Crypto protocols lost over $1 billion to hacks in the first half of 2026, marking a record for digital asset theft, according to security firm Blockaid. Ethereum and Solana projects accounted for the largest share of losses.

Ethereum-based projects saw $332 million stolen from Jan. 1 to June 30. Solana protocols lost $326 million over the same period.

The $1 billion cumulative figure represents a sharp increase from prior half-year periods. Attack vectors have shifted beyond flash loan exploits toward private key compromises and phishing campaigns targeting individual users and protocol treasuries.

Smart contract vulnerabilities remain a primary target. A growing number of incidents involved social engineering and supply chain attacks on infrastructure providers—methods that bypass traditional smart contract audits.

Protocols hit by major exploits typically see immediate capital outflows and TVL contraction. Rebuilding liquidity and user confidence requires sustained security investment.

On Ethereum, many exploits targeted new or unaudited DeFi primitives. Bridge vulnerabilities contributed to losses as well, with cross-chain transfers expanding the attack surface across the network's interconnected ecosystem.

Solana's high-throughput architecture and developer ecosystem present different risk profiles. Attacks on Solana frequently involved wallet compromises or exploits within specific dApps holding significant user funds, with transaction speed complicating mitigation efforts.

Security firms including Blockaid deploy real-time threat detection and exploit prevention tools. Proactive monitoring is becoming standard practice for new protocol launches.

Decentralized insurance protocols aim to offset some financial exposure. Nexus Mutual and InsurAce offer coverage for smart contract exploits, though coverage limits and complex claims processes constrain adoption.

New protocols launching with novel mechanisms introduce untested code and fresh attack vectors. Balancing speed to market with security discipline remains a core tension for the industry.

Formal verification methods and bug bounty programs help surface vulnerabilities before attackers do. Multi-signature wallets, hardware security modules and advanced cryptography add further layers of defense, but reducing the attack surface requires ongoing vigilance from both protocol teams and users.