According to ChainCatcher, citing DefiLlama data, Q2 2026 has become the most active quarter for crypto hacks on record, with 83 independent attack incidents—a new all-time high. Despite the surge in frequency, total losses for the quarter amounted to approximately $755.3 million, still far below the $3.56 billion loss record set in Q4 2020.
Detailed Breakdown: Two Attacks Dominate
The losses were heavily concentrated: the $293 million attack on KelpDAO and the $280 million attack on Drift Protocol together accounted for more than three-quarters of the quarter's total losses. Cross-chain bridges continued to be the prime target for hackers, with related attacks resulting in approximately $351 million stolen—the single largest source of losses.
Other notable incidents include a $36 million loss from Humanity Protocol earlier this month (June 2026), two separate attacks on Aztec Connect's passive smart contracts each costing about $2.1 million, and a $1.3 million attack on decentralized exchange Raydium in June.
Overall, while Q2 2026 set a record in attack frequency, the average loss per incident decreased, suggesting hackers adopted a more fragmented and frequent strategy. The persistent vulnerability of cross-chain bridges remains a critical security challenge for the crypto industry, calling for further technological improvements and risk management measures.