The second quarter of 2026 has become the worst quarter on record for crypto related exploits, with hacking incidents reaching unprecedented levels. Despite the sharp rise in attacks, two major breaches accounted for most of the total losses.
According to a recent report from CryptoRank, DeFi platforms have suffered 121 hacks so far in 2026, leading to total losses of approximately $942 million.
The second quarter alone accounted for 85 of those incidents and roughly $775 million in stolen funds, making it the most exploit heavy quarter in crypto history.
This surge in attacks comes during a broader market downturn, as investor confidence in the crypto sector continues to weaken. Total value locked across DeFi protocols has declined every month this year, falling from around $115 billion in January to roughly $70 billion by late June.
Drift Protocol and KelpDAO Drove Most of Q2 Losses
According to CryptoRank, the 85 exploits recorded in Q2 were 49 more than the previous highest quarterly total, which was recorded in Q1 2026.
Even so, overall losses in dollar terms did not surpass earlier historical peaks, largely because two major attacks in April were responsible for most of the quarter’s damage.
Drift Protocol and KelpDAO suffered combined losses of around $590 million, accounting for well over half of all DeFi losses recorded this year.
Drift Protocol reported that attackers stole approximately $285 million in user assets. Investigations by TRM Labs linked the attack to hacking groups associated with North Korea.
According to TRM Labs, preparations for the exploit began on chain as early as March 11, beginning with a 10 ETH withdrawal from Tornado Cash.
The firm stated that the attackers used social engineering tactics to manipulate security council multisig signers into approving transactions that appeared routine but secretly authorized critical administrative actions.
Just over two weeks later, North Korea’s Lazarus Group exploited KelpDAO through weaknesses in its LayerZero bridge infrastructure, stealing approximately $290 million worth of rsETH.
At the time, Chainalysis reported that attackers forged a cross chain message after compromising two remote procedure call nodes used by LayerZero’s decentralized verifier network.
The attackers also launched a distributed denial of service attack against a third node, forcing the system to rely on compromised validators.
This manipulation enabled the fraudulent minting of rsETH tokens on Ethereum without properly burning the corresponding assets on the source chain.
The fallout was immediate. Within days of the breach, Aave saw its total value locked drop from $26.4 billion to $14.3 billion, representing nearly $12 billion in withdrawals and a decline of about 46 percent.
Shrinking Market Conditions Added More Pressure
Security breaches were only part of the problem. The broader DeFi market has also been steadily contracting.
Data from CryptoRank shows total DeFi value locked declined every month in 2026, dropping from $115.3 billion in January to just over $70 billion in June.
While hacks were not the sole reason behind this decline, the increasing frequency of exploits likely weakened user confidence and accelerated capital rotation away from the sector.
Even so, the current downturn has been less severe than the collapse seen during the 2021 to 2022 cycle, when DeFi TVL fell more than 70 percent within seven months.
According to CryptoQuant, the current market structure is also significantly different. Stablecoin supply has expanded to nearly $300 billion, real world asset tokenization has grown rapidly, and capital is now spread across multiple sectors such as derivatives, infrastructure, and lending rather than being concentrated in AMMs and yield farming protocols.
Among the largest blockchain ecosystems by TVL, only Tron and Hyperliquid have posted growth in 2026.
Tron has gained roughly 5 percent, while Hyperliquid has risen nearly 7 percent, driven largely by its dominance in on chain perpetual trading.
Most of the top 10 ecosystems remain deeply in negative territory. The worst performers have been Plasma and Arbitrum, whose TVL has dropped by 74.6 percent and 55 percent respectively.#crypto#cryptonews https://coinsignals.net https://t.me/coinsignalpublic
