpetuals. The remaining top 10 chains have experienced significant declines, with Plasma and Arbitrum being the hardest hit, seeing their TVL plunge by 74.6% and 55%, respectively.