CEX and DeFi Lead $2.35B Crypto Losses in 2026 Amid Security Breaches
In 2026, crypto hacks resulted in $2.35 billion in losses, heavily impacting centralized exchanges and DeFi protocols.
The landscape of cryptocurrency security has seen alarming events in 2026, with hacking incidents leading to an estimated $2.35 billion in net losses. A report from Lightning.news highlighted key vulnerabilities in the industry, particularly affecting centralized exchanges (CEX) and decentralized finance (DeFi) protocols.
Major Breaches and Concerns
Stacy Muur, a security researcher, revealed on social media that over 230 protocols had suffered hacks resulting in losses exceeding $50,000 each this year. Notably, September alone saw about $768 million in losses, a significant portion caused by activities in CEX and DeFi sectors, contrasting with limited incidents involving hardware wallets.
High-Stakes Incidents
The most significant breach occurred on September 24, when Bitget was compromised, resulting in a loss of approximately $387.5 million from both hot and warm wallets. Investigations by security firms, including Chainalysis and TRM Labs, pointed towards North Korea, citing patterns linked to previous cyberattacks associated with the DPRK.
Another notable incident involved the Liquid Network, a Bitcoin sidechain managed by Blockstream, where attackers exploited a software vulnerability in early September. They minted about 4,000 unbacked L-BTC, valued at around $320 million, before returning most of the bitcoins after negotiations. This attack showcased flaws in the network's protocol but did not affect any federation keys.
DeFi Platforms Under Fire
DeFi protocols were not spared from this surge in hacks. Drift Protocol experienced a substantial setback, losing approximately $285-$296 million due to a breach exploiting governance structures through social engineering. Investigators concluded that the attack was likely orchestrated by North Korean operatives.
Meanwhile, KelpDAO’s rsETH bridge, powered by LayerZero, was drained of about $292 million after vulnerabilities in its design were exploited. Initial assessments from LayerZero also suggested connections to the DPRK’s notorious Lazarus Group.
On the Cronos network, Tectonic experienced a loss estimated at $120.4 million due to manipulated collateral. Though validators managed to revert many actions, a significant amount of funds had already been moved off-network and could not be recovered.
Hardware Wallets: A Different Story
Despite extensive coverage, hacks involving hardware wallets contributed relatively smaller losses compared to their CEX and DeFi counterparts. For example, Galaxy Research estimated that the Coinkite RNG hack resulted in losses between 1,596 and 1,789 BTC, roughly translating to $100-$130 million. There were also Ledger losses amounting to about $86-$102 million that were tied to compromised devices sold through a specific Southeast Asian reseller.
This situation underscores a crucial distinction: while the breaches involving centralized systems were large-scale and widespread, losses tied to hardware wallet hacks remained isolated and more limited in scale.
The Role of AI in Cybersecurity
The rise of artificial intelligence in cybersecurity has added another layer of concern for the crypto sector. AI tools are increasingly being utilized to identify vulnerabilities and facilitate the development of exploits. Muur noted that the ease with which AI can aid in finding and exploiting programming errors signifies a serious development in the cybersecurity landscape.
Since the release of models such as GPT-5.3-Codex, there has been a noticeable uptick in the exploitation of smart contracts, particularly as AI systems demonstrate their effectiveness in carrying out complex tasks that previously required manual intervention.
Although traditional vectors like social engineering still play a prominent role in these attacks, the advent of AI is reshaping the dynamics of security within DeFi and CEX environments.
Future Considerations for Self-Custody
The stark reality is that losses in 2026 primarily stemmed from compromised CEX hot wallets and DeFi protocols. In comparison, hardware wallets, while not immune to breaches, have demonstrated more robust resilience in the face of these widespread attacks.
Amid these challenges, industry leaders are advocating for updated self-custody recommendations, with a focus on promoting multivendor multisig wallets. As security threats evolve, ensuring the safety of crypto assets has never been more critical.