CoinGecko’s latest security study, titled 2026 State of Crypto Security Report, says crypto platforms lost more than $3.63 billion across 245 security incidents between January 2025 and July 2026. The report says the 10 largest attacks accounted for over 72.5% of total stolen funds, showing how heavily overall losses were concentrated in a small number of cases. It also identifies supply-chain and infrastructure weaknesses as the main security threats facing both centralized and decentralized exchanges, with losses tied to those issues exceeding $1.8 billion. In centralized exchanges, private key exposure was the most common risk cited. For dApps, about $546 million was stolen through smart contract vulnerabilities. CoinGecko also said 147 of the 245 incidents involved platforms that had already completed independent security audits, or about 60% of all cases. Those incidents represented 88.44% of total losses. According to the report, most attacks fell outside the scope of traditional audits, with common causes including external infrastructure, unaudited code updates, and governance attacks. Only about 11% of incidents involved smart contract flaws that were actually within audit scope.
According to BlockBeats on Aug. 27, CoinGecko’s latest security report, 2026 State of Crypto Security Report, said crypto platforms lost more than $3.63 billion across 245 security incidents between January 2025 and July 2026.
The report said the 10 largest attacks accounted for more than 72.5% of total stolen funds. It also identified supply-chain and infrastructure vulnerabilities as the main security risks facing centralized exchanges and decentralized exchanges, with related losses topping $1.8 billion.
By category, private key exposure was the most common risk for CEXs. In the dApp segment, roughly $546 million was stolen through smart contract vulnerabilities.
CoinGecko also said that 147 of the 245 security incidents involved platforms that had completed independent security audits, equal to about 60% of all incidents. Those cases accounted for 88.44% of total losses.
The report said most attacks were outside the coverage of traditional audits. Common causes included external infrastructure issues, unaudited code updates, and governance attacks. CoinGecko added that only about 11% of incidents involved smart contract defects that fell within audit scope.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
