This week’s report from CryptoRank highlights how DeFi took a beating with 121 hacks so far this year and roughly $942 million drained away.
Q2 Turned Into Peak Season For Exploits 💀
The second quarter saw 85 incidents and about $775 million stolen making it the most intense stretch ever for crypto exploits 🔗. This wave of attacks hits amid a crypto market slump with investor faith fading fast. Total value locked in DeFi protocols slipped each month dropping from $115 billion in January down to $70 billion by late June.
Drift And KelpDAO Attacks Fueled Massive Losses 🌑
CryptoRank data shows Q2 2026 brought 85 incidents which is 49 more than Q1 2026 the prior high for exploit frequency yet the dollar losses fell short of past records. Two consecutive April strikes accounted for most of the quarter’s damage. Drift Protocol and KelpDAO together lost $590 million over half of all DeFi losses this year. Drift revealed attackers grabbed around $285 million in user funds with TRM Labs tying it to North Korea linked groups. Prep for the hit started on chain back on March 11 via a 10 ETH Tornado Cash withdrawal after months of in person meetups between those Pyongyang proxies and Drift staff. The attacker leaned on social engineering to get multisig signers pre approving transactions that hid admin access the firm noted in an April 30 report. Just over two weeks later North Korea’s Lazarus Group hit KelpDAO’s LayerZero setup and snatched nearly $290 million in rsETH. Chainalysis flagged how they faked a cross chain message on April 18 after breaching two RPC nodes in LayerZero’s verifier network while DDoS striking a third to force compromised verifiers. This rigged the process to mint rsETH on Ethereum without burning the matching assets on Unichain. Aave’s TVL then plunged from $26.4 billion to $14.3 billion with $12 billion withdrawn a 46 percent drop.
Market Shrinkage Added Extra Pressure Beyond The Hacks 💀
Aave’s dip matched the broader trend CryptoRank tracked with DeFi value locked sliding every month in 2026 from $115.3 billion in January to just over $70 billion in June. Hacks played a role in eroding user trust yet they were not the sole driver per the data. Still this drop pales against the 2021 2022 cycle where TVL crashed over 70 percent in seven months. The current slide feels slower with structural shifts like stablecoin supply hitting $300 billion real world asset tokenization growing and capital spreading into derivatives infrastructure and lending rather than clustering in AMMs or yield farms. Among top ecosystems by TVL only Tron and Hyperliquid grew this year with gains of 5 percent and nearly 7 percent as Hyperliquid dominated on chain perps. The rest of the top 10 chains sit deep in red with Plasma and Arbitrum hit hardest at 74.6 percent and 55 percent TVL drops.
Just another echo from the void by iconofsin.eth 💖
