Audited Protocols Account for 88% of Crypto Hack Losses Since 2025, Report Shows
Crypto protocols that accomplished impartial safety audits accounted for 88.44% of all funds stolen since January 2025, based on CoinGecko’s 2026 state of crypto safety report.
The examine tracked 245 incidents and $3.63 billion in losses by way of July 2026. Independent auditors had cleared 147 of the breached platforms earlier than attackers reached them.
Security Audits Did Not Stop 147 of 245 Crypto Hacks
CoinGecko mentioned that solely 11% of exploits concerned in-scope good contract flaws, although these instances nonetheless drained $396 million.
Follow us on X to get the newest information because it occurs
The harm got here from all over the place else. Attackers went after exterior infrastructure, code shipped after the audit closed, and systemic options that might be manipulated by way of governance.
Supply chain and infrastructure breaches took greater than $1.8 billion, the most important single class within the report. Overall, good contract exploit-driven losses throughout decentralized functions (dApps) reached $546 million.
May’s Stake DAO breach showed the limit. An attacker compromised a deployer key somewhat than exploiting contract logic. On centralized exchanges, stolen personal keys remained the most typical level of failure.
“Infrastructure and provide chain vulnerabilities have confirmed to be probably the most devastating for each CEXes and DEXes,” the report learn.
The losses additionally cluster tightly. The 10 largest assaults alone produced 72.5% of all the things taken throughout the 19-month window.
Cover towards these losses is thinning too. Active on-chain insurance coverage fell 20.2% to $130.2 million, and 5 of 9 insurance coverage protocols went inactive or modified route.
2026 Brings More Hacks and Smaller Losses
Meanwhile, DefiLlama has logged 233 separate incidents to date in 2026, value roughly $1.31 billion. The similar stretch of 2025 noticed 92 incidents and $2.37 billion in losses.
Incident quantity greater than doubled whereas complete losses fell about 45%. Average loss per incident dropped from $25.8 million to $5.6 million. The $1.5 billion Bybit theft inflated the 2025 complete.
Three instances carried most of this 12 months’s complete. Kelp DAO lost $292 million, and Drift Protocol lost $285 million in April 2026. These two additionally rank among the many prime three hacks since 2025, following Bybit
Smaller assaults now arrive fairly regularly, including to the lengthy listing of 2026 crypto breaches. August alone introduced an $8.5 million Term Labs governance exploit.
Overall, the sample raises a scoping query somewhat than a competence one. Contract critiques stay slim whereas deployment keys and governance parameters carry rising worth.
Subscribe to our YouTube channel to observe leaders and journalists present skilled insights
The put up Audited Protocols Account for 88% of Crypto Hack Losses Since 2025, Report Shows appeared first on BeInCrypto.