Crypto Security Losses Surge to $1.1 Billion in H1 2026

Operational security failures accounted for 74% of stolen funds, marking a departure from traditional code exploitation. Compromised private keys, stolen signing credentials, and poisoned off-chain infrastructure allowed attackers to generate transactions that appeared legitimate to blockchain networks. Because these actions involve authorized signatures, standard smart-contract audits fail to provide adequate defense.

Blockaid identified a single cluster linked to the Democratic People’s Republic of Korea as responsible for 55% of all losses during the period. The impact varied significantly by network: Ethereum projects lost $332 million, largely through contract vulnerabilities like the KelpDAO breach, while Solana projects saw $326 million stolen, with 98% of those losses stemming from compromised signing infrastructure rather than code flaws.

Major incidents, including the $292 million KelpDAO breach and the $295.7 million attack on Drift Protocol, dominated the half-year figures. In the case of Drift, attackers utilized months of social engineering to seize administrative control. While recovery efforts for these protocols involve multisig redesigns and new auditing standards, the stolen funds remain active, with significant portions of the proceeds moving through privacy-preserving mixers like Tornado Cash. Blockaid warns that as these attack vectors evolve, teams must prioritize key segregation and rigorous transaction-intent verification to mitigate future risks.