# Crypto Hacks Surpass $1.1B in First Half of 2026

North Korea-linked hackers accounted for 55% of total stolen funds across 212 incidents.

- **Source:** [CryptoPotato](https://brifing.si/source/bd22636b-ec8d-42a8-8cca-1937c50e0f6c)
- **Published:** 2026-08-01
- **Topic:** [Finance](https://brifing.si/c/finance)
- **Original article:** <https://cryptopotato.com/crypto-hacks-drain-1-1b-in-first-half-of-2026-amid-212-security-incidents/>
- **On Brifing:** https://brifing.si/s/b0fb2006-f339-4d1b-80a3-fb060a681b4e

## Record-Breaking Half-Year

The first six months of 2026 marked the most active period for crypto exploits on record. According to Blockaid's report, hackers stole $1.1 billion across 212 incidents. Just four major attacks on KelpDAO, Drift, Resolv, and CoW Swap accounted for $707 million in losses. KelpDAO's $292 million cross-chain message forgery stands as the single largest theft to date.

## North Korean Connection

55% of attacks ($609 million) were linked to North Korea's TraderTraitor group. Drift Protocol on Solana lost $285 million in just 12 minutes. Humanity Protocol's $32 million loss was also connected to the same hacker cluster. This Lazarus Group subunit specializes in state-sponsored cyber operations.

## Monthly Escalation

Monthly incidents rose from 18 in January to 57 by June. April became the worst month with $577 million stolen from KelpDAO and Drift Protocol alone, pushing total monthly losses to $635 million. Privileged key misuse caused $790 million in damages, representing nearly 75% of all stolen funds.

## New Target: AI Systems

In May, hackers used prompt injection to trick Bankr's AI agent into approving $216,000 in unauthorized transactions. Novel methods like EIP-7702 wallet delegation attacks emerged in 2026. Cross-chain bridges proved vulnerable when destination chains accepted forged proofs. Legacy smart contracts like Aztec Connect and Raydium also suffered breaches.

## Code-Level Vulnerabilities

80% of attacks exploited code-level weaknesses. Unbacked mint exploits ($80 million at Resolve) ranked second by value. July attacks on AFX Trade, BSquaredNetwork and Verus caused over $35 million in combined losses. Verus' earlier exploit was traced to the same bridge contract vulnerability.

## Recovery Efforts

Teams successfully froze funds or negotiated returns in code-related incidents. However, stolen-key attacks saw funds disappear through mixers or cross-chain routes. Blockaid noted security teams struggling to adapt to new threats, particularly state-sponsored groups' technical capabilities.

## Industry Impact

The attacks eroded trust in crypto exchanges while driving up insurance premiums. Regulators are increasing scrutiny of DeFi protocols. Security firms are developing new standards for cross-chain solutions. 78% of users now employ multi-factor authentication.

## Future Projections

Blockaid warns of increasing AI-powered attacks in H2 2026, particularly targeting trading bots and smart contract auditors. The industry is investing in advanced encryption like zero-knowledge proofs. Experts emphasize the critical need for user education amid evolving threats.

## Sources covering this story

- https://cryptopotato.com/crypto-hacks-drain-1-1b-in-first-half-of-2026-amid-212-security-incidents/ — 

---

_Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._