Onchain Lens said in a post on X that 224 publicly disclosed crypto hacking incidents were recorded in the first half of 2026, with total losses reaching about $1.32 billion. The largest losses came from access control failures, phishing attacks and oracle-related issues. Within the access control category, compromised permissions and privileged access were tied to several of the biggest incidents, including Kelp DAO with losses of $292 million and Drift Protocol with $280 million. Other named cases in that group included Humanity Protocol, Step Finance, Truebit, Resolv Labs, AFX and BonkDAO. Onchain Lens also said social engineering attacks caused $282 million in losses. For oracle-related incidents, the post listed Ostium, Blend Protocol and Bonzo. The data points to a familiar pattern in crypto security: a small number of incidents accounted for a large share of total losses, with compromised permissions and privileged access standing out among the costliest attack vectors disclosed during the period.
Onchain Lens said in a post on X that 224 publicly disclosed crypto hacking incidents led to about $1.32 billion in losses in the first half of 2026.
The biggest losses came from access control failures, phishing attacks and oracle-related issues. According to the post, a small number of incidents accounted for most of the losses, and compromised permissions and privileged access were behind several of the largest attacks.
Access control failures were tied to several large incidents
In the breakdown by attack type, access control failures covered compromised permissions and privileged access. The listed cases included Kelp DAO, which lost $292 million, and Drift Protocol, which lost $280 million. Humanity Protocol lost $31 million, Step Finance lost $30 million, Truebit lost $26.5 million, Resolv Labs lost $25 million, AFX lost $24.15 million and BonkDAO lost $21 million.
Social engineering attacks caused $282 million in losses
For phishing and social engineering, Onchain Lens said social engineering attacks caused $282 million in losses.
Oracle-related issues hit three projects named in the post
For oracle issues, the post listed Ostium with losses of $24 million, Blend Protocol with $10.86 million and Bonzo with $9 million.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
