2026 Crypto Hacks Top $2.35B, Led by CEX and DeFi
Crypto hacks have caused about $2.35 billion in net losses in 2026 so far, according to a report cited by Bitcoin Magazine. The largest incidents have hit centralized exchanges and DeFi, rather than Bitcoin’s base layer or hardware wallets.
A September attack drained about $387.5 million from Bitget hot and warm wallets. Investigators linked it to North Korean actors and said attackers used third-party security products to issue fraudulent withdrawal commands. Liquid Network, a Bitcoin sidechain, suffered an estimated $320 million loss after a software bug enabled attackers to create unbacked L-BTC. Actors returned 3,400 BTC but kept about 600 BTC.
Other major cases included the roughly $285–296 million Drift Protocol compromise, a $292 million KelpDAO bridge exploit, and a $120.4 million Tectonic incident involving manipulated collateral. Hardware-related incidents, including Coinkite and Ledger supply-chain failures, were also significant but smaller than the largest exchange and DeFi losses. The article says Bitcoin’s base layer was not responsible for the reported losses.
The report also warns that AI coding agents may make vulnerability discovery and exploit development easier. Most major crypto hacks still involved familiar risks such as social engineering, compromised keys, and infrastructure flaws, but the growing use of AI adds pressure for stronger audits, multisig controls, and bridge security.
Neutral
The reported losses are a security and confidence headwind, but the article does not identify a direct threat to Bitcoin’s base layer or provide evidence of broad market contagion. The losses are concentrated in individual exchanges, DeFi protocols, bridges, and sidechain software. That makes the immediate trading impact more likely to be asset- and platform-specific than a broad-based move in BTC or the wider crypto market.
In the short term, traders may react negatively to affected tokens and platforms, monitor exchange flows and liquidity, and demand a larger risk premium from projects with similar custody, multisig, bridge, or governance designs. Past exchange failures and DeFi exploits have often triggered sharp declines in the directly exposed token and temporary volatility across the sector, while wider-market moves have depended on whether withdrawals, insolvencies, or contagion followed. The article reports no such broad spillover here.
Over the longer term, recurring crypto hacks could weigh on adoption and valuations if users lose confidence in custody and smart-contract security. Conversely, stronger audits, multivendor multisig, improved incident response, and safer bridge architecture could reduce systemic risk. AI-assisted vulnerability research is a two-sided development: it may help defenders identify flaws, but it can also lower the cost and expertise required to exploit them. Overall, the news is neutral for the broad market, with a bearish security signal for exposed projects and infrastructure.