Blockaid Says Hackers Still Control $287.1 Million in Stolen Crypto That Can’t Be Frozen
Blockchain security firm Blockaid said in a report released Monday that hackers behind major crypto exploits in 2026 still control $287.1 million in stolen assets sitting in wallets that investigators can monitor but cannot freeze. The report reviewed 60 major onchain exploits from January through August 2026, which Blockaid said accounted for $1.18 billion in stolen funds. As of the report’s Sept. 2 cutoff, only $9.8 million, or 0.8%, had been returned to victims, while another $81.4 million had been frozen but not yet handed back. Only five of the 60 incidents resulted in any funds being frozen or recovered. Blockaid also found that attackers move quickly after an exploit: across 59 cases, the median time to move funds was 17 minutes, with 68% of cases seeing funds moved within an hour and 22% within the first minute. The firm said most successful freezes or recoveries came from protocol, governance, or validator controls rather than from assets that could be directly blocked at the issuer level.








