As the crypto community anticipates a market reversal driven by institutional capital and regulatory clarity as of July 8, Finbold research found that the cryptocurrency market is under intense pressure from major hacks.
Between January 1, 2026, and June 2026, the Finbold report found that $955,864,608 was stolen from five Decentralized Finance (DeFi) protocols. The largest crypto hacks involved different tactics, which raises questions about the security designs of the web3 industry.
The largest crypto hack in the first half of 2026 involved a compromised supply chain on April 18 at a Decentralized Autonomous Organization (DAO) dubbed Kelp DAO, a liquid restaking protocol built on the Ethereum (ETH) blockchain. This supply chain attack on Kelp DAO saw the hackers siphon 116,500 rsETH (Restaked Ether), valued at about $293 million, thereby directly impacting crypto users.
The second-largest crypto hack in the first half of 2026 saw attackers steal about $285 million from Drift Protocol, a DeFi trading platform built on the Solana (SOL) blockchain, on April 1. The Drift Protocol employed a social engineering tactic that directly affected retail users.
Other top tactics used to perpetrate the largest crypto hacks during the first half of 2026, include private key leakage at Step Finance and Humanity Protocol and smart contract vulnerability at Truebit.
What’s the impact of the H1 crypto hacks?
The notable crypto hacks in the first half of 2026 occurred amid a rising adoption of crypto assets by institutional investors. Furthermore, the crypto industry has more regulatory clarity, as seen in the United States with the Clarity Act and in Europe with the Markets in Crypto Assets (MiCA).
As such, the Ethereum blockchain is considering an upgrade to enhance security, as Finbold reported. Furthermore, the mainstream adoption of Artificial Intelligence (AI) via top-tier coding AI agents is expected to reduce security vulnerabilities in the web3 space over the coming months.
