Crypto Exploits Drain $3.63B Since 2025
Crypto exploits drained more than $3.63 billion from cryptocurrency platforms between January 2025 and July 2026, according to CoinGecko. The report recorded 245 security incidents, with the 10 largest attacks accounting for more than 72.5% of total losses.
Infrastructure and supply-chain weaknesses caused more than $1.8 billion in combined losses. Centralized exchanges were most vulnerable to compromised private keys, while decentralized applications lost $546 million through smart contract exploits. Oracle failures, market manipulation and governance attacks also affected platforms including Bitget, Binance and Hyperliquid.
Audits did not eliminate the risk. Of the 245 compromised platforms, 147 had completed security audits, and audited platforms accounted for more than 88% of the capital drained. Only about 11% of incidents involving audited platforms were linked to smart contract flaws within the audit scope.
Crypto insurance coverage also weakened. Active coverage across leading on-chain insurance protocols fell 20.2% to $130.2 million, while cumulative payouts remained near $33 million. The findings highlight continuing crypto exploits risk, limited audit coverage and declining insurance capacity—factors traders should monitor when assessing exchange, DeFi and token-specific counterparty risk.
Bearish
The market impact is bearish because the report points to persistent and systemic security risks rather than isolated technical failures. Crypto exploits have caused $3.63 billion in losses, while more than 88% of stolen capital came from platforms that had already undergone audits. This weakens confidence in audits as a reliable risk-control signal and may increase selling pressure on tokens linked to vulnerable exchanges, DeFi protocols or infrastructure providers.
In the short term, traders may respond by reducing exposure to smaller DeFi projects, moving funds to more established custodians and demanding higher risk premiums. Security headlines have historically triggered sharp declines in affected tokens and temporary volatility across the wider market, although the concentrated nature of the largest incidents means the impact may remain limited if no major systemic platform is attacked.
Over the longer term, shrinking crypto insurance coverage could discourage liquidity providers and institutional participants. Exchanges and protocols may face higher security, compliance and insurance costs. Stronger key management, real-time monitoring, broader audits and transparent incident reporting could eventually support confidence, but the current combination of rising losses and declining coverage is negative for market stability. Bitcoin and major assets may be relatively insulated, while tokens tied directly to compromised platforms could face disproportionate downside.