By DefiLlama counted 322 confirmed crypto hacks in 2026 as of Friday, which it says is “already more than twice the total number of hacks last year” with two months still to run. The value taken across those incidents is $8.734 billion.
A single entry accounts for $6.36 billion of the crypto hacks 2026 total. The Binance hot wallet drain on 29 October is 72.8% of everything stolen in crypto this year, and it arrived in a year that had until then been running the other way.
Crypto Hacks 2026 Reached 322 Incidents With Two Months Still to Run
The crypto hacks 2026 incident count is the cleaner signal, because it does not move with token prices. DefiLlama’s series runs back to 2011, and 2026 is already its highest annual count, ahead of the previous peak set in 2024. The 2025 total was lower than 2024’s, which makes this year’s doubling steeper than a simple trend line.
Three other trackers counted the same first half and disagreed with each other. Immunefi logged 207 incidents and called it the highest it had recorded. CertiK counted 344 over the same period. SlowMist counted 182, up about 50% on the first half of 2025. The gap between those numbers is methodology rather than error, and it is why crypto hacks 2026 totals vary so widely depending on who is counting.
The count has risen in every year of the series except 2025, and 2026 passed the old peak with two months still to run. Source: DefiLlamaOne Incident Is 72.8% of the $8.73 Billion
Remove Binance and crypto hacks 2026 looks like an ordinary year. The other 321 incidents total $2.374 billion, an average of $7.4 million each. Include it and the average jumps to $27.1 million, which is a statistic about one night rather than about the year.
Strip out one night in October and the other 321 incidents of the year average $7.4 million each. Source: DefiLlama · Chart: FinanceFeedsDefiLlama prices the Binance hack at $6.36 billion, the same figure TRM Labs published, and files it under “Key Leaked via Infrastructure.” That classification matters, because Binance co-chief executive Richard Teng has said the company has “found no evidence of any wallet private key leak,” while TRM assesses that the attacker likely compromised Binance’s signing infrastructure. DefiLlama has put it in the category that names both halves of that argument.
Investor Takeaway
Crypto hacks 2026 stand at 322 incidents and $8.734 billion on DefiLlama’s count, already more than double last year’s incident total.
Until 29 October the Year Was Running at $7.4 Million an Incident
The crypto hacks 2026 story through the first nine months was more attacks for less money. Immunefi reported $972 million of losses across its record first half, under $1 billion, and said attacks had become “more frequent but less costly per event,” with median loss per DeFi exploit down 75% from the 2022 peak. SlowMist had losses falling about 60% year on year while incidents rose 50%. CertiK’s first half came in 46.8% below the same period of 2025.
Nine months of the year sit under $750 million each, and October clears $6 billion on the strength of one incident. Source: DefiLlamaImmunefi also identified where the remaining damage was concentrated, and it was not smart contract bugs. It pointed to infrastructure failures, private key compromises, cross-chain configuration errors and weak privileged access. Ten months later, what TRM Labs calls the largest theft on record ran through signing infrastructure on ten chains, which is the same list.
The Crypto Hacks 2026 Figures Circulating Online Do Not Match Any Tracker
A widely shared post this week put 2026 at roughly 750 incidents and $9.0 billion, a 133% rise on 2025. The loss figure is close to DefiLlama’s $8.734 billion. The incident count is not close to anything.
No tracker publishes a number near 750. DefiLlama has 322 for the full year. CertiK had 344 for the first half, Immunefi 207, SlowMist 182. The $9.0 billion appears to combine CertiK’s first-half and third-quarter totals with Binance’s own $6.3 billion estimate, which mixes one firm’s methodology with a company’s self-reported figure. The 133% also fails to reconcile, because CertiK’s 2025 base of about $3.35 billion against $9.0 billion is closer to 169%.
None of that arithmetic changes the underlying direction of travel, which is upward on every count. DefiLlama’s own page carries a prediction market on whether there will be a $1 million hack in any given week, and nine of the ten weeks before this one had at least one. Binance has pledged to cover its losses in full and about $3 billion has been frozen, which is the part of this year’s total that may yet come back. Binance expects withdrawals to restart within 48 hours, and the exchange’s first statement on the breach was edited twice in 13 minutes.
Investor Takeaway
About $3 billion of the Binance proceeds is frozen, so the final loss figure for the year is not yet settled.