SKN | Crypto Hack Losses Fall 47% in First Half of 2026, But Security Risks Continue to Grow

Key Points:

• Cryptocurrency-related losses declined 46.8% year-over-year to $1.32 billion during the first half of 2026.

• CertiK warns the lower losses do not indicate a safer crypto ecosystem, as attackers continue to employ increasingly sophisticated methods.

• Phishing attacks dominated the first quarter, while wallet compromises became the largest attack vector during the second quarter.

• North Korean state-sponsored hacking groups remain one of the industry’s most significant cybersecurity threats.

Crypto Losses Decline, But Risks Remain Elevated

Cryptocurrency losses from hacks and exploits fell significantly during the first half of 2026, but cybersecurity experts caution that the improvement paints an incomplete picture of the industry’s overall security.

According to a new report from blockchain security firm CertiK, total crypto-related losses reached approximately $1.32 billion during the first six months of the year, representing a 46.8% decline compared with the same period in 2025.

Despite the lower losses, CertiK emphasized that the ecosystem has not become substantially safer, noting that cybercriminals continue to evolve their tactics while targeting increasingly valuable infrastructure.

Attack Methods Continue to Evolve

The report found that phishing attacks accounted for the largest share of losses during the first quarter, totaling approximately $508.2 million.

During the second quarter, however, wallet compromises emerged as the primary attack vector, contributing to approximately $807.5 million in losses.

The shift illustrates how attackers continue adapting their techniques to exploit different weaknesses across the digital asset ecosystem.

Rather than relying on a single method, threat actors increasingly combine technical exploits, social engineering and operational vulnerabilities to gain unauthorized access to digital assets.

North Korean Hackers Remain a Major Threat

CertiK noted that more than 70% of second-quarter losses were linked to the high-profile exploits involving KelpDAO and Drift Protocol, attacks widely believed to have been carried out by North Korean state-sponsored hacking groups.

Security researchers continue to identify North Korean cyber organizations as one of the most persistent threats facing the cryptocurrency industry.

Previous estimates have suggested these groups have stolen billions of dollars in digital assets over the past several years, using increasingly sophisticated techniques to finance state activities and evade international sanctions.

Lower Losses Do Not Mean Better Security

CertiK cautioned against interpreting the year-over-year decline as evidence that cybersecurity risks have materially improved.

The comparison is heavily influenced by the exceptionally large losses recorded during the previous year, including one of the largest cryptocurrency exploits ever recorded, which significantly inflated 2025 totals.

Without that extraordinary event, overall attack activity remains consistent with an industry that continues to face persistent and evolving cybersecurity challenges.

Researchers argue that while headline loss figures have declined, the sophistication, scale and organization of attacks continue to increase.

Industry Focus Shifts Toward Stronger Security

As institutional adoption of digital assets expands, cybersecurity remains one of the industry’s highest priorities.

Crypto companies are increasing investment in smart contract auditing, wallet security, real-time monitoring and operational controls to reduce vulnerabilities and improve incident response capabilities.

Security firms also continue encouraging organizations and individual users to adopt stronger authentication methods, improve private key management and remain vigilant against phishing attempts and social engineering attacks.

Outlook

While total cryptocurrency losses declined during the first half of 2026, the latest security data suggests the industry’s threat landscape remains highly active. As attackers become more sophisticated and institutional participation continues to grow, cybersecurity is expected to remain one of the defining challenges for the digital asset sector.