CertiK's report indicates that cryptocurrency losses in the first half of 2026 decreased by 46.8% year-on-year to $1.32 billion. Losses from phishing attacks in Q1 amounted to $508.2 million, while private key leaks in Q2 resulted in $807.5 million in losses, with over 70% stemming from hacks targeting KelpDAO and Drift Protocol. Both incidents were attributed to North Korean state-sponsored hackers. TRM Labs data reveals that the number of attacks surged from 83 in the first half of last year to 207 this year, marking a historic high, with smart contract vulnerabilities accounting for 60% of incidents. CertiK noted that the decline in losses was due to the $1.4 billion Bybit hack last year, which skewed the comparison. Excluding that factor, attacks have become more targeted, with private key and multi-signature wallet management remaining critical security risks.
