Crypto security Is deteriorating: $11.9B in losses and rising mega hacks
Despite a drop in average losses, large-scale attacks are becoming increasingly destructive.
23.03.2026 - 10:50
214
3 min
0
Key points:
- The frequency of crypto hacks remains consistently high, with around 90–100 attacks per year.
- Most losses come from major incidents: up to 73% of stolen funds are tied to the 10 largest hacks.
- When a project is hacked, losses often reach tens of millions, and most tokens never recover.
Over the past three years, blockchain security has worsened significantly, according to a new Immunefi report.
If a protocol is hacked in 2026, average direct losses are estimated at around $25 million. Token prices drop by up to 61% within six months, and 84% of affected assets never recover. Teams typically spend up to three months dealing with the aftermath, slowing down product development.
Median token price decline based on Immunefi’s sample of 82 hacked tokens in 2024–2025
The report also highlights a shift in attack patterns. The number of hacks hasn’t decreased, but the average size of each theft has gone down. In 2024–2025, the average loss per incident was $2.2 million, compared to $4.5 million in 2021–2023.
However, overall risk has increased due to large-scale incidents. Most losses now come from a small number of major attacks. The five largest hacks in 2024–2025 accounted for 62% of all stolen funds, while the top ten made up 73%. The Bybit hack alone represented 44% of total losses in 2025.
In total, 425 attacks have been recorded in recent years, resulting in $11.9 billion in losses. The frequency of incidents remains consistently high, at around 90–100 hacks annually.
Crypto market loses $26.5M to hacks in February — lowest level in 11 months
In February 2026, total crypto industry losses from hacks and scams reached $26.5 million — the lowest monthly figure since March 2025.
Centralized exchanges stand out. They accounted for just 10% of attacks but over half of total losses—54.6%. The remaining share comes from DeFi protocols and other projects. As DeFi becomes more interconnected, the potential impact of individual exploits continues to grow.
Useful material?
Incidents
Developers warned of potential risks to bridges across the ecosystem and asked exchanges for assistance.
Jun 22, 2026
Incidents
The defendant helped move funds stolen through investment scams and earned at least $4 million for his role in the operation.
Jun 10, 2026
Incidents
The company is linking the incident to a compromised private key on a service wallet, rather than a smart contract exploit
May 22, 2026
Incidents
Following the incident, the project temporarily halted trading operations and node activity.
May 15, 2026
Incidents
The user spent weeks unsuccessfully trying to guess the password until Claude helped find an old wallet backup file
May 14, 2026
Crypto regulations
Authorities are introducing mandatory registration for companies handling cross-border crypto transactions
May 8, 2026
Telegram
Twitter