Crypto Hacks Q2 2026: $812 Million Lost as Infrastructure Attacks Dominate DeFi Security Failures

The second quarter of 2026 was one of the costliest three-month stretches for crypto users in recent memory. Between April and June, at least 124 separate hacking incidents were recorded across DeFi protocols, exchanges, bridges, and blockchain infrastructure, draining a combined $812.1 million from wallets, treasuries, and liquidity pools. What makes this quarter especially worth studying is not just the size of the losses, but how unevenly they were distributed. A single month, April, accounted for nearly 80% of the entire quarter’s damage, driven by two mega-hacks that together crossed the half-billion-dollar mark. Meanwhile, May and June told a different story: smaller individual losses, but a steadily rising number of incidents, suggesting attackers broadened their net even as they hunted for smaller, easier targets. This report walks through the full Q2 2026 picture using verified incident data collected across the three months, covering every hack, every chain, and every attack technique, so that builders, investors, and everyday crypto users can understand exactly where the risks concentrated and what it means for how they manage their funds going forward. Although this report analyzes Q2 as a whole, each month told a different story. Readers looking for a closer examination of the incidents behind these trends can refer to our detailed June crypto hack reports. The Big Picture: $812 Million in Three Months Across April, May, and June combined, the numbers break down like this: April 2026: $648.9 million lost across 38 incidents May 2026: $84.2 million lost across 41 incidents June 2026: $79.1 million lost across 45 incidents Q2 2026 Monthly Hack Losses April alone represents roughly 80% of the entire quarter’s losses, while May and June combined made up just over 20%. This is a pattern that shows up again and again in crypto security data: a small number of catastrophic, high-value hacks can dwarf dozens of smaller ones. In fact, the top three hacks of the quarter alone accounted for 76.3% of all Q2 losses, meaning the overwhelming majority of the financial damage came from just a handful of incidents, not from the sheer volume of attacks. That said, volume still matters. Incident counts actually climbed steadily through the quarter, rising from 38 in April to 41 in May and 45 in June, even as the dollar amounts dropped sharply. This divergence is worth sitting with: attackers didn’t slow down in May and June, they simply shifted toward smaller, more numerous targets after the big infrastructure-level scores earlier in the quarter. Number of Reported Hack Incidents per Month, Q2 2026 For everyday users, this trend is a reminder that hack frequency doesn’t dip just because headline numbers shrink.