TRM Labs recorded 207 crypto hacks during the first half of 2026, the highest six-month total the firm has tracked. Total losses reached $972 million, down sharply from $2.3 billion in the same period a year earlier.
The increase in incidents was driven largely by smart-contract exploits, which accounted for 125 of the 207 cases. Median losses per hack stood at about $219,000, while the average reached $4.7 million.
Infrastructure and operational compromises made up only 15 percent of incidents yet represented roughly 76 percent of all funds stolen. North Korea-linked activity was responsible for about $643 million, or 66 percent of total losses.
Two April operations against Drift Protocol and KelpDAO accounted for most of the North Korea-linked total, with losses estimated at $285 million and $292 million respectively. TRM Labs noted that smart-contract audits remain essential but stressed the need for stronger controls over keys, signing processes, and custody systems.
