According to DefiLlama data, the second quarter of 2026 has become the most active period for crypto hacks on record, with 83 separate attack incidents — a new all-time high. Despite the surge in attack frequency, total losses for the quarter were approximately $755.3 million, still below the $3.56 billion recorded in Q4 2020.
Major Attacks and Loss Breakdown
Losses were heavily concentrated in a few large-scale attacks. The $293 million attack on KelpDAO and the $280 million attack on Drift Protocol together accounted for more than three-quarters of the quarter's total losses. These two events significantly drove up the overall damage.
Cross-chain bridges were the largest source of losses, with related attacks resulting in approximately $351 million stolen, nearly half of the quarter's total. Additionally, Humanity Protocol lost $36 million earlier this month; Aztec Connect's passive smart contracts suffered two separate attacks, each losing about $2.1 million; and decentralized exchange Raydium experienced a $1.3 million attack in June.
Historical Context and Trends
While the attack count set a new quarterly record, total losses have yet to surpass the historic peak of Q4 2020, which saw $3.56 billion in losses due to multiple large-scale exploits. The rising frequency of attacks indicates that the security risks in the crypto ecosystem are still intensifying, with infrastructure like cross-chain bridges continuing to be prime targets for hackers.
The data was compiled by DefiLlama, covering all on-chain attack events. The industry needs to continuously enhance smart contract auditing, cross-chain bridge security, and asset protection measures.