In the first half of 2026, the cryptocurrency industry lost approximately $1.32 billion, with Access Control Vulnerabilities being the primary attack vector.

BlockBeats News, July 25th - According to Onchain Lens statistics, in the first half of 2026, the crypto industry experienced a total of 224 publicly disclosed security incidents, resulting in a cumulative loss of approximately $1.32 billion. Among them, the largest losses were caused by "Access Control Vulnerabilities," with several major attacks stemming from compromised permission management or private keys/administrator privileges, including:

Kelp DAO: Loss of $292 million

Drift Protocol: Loss of $280 million

Humanity Protocol: Loss of $31 million

Step Finance: Loss of $30 million

Truebit: Loss of $26.5 million

Resolv Labs: Loss of $25 million

AFX: Loss of $24.15 million

BonkDAO: Loss of $21 million

Furthermore, phishing and social engineering attacks resulted in approximately $282 million in losses; oracle-related vulnerability attacks include:

Ostium: $24 million

Blend Protocol: $10.86 million

Bonzo: $9 million

The data shows that a few major attack events accounted for most of the losses, with permission management, user security education, and oracle risks remaining key areas of focus for security protection in the 2026 crypto industry.