Drift

Swap

Hyperbridge

Dango

Oracle

<h2 id="b-tldr-b">TLDR:</h2>
<ul>
 <li>Over $450 million has been lost across 45 crypto protocols in 2026, marking a severe industry-wide security breakdown.</li>
 <li>Smart contract bugs drained funds from Dango and Silo V2, proving audited code still carries exploitable vulnerabilities.</li>
 <li>Human-layer attacks on Kraken and Zerion show that insider threats and social engineering remain critical weak points.</li>
 <li>Infrastructure exploits at CoW Swap and Hyperbridge reveal that routing and communication systems are increasingly targeted by attackers.</li>
</ul>
The <a href="https://blockonomi.com/crypto-industry-demands-clearer-regulations-in-letter-to-president-trump/" rel="noopener noreferrer nofollow">crypto industry</a> is facing a severe security crisis in 2026. Around 45 protocols have been hacked, with losses exceeding $450 million in total. 
The breaches span decentralized finance, centralized exchanges, and cross-chain infrastructure. Attackers have exploited code vulnerabilities, human error, and systemic weaknesses alike. 
This wave of incidents raises urgent questions about where the crypto ecosystem remains most exposed.
<h2 id="b-a-string-of-exploits-hits-major-protocols-b">A String of Exploits Hits Major Protocols</h2>
The period began with a $280 million exploit on<a href="https://parameter.io/how-north-korean-operatives-orchestrated-a-270m-drift-protocol-crypto-heist-after-half-year-infiltration/" rel="noopener noreferrer nofollow"> Drift,</a> setting a grim tone. Shortly after, CoW Swap suffered a frontend and DNS hijack attack. 
Hyperbridge followed, where forged messages allowed attackers to mint one billion tokens, crashing the price to zero.
Bybit faced a $1 billion exploit attempt, though it was blocked in time. KuCoin reported $9.5 million laundered through its platform. Kraken dealt with an insider extortion attempt that exposed over 2,000 user accounts.
Smaller protocols were not spared either. Dango lost $410,000 to a smart contract bug. Silo V2 suffered $392,000 in losses through an oracle manipulation exploit. BSC TMM lost $1.67 million to reserve manipulation tactics.
Aethir and SubQuery together lost $480,000 through access control failures. MONA saw $61,000 drained via a burn address exploit. Zerion lost $100,000 in a social engineering attack.
<h2 id="b-code-people-and-systems-all-share-the-blame-b">Code, People, and Systems All Share the Blame</h2>
Crypto analyst @jussy_world posted a breakdown on X, listing twelve additional hacks following the Drift incident. The thread pointed out that no single vulnerability type is responsible. Instead, the attacks cut across smart contract bugs, infrastructure weaknesses, and human error simultaneously.
<div class="embed-twitter">
 <blockquote class="twitter-tweet">
 12 more protocols got hacked since the $280M Drift exploit
 Here’s what the last 2 weeks looked like:
 &gt; CoW Swap: frontend/DNS hijack
 &gt; Hyperbridge: forged message exploit 1B tokens minted, price → zero
 &gt; Bybit: $1B exploit attempt Blocked in time
 &gt; KuCoin: $9.5M laundered… <a href="https://t.co/BuqdlnZtMN" rel="noopener noreferrer nofollow">pic.twitter.com/BuqdlnZtMN</a>
 — jussy (@jussy_world) <a href="https://twitter.com/jussy_world/status/2044684951891898473?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">April 16, 2026</a>
 </blockquote>
</div>
Smart contract flaws remain a persistent problem. Dango and Silo V2 both demonstrate that even audited code can carry exploitable logic. Oracle manipulation, as seen in Silo V2, continues to be a recurring attack vector across DeFi platforms.
Human factors, however, proved equally damaging. The <a href="https://coincentral.com/kraken-reports-confidential-ipo-filing-after-valuation-drops-to-13-3-billion-mark/" rel="noopener noreferrer nofollow">Kraken</a> insider extortion attempt and the Zerion social engineering attack show that technology alone cannot secure a protocol. Personnel with privileged access represent an ongoing threat surface that is difficult to patch with code.
At the infrastructure level, CoW Swap’s DNS hijack and Hyperbridge’s forged message exploit point to systemic risks. These are not application-layer bugs. 
They target the underlying communication and routing systems that protocols depend on. That makes them harder to detect and faster to cause damage once triggered.
With $450 million lost across 45 protocols in early 2026, the pressure on development teams, security auditors, and exchange operators continues to mount. 
The pattern across these incidents suggests the weakest link is not fixed to one layer — it shifts depending on where attention is lacking.
The post <a href="https://blockonomi.com/crypto-hacks-in-2026-450m-lost-across-45-protocols-in-two-weeks/" rel="noopener noreferrer nofollow">Crypto Hacks in 2026: $450M Lost Across 45 Protocols in Two Weeks</a> appeared first on <a href="https://blockonomi.com" rel="noopener noreferrer nofollow">Blockonomi</a>.

Crypto Hacks in 2026: $450M Lost Across 45 Protocols in Two Weeks

Table of Contents

Blockonomi

Other articles published on Apr 16, 2026

Join our free newsletter for daily crypto updates!