Here’s the good news: crypto hack losses fell below $1 billion in the first half of 2026. Here’s the less good news: that’s only because the numbers are coming down from astronomical highs — not because attacks are getting rarer.
Immunefi’s latest data shows 207 crypto hacks in H1 2026, a record number of incidents. But total losses came in at $972 million. Compare that to 2022, when DeFi exploit damage was 74% higher.
The paradox makes sense when you look at the details. DeFi protocols are getting better at security. Bug bounties are working. More teams are running audit competitions and red-teaming exercises before going live. The exploit count is up, but the average damage per exploit is way down.
That said, $972 million is still nearly a billion dollars stolen in six months. Let’s not pretend that’s a win.
The shift tells you something about where the smart attackers are focusing. When average exploit returns drop, attackers either get more creative or go after bigger targets. The record incident count suggests they’re doing both — casting a wider net while looking for the one big payout that makes the year.
Immunefi’s full report dives deeper into the numbers, but the headline is clear: the ecosystem is getting harder to exploit at scale, but nobody’s immune. 207 incidents in six months means there’s a new attack roughly every 21 hours. The bar for security is rising, but so is the volume of people trying to find the cracks.
