DeFi Hacks in 2026: Over $1 Billion Stolen, Lazarus Group Behind 76% of Losses

The crypto market suffered a record 207 hacking attacks in the first half of 2026, with total losses from DeFi exploits topping $1 billion, according to Altfins. June alone saw 40 major attacks totaling $75.87 million — meaning the pace of breaches hasn't slowed even amid the broader market panic.

The year's biggest incident was the $292 million KelpDAO exploit in April: attackers found a flaw in a cross-chain bridge's verification layer and illegitimately authorized the release of 116,500 rsETH. The second-largest was Drift Protocol, Solana's largest perpetual futures exchange, which was drained of $285 million in roughly 12 minutes, Forbes reports.

The real shift in 2026 isn't technological — it's tactical. Attack vectors have moved away from code bugs toward targeting people: social engineering, private-key compromise, and phishing have become the single most damaging category of losses. The North Korea-linked Lazarus Group is estimated to be behind roughly 76% of all crypto hacking losses this year, CCN notes. In other words, a smart contract audit no longer guarantees safety — the weakest link stopped being the code a long time ago and became the person holding the keys.

This article is for informational purposes only and does not constitute investment advice.