DeFi hacks have resulted in approximately $942 million in losses this year after 121 separate security breaches targeted decentralized finance protocols. The figures highlight a significant increase in exploit activity, underscoring persistent security vulnerabilities across decentralized protocols while investor confidence continues to weaken amid declining market participation.
As reported by CryptoRank, Q2 was one of the most devastating periods for the crypto industry, with almost $775 million stolen during 85 exploits. CryptoRank pointed out that Q2 accounted for more than 80% of total funds stolen this year, making it the busiest quarter on record for DeFi hacks and demonstrating how rapidly sophisticated attack methods have evolved.
Also Read | Saylor Signals New Bitcoin Purchase as Strategy mNAV Drops Below 1
DeFi Hacks Drive Record Quarterly Crypto Losses
According to CryptoRank, there were 49 more exploits in Q2 compared to the next busiest quarter, yet total losses stayed lower compared to previous record highs. This happened because Q2 saw only two major attacks, namely Drift Protocol and KelpDAO, which accounted for over $590 million in losses, which is almost half of all losses in 2026 from DeFi hacks.
It turned out that Drift Protocol hackers had been able to steal $285 million in assets from users via a highly coordinated social engineering hack, as per the report. Blockchain intelligence firm TRM Labs identified this attack as belonging to North Korean hacking groups. They persuaded Drift Security Council members to sign seemingly normal transactions that secretly gave authorization for executing admin tasks.
Only a couple of weeks later, the Lazarus Group hacked KelpDAO, exploiting its LayerZero bridge infrastructure. In particular, it allowed them to steal almost $290 million of rsETH.
According to Chainalysis, attackers compromised validator infrastructure, forged cross-chain messages, and tricked the verification process in order to mint tokens on Ethereum without burning corresponding assets on Unichain.
Declining TVL Reflects Broader Market Pressure
The increase in DeFi hacks took place in the context of deteriorating market conditions in decentralized finance. As noted by CryptoRank, total value locked (TVL) was decreasing every month this year, falling from approximately $115.3 billion in January to just over $70 billion by the end of June. While security breaches could not be considered the only reason, their constant occurrence could have contributed to capital outflow.
The KelpDAO hack led to additional market disturbance. As a result, the TVL of Aave, the lending protocol where almost $12 billion was left in less than a day, went down from $26.4 billion to $14.3 billion.
However, analysts point out that current market conditions are different from the collapse of DeFi in 2021-2022. In particular, CryptoRank noted the expanding supply of stablecoins, real-world asset tokenization, and increased capital diversification across lending, derivatives, and infrastructure.
Among blockchain platforms, only Tron and Hyperliquid were showing growth in TVL in 2026, while networks like Plasma and Arbitrum suffered the biggest drops.
Also Read | Hyper Foundation Launches $10M Grants Amid USDH Shutdown
