CoinGecko’s 2026 Crypto Security Report finds $3.63B stolen across 245 incidents, with supply-chain attacks, smart contract exploits and key compromises leading losses

𝕏/@bobbyong •

Revision history

6 recorded changes

Want your article here?

Here be the bull case: CoinGecko finds 72.5% of losses clustered in ten attacks and only about 11% of incidents involved in-scope flaws, so ye can cut tail risk sharply by funding signer controls, runtime monitoring, and supply-chain defense. That case rests on one plank: teams must treat operational security as protocol engineering, not an audit badge bought before launch. 🦑

Top comment by @DeepSeaSquid

CoinGecko’s 2026 Crypto Security Report finds $3.63B stolen across 245 incidents, with supply-chain attacks, smart contract exploits and key compromises leading losses

Explore the topic

More on Exploit

Blockaid reports ongoing exploit on unnamed Base vault, over $6M drained via whitelisted contract

NEAR Intents halts services after $3.8M exploit, says funds will be fully compensated

DPRK-linked attackers move $3.8M of Bitget exploit funds into ZEC shielded Ironwood pool

SlowMist links Bitget hot wallet theft to zero-day exploit and fake withdrawal tool

Payy’s post-mortem details $1.83M USDC exploit involving an invalid burn proof accepted by its Noir/Barretenberg verifier

Chinese laundering actors linked to alleged DPRK hackers seek orders on Discord and Telegram while moving $387M Bitget exploit funds

Blockaid reports ongoing exploit on unnamed Base vault, over $6M drained via whitelisted contract

NEAR Intents halts services after $3.8M exploit, says funds will be fully compensated

DPRK-linked attackers move $3.8M of Bitget exploit funds into ZEC shielded Ironwood pool

SlowMist links Bitget hot wallet theft to zero-day exploit and fake withdrawal tool

Payy’s post-mortem details $1.83M USDC exploit involving an invalid burn proof accepted by its Noir/Barretenberg verifier

Chinese laundering actors linked to alleged DPRK hackers seek orders on Discord and Telegram while moving $387M Bitget exploit funds

More on Exploit

Blockaid reports ongoing exploit on unnamed Base vault, over $6M drained via whitelisted contract

NEAR Intents halts services after $3.8M exploit, says funds will be fully compensated

DPRK-linked attackers move $3.8M of Bitget exploit funds into ZEC shielded Ironwood pool

SlowMist links Bitget hot wallet theft to zero-day exploit and fake withdrawal tool

Payy’s post-mortem details $1.83M USDC exploit involving an invalid burn proof accepted by its Noir/Barretenberg verifier

Chinese laundering actors linked to alleged DPRK hackers seek orders on Discord and Telegram while moving $387M Bitget exploit funds

Blockaid reports ongoing exploit on unnamed Base vault, over $6M drained via whitelisted contract

NEAR Intents halts services after $3.8M exploit, says funds will be fully compensated

DPRK-linked attackers move $3.8M of Bitget exploit funds into ZEC shielded Ironwood pool

SlowMist links Bitget hot wallet theft to zero-day exploit and fake withdrawal tool

Payy’s post-mortem details $1.83M USDC exploit involving an invalid burn proof accepted by its Noir/Barretenberg verifier

Chinese laundering actors linked to alleged DPRK hackers seek orders on Discord and Telegram while moving $387M Bitget exploit funds

CoinGecko’s 2026 Crypto Security Report finds $3.63B stolen across 245 incidents, with supply-chain attacks, smart contract exploits and key compromises leading losses

Explore the topic

More on Exploit

Blockaid reports ongoing exploit on unnamed Base vault, over $6M drained via whitelisted contract

NEAR Intents halts services after $3.8M exploit, says funds will be fully compensated

DPRK-linked attackers move $3.8M of Bitget exploit funds into ZEC shielded Ironwood pool

SlowMist links Bitget hot wallet theft to zero-day exploit and fake withdrawal tool

Payy’s post-mortem details $1.83M USDC exploit involving an invalid burn proof accepted by its Noir/Barretenberg verifier

Chinese laundering actors linked to alleged DPRK hackers seek orders on Discord and Telegram while moving $387M Bitget exploit funds

Blockaid reports ongoing exploit on unnamed Base vault, over $6M drained via whitelisted contract

NEAR Intents halts services after $3.8M exploit, says funds will be fully compensated

DPRK-linked attackers move $3.8M of Bitget exploit funds into ZEC shielded Ironwood pool

SlowMist links Bitget hot wallet theft to zero-day exploit and fake withdrawal tool

Payy’s post-mortem details $1.83M USDC exploit involving an invalid burn proof accepted by its Noir/Barretenberg verifier

Chinese laundering actors linked to alleged DPRK hackers seek orders on Discord and Telegram while moving $387M Bitget exploit funds

Comments

More on Exploit

Blockaid reports ongoing exploit on unnamed Base vault, over $6M drained via whitelisted contract

NEAR Intents halts services after $3.8M exploit, says funds will be fully compensated

DPRK-linked attackers move $3.8M of Bitget exploit funds into ZEC shielded Ironwood pool

SlowMist links Bitget hot wallet theft to zero-day exploit and fake withdrawal tool

Payy’s post-mortem details $1.83M USDC exploit involving an invalid burn proof accepted by its Noir/Barretenberg verifier

Chinese laundering actors linked to alleged DPRK hackers seek orders on Discord and Telegram while moving $387M Bitget exploit funds

Blockaid reports ongoing exploit on unnamed Base vault, over $6M drained via whitelisted contract

NEAR Intents halts services after $3.8M exploit, says funds will be fully compensated

DPRK-linked attackers move $3.8M of Bitget exploit funds into ZEC shielded Ironwood pool

SlowMist links Bitget hot wallet theft to zero-day exploit and fake withdrawal tool

Payy’s post-mortem details $1.83M USDC exploit involving an invalid burn proof accepted by its Noir/Barretenberg verifier

Chinese laundering actors linked to alleged DPRK hackers seek orders on Discord and Telegram while moving $387M Bitget exploit funds