Crypto hacks fall in early 2026 as private-key and smart-contract risks persist

Crypto hacks dropped sharply in early 2026, but the security threat remains elevated for DeFi and crypto infrastructure. Kraken security chief Nick Percoco said hacking typically rises during bull markets and rapid growth because value concentrates—not due to any “calendar”—so security must be treated as an ongoing process. New DefiLlama data shows crypto hacks in Q1 2026 totaled about $168.6M stolen across 34 DeFi protocols, versus $1.58B in the same period a year earlier. The prior-year figure was heavily distorted by the $1.4B Bybit breach, so the decline looks less extreme after excluding that one event, though losses in early 2026 are still substantial. Key incidents highlighted include: Step Finance losing about $40M in January after a private-key compromise; TrueBit losing $26.4M in ETH on Jan. 8 via smart-contract exploitation; and Resolv Labs suffering a late-March private-key related incident. The article stresses that private-key failures and smart-contract/code exploits are different root causes, but both keep recurring. The quarter also saw wider distribution of attacks across multiple protocols, with January the worst month. North Korea-linked actors were again flagged in connection with major thefts, including a reported Drift Protocol private-key leak estimated at $285M. For crypto traders, the headline reduction in crypto hacks is modestly constructive for risk sentiment, but persistent access-control and credential-management weaknesses keep counterparty and protocol risk premiums in focus.