Between January 2025 and July 2026, a total of 245 security incidents were recorded in the field of encryption, resulting in cumulative losses exceeding $3.63 billion. The top ten attack incidents account for over 72.5% of the stolen amount. Supply chain and infrastructure vulnerabilities have resulted in losses of over $1.8 billion for CEX and DEX. Common risks for CEX include private key leaks, while DApps have been stolen for approximately $546 million due to smart contract vulnerabilities. Among the 147 incidents involving completed independent security audit platforms, stolen funds accounted for 88.44% of the total losses, and only about 11% of the incidents involved smart contract defects within the audit scope.
