Crypto Hacks Drain $1.1B in First Half of 2026, North Korea Accounts for Half
Security breaches and exploits across crypto platforms and protocols resulted in $1.1 billion in stolen funds during the first six months of 2026, spanning 212 separate incidents. North Korea-linked threat actors were responsible for more than half of the total losses.
Key Takeaways
- 1## Scale of Losses in H1 2026 Crypto security breaches resulted in $1.
- 21 billion in stolen assets during the first half of 2026, according to incident tracking data.
- 3The figure encompasses 212 separate security events, including smart contract exploits, exchange compromises, and wallet drains across multiple chains and platforms.
- 4## North Korea's Outsized Share North Korea-linked attackers accounted for more than 50% of all stolen funds during the period, reflecting the continued sophistication and scale of state-sponsored crypto theft operations.
- 5These groups have historically targeted both centralized exchanges and decentralized finance protocols, converting stolen assets through layered mixing services and cross-chain bridges.
Scale of Losses in H1 2026
Crypto security breaches resulted in $1.1 billion in stolen assets during the first half of 2026, according to incident tracking data. The figure encompasses 212 separate security events, including smart contract exploits, exchange compromises, and wallet drains across multiple chains and platforms.
North Korea's Outsized Share
North Korea-linked attackers accounted for more than 50% of all stolen funds during the period, reflecting the continued sophistication and scale of state-sponsored crypto theft operations. These groups have historically targeted both centralized exchanges and decentralized finance protocols, converting stolen assets through layered mixing services and cross-chain bridges.
Broader Security Landscape
The $1.1 billion total represents a significant volume of losses concentrated in a six-month window. The 212 incidents indicate that individual breach sizes vary widely, from small smart contract exploits to major exchange or bridge hacks. Security monitoring firms track these events through blockchain analysis, incident disclosures, and law enforcement reports.
Why It Matters
For Traders
Elevated theft risk underscores the importance of withdrawal timing, custody choice, and exposure to protocols with known security histories when managing positions.
For Investors
Persistent large-scale losses to state-sponsored actors signal that institutional adoption remains constrained by custody and operational security concerns until infrastructure hardens.
For Builders
The scale and persistence of North Korea-linked activity highlights demand for auditing services, multi-sig infrastructure, and bridge security that can reduce attack surface.
