The first half of 2026 witnessed an unparalleled surge in crypto attacks, with incidents skyrocketing to 207 worldwide between January and June, according to TRM Labs. Despite the unprecedented number of attacks, the financial toll has diminished, dropping from $2.3 billion in the same period last year to $972 million. This decline in total losses suggests developments in security measures even as attack attempts become more frequent.
What Drives the Increased Attacks?
While the number of security breaches rose dramatically, the nature of these attacks shifted, as no single massive attack took the spotlight. Instead, these incidents were primarily smaller, widely dispersed breaches. In fact, in the second quarter alone, attackers executed 123 separate incidents, indicating a trend toward persistence and diversification in attack patterns.
Who is Responsible for Major Losses?
Alarmingly, a significant portion of the financial damage, approximately 66%, was linked to alleged North Korean activities, amounting to $643 million. In April, two major attacks on Drift Protocol and KelpDAO contributed significantly to this figure, causing a combined $577 million in losses.
TRM Labs highlighted that these significant losses were predominantly rooted in infrastructure and operational failings rather than direct on-chain exploits. Although architecture breaches made up a mere 15% of total incidents, they disproportionately led to 76% of the financial damage overall.
“Activities associated with North Korea accounted for nearly two-thirds of losses—about $643 million—with most of the damages stemming from major attacks on Drift Protocol and KelpDAO in April.”
Beyond infrastructure issues, smart contract vulnerabilities remained the most common attack vector, with 125 out of 207 cases attributed to this type of breach. Attackers adeptly manipulated multiple code weaknesses within a single attack, enhancing their ability to extract funds from DeFi, DEXs, and token projects.
Key insights from the report include:
- The surge in incidents saw a jump from 83 in early 2025 to 207 in the first half of 2026.
- An established decline in total loss value from $2.3 billion to $972 million.
- North Korean activity accounted for the majority of financial losses.
This emerging landscape reflects that while attacks are on the rise, enhanced security measures are effectively mitigating overall financial losses. Organizations must continue to prioritize both smart contract audits and the strengthening of authentication controls to safeguard against increasingly sophisticated threats.
