Ethereum, Solana Top Crypto Hack Losses in H1 2026

More than $1 billion was stolen from cryptocurrency platforms in the first half of 2026, according to Blockaid’s H1 2026 security report. The onchain security firm recorded 212 security incidents in the six-month period and the largest single exploit was linked to KelpDAO at about $292 million. Blockaid verified 3.4 times as many high-threshold exploits in H1 2026 as it recorded across all of 2025.

Ethereum accounted for roughly $332 million of the losses. Blockaid found that attackers mainly exploited vulnerabilities in application code, with code-level bugs in bridges and smart contracts driving most incidents by count. Large losses also resulted from compromised privileged accounts tied to projects such as Humanity Protocol and StablR. CoWSwap was recorded as a major Ethereum incident attributed to user error rather than a code flaw or organizational breach. Blockaid identified unauthorized access to privileged accounts and market-manipulation tactics among common methods used against Ethereum applications.

Solana recorded about $326 million in losses, a sharp rise from roughly $127 million for the network in 2025. Blockaid reported that more than 98% of Solana’s losses stemmed from breaches of signing infrastructure and private keys rather than smart-contract vulnerabilities. Major incidents included attacks on Drift Protocol and Step Finance, which Blockaid linked to cyber groups with suspected ties to North Korea. A small share of Solana losses came from code exploits affecting projects such as Raydium and Volo.

Blockaid’s analysis identified recurring attack vectors across networks: bugs in cross-chain bridges, flaws in smart contracts, unauthorized access to privileged accounts and failures in organizational key management. The firm noted that Ethereum remains a frequent target because it hosts many of the sector’s highest-value applications, including restaking platforms, stablecoins and decentralized exchanges, while recent Solana incidents exposed weaknesses in signer infrastructure and operational security at organizations.

Blockaid CEO Ido Ben-Natan noted, “2025 had $2.58 billion lost across 63 incidents, concentrated in Q1 by Bybit’s $1.5 billion, with Ethereum and Arbitrum the top chains by stolen-fund flow.”

The H1 report was published Tuesday by Blockaid, which provides onchain security monitoring and analysis. The findings follow the 2025 total of $2.58 billion lost across 63 incidents and document the continued presence of both software vulnerabilities and operational security failures in the crypto sector.