Q2 2026 was the most active quarter on record for crypto hacks, with KelpDAO and Drift Protocol driving most losses and bridge exploits accounting for the largest share of stolen funds.
Crypto hackers stole about $775 million across 83 incidents in Q2 2026, making it the most active quarter on record for attacks, according to DefiLlama data. While the quarter set a record for frequency, total losses remained below the industry's worst historical dollar-loss periods, with Q4 2020 still holding that mark at $3.56 billion. KelpDAO and Drift Protocol together accounted for more than three-quarters of Q2's stolen funds, and cross-chain bridge vulnerabilities represented an estimated $351 million of losses. The quarter was marked less by a single catastrophic breach than by a steady run of smaller exploits, with attackers also increasingly targeting compromised admin access, token price manipulation and deprecated smart contracts.