According to CryptoRank, the DeFi sector lost a staggering $942 million to hacks in 2026, with the second quarter being the most devastating on record. In just three months, 85 separate attacks drained approximately $775 million, representing over 80% of annual losses. Although the incident count surged by 49 compared to the next busiest quarter, the total damage was contained by two massive breaches that dominated the period.
Q2 Drives 80%+ of Annual Losses; Drift Protocol and KelpDAO Account for Over Half
The two largest events targeted Drift Protocol and KelpDAO, together costing more than $590 million — nearly half of all DeFi losses for the year. CryptoRank emphasized that attack techniques are evolving rapidly across the ecosystem, as the single-quarter data alone reveals a worrying trend.
The Drift Protocol incident saw $285 million stolen through a coordinated social engineering attack. Blockchain intelligence firm TRM Labs linked the breach to North Korean hacker groups. Attackers convinced Drift Security Council members to approve seemingly routine transactions that secretly granted elevated permissions. Weeks later, the infamous Lazarus Group exploited a vulnerability in the LayerZero bridge infrastructure, siphoning around $290 million in rsETH from KelpDAO. Chainalysis detailed the attack: hackers seized validator infrastructure, forged cross-chain messages, and minted tokens on Ethereum without burning the corresponding assets on Unichain.
TVL Slides, Aave Sees $12B Outflow in Under 24 Hours
Total value locked (TVL) in DeFi declined every month of 2026, slipping from $115.3 billion in January to just over $70 billion by end-June. While security failures were not the sole cause, a string of high-profile incidents accelerated capital flight. After the KelpDAO attack, panic spread quickly. Lending protocol Aave experienced an outflow of approximately $12 billion within 24 hours, its TVL plunging from $26.4 billion to $14.3 billion — illustrating how trust contagion can hit major protocols.
Blockchain Platforms Diverge: Tron and Hyperliquid Buck the Trend
Analysts note that the current environment differs from the broad DeFi collapse of 2021–2022. Broader stablecoin supply, tokenization of real-world assets, and diversified allocation into lending, derivatives, and infrastructure layers provide buffers for some ecosystems. Across chains, Tron and Hyperliquid were the only networks to record TVL growth in 2026. In stark contrast, Plasma and Arbitrum saw the sharpest declines, highlighting how sector turbulence is widening the gap between blockchain ecosystems.