Crypto theft shifts from volume to surgical strikes

The sharp decline in total stolen assets is largely statistical noise, driven by the absence of a singular, massive exploit comparable to the $1.4 billion Bybit hack recorded in early 2025. Without that outlier, data indicates that the underlying rate of attack activity has actually accelerated. CertiK notes that while phishing dominated the first quarter with $508.2 million in losses, the second quarter saw a pivot toward wallet compromises, which accounted for $807.5 million. Two specific incidents involving KelpDAO and Drift Protocol alone comprised over 70% of those second-quarter losses.

Intelligence from TRM Labs corroborates this shift, reporting a record-breaking 207 security incidents in the first half of 2026, a significant jump from the 83 recorded during the same period last year. Smart contract vulnerabilities currently account for approximately 60% of these breaches. Security experts argue that the industry faces a structural escalation in threat sophistication, particularly as North Korean state-sponsored hackers increasingly employ artificial intelligence to refine their offensive capabilities. With over $6 billion stolen by North Korean actors since 2017, officials from the United States, Japan, and South Korea have intensified cooperation to combat these illicit revenue streams, stressing that robust private key management and hardware-level security are now the only viable defenses against these surgical, high-value attacks.