In the first half of 2026, the cryptocurrency industry lost approximately $1.32 billion, with Access Control Vulnerabilities being the primary attack vector.

BlockBeats News, July 25th. According to Onchain Lens, in the first half of 2026, the crypto industry experienced a total of 224 publicly disclosed security incidents, resulting in a cumulative loss of approximately $1.32 billion. Among them, the largest losses were caused by "Access Control Vulnerabilities," with several major attacks stemming from compromised permission management or private keys/administrator privileges, including:

Kelp DAO: Loss of $292 million

Drift Protocol: Loss of $280 million

Humanity Protocol: Loss of $31 million

Step Finance: Loss of $30 million

Truebit: Loss of $26.5 million

Resolv Labs: Loss of $25 million

AFX: Loss of $24.15 million

BonkDAO: Loss of $21 million

In addition, phishing and social engineering attacks resulted in approximately $282 million in losses; oracle-related vulnerability attacks include:

Ostium: $24 million

Blend Protocol: $10.86 million

Bonzo: $9 million

Data shows that a few large-scale attack events accounted for the majority of the losses. Permission management, user security education, and oracle risks remain key focus areas for security in the crypto industry in 2026.