The crypto industry lost approximately $1.32 billion in the first half of 2026, and access control flaws became the biggest source of attack

Comparatively, according to Onchain Lens statistics, 224 publicly disclosed security incidents occurred in the crypto industry in the first half of 2026, with a cumulative loss of about US$1.32 billion. Among them, access control vulnerabilities caused the most damage. Many large-scale attacks stemmed from permission management or private key/administrator rights being breached, including:

Kelp DAO: $292 million loss

Drift Protocol: $280 million in losses

Humanity Protocol: $31 million loss

Step Finance: $30 million loss

Truebit: $26.5 million lost

Resolv Labs: $25 million loss

AFX: Loss of $24.15 million

BonkDAO: $21M loss

Additionally, phishing and social engineering attacks cost approximately $282 million; attacks related to the oracle bug include:

Ostium: $24 million

Blend Protocol: $10.86 million

Bonzo: $9 million

According to the data, a few large-scale attacks contributed to most of the losses, and permission management, user security education, and oracle risk are still key areas of security protection for the cryptographic industry in 2026.