0x17b1822817b1…17b1822b

ConfirmedSecurity475 vB68 sat/vB2 min decode

Crypto Hack Losses Hit $8.7B in 2026, Topping Entire Onchain Revenue

Hackers stole $8.7 billion in 2026, topping the $5.6 billion in projected onchain revenue. Since 2017, thieves have taken 57 cents per $1 earned, per ARK's Valente.

Crypto hack losses equal 57 cents per $1 earned onchain: Ark’s Valente
WitnessCrypto hack losses equal 57 cents per $1 earned onchain: Ark’s Valentesucco / pixabay

Outputs

  1. Hackers stole $8.7 billion in 2026 YTD, surpassing $5.6 billion in projected annual onchain revenue

  2. Since 2017, crypto lost $26.9 billion to hacks against $47 billion in onchain revenue — 57 cents per $1

  3. The $6.3 billion Binance hack alone exceeded the full-year 2026 onchain revenue estimate

  4. DeFi TVL fell nearly 10% after the Binance exploit, from $85.9B to $77.4B per DefiLlama

  5. 2026 is on track to be the first year since 2020 where hack losses exceed onchain revenue

Crypto hackers have stolen $8.7 billion so far in 2026 — more than the $5.6 billion in projected annual onchain revenue for the entire industry, according to Lorenzo Valente, director of digital asset research at ARK Investment Management.

The figure comes from Valente's own analysis, shared Thursday in an X post with a chart comparing cumulative hack losses against protocol revenue. His verdict was blunt. "Security is the bottleneck," Valente wrote.

How bad is the ratio?

Since 2017, the numbers look like this, per Valente's tally:

  • $26.9 billion lost to hacks across the crypto industry
  • $47 billion in total onchain revenue earned by blockchain protocols
  • 57 cents stolen for every $1 earned onchain

This year has broken the pattern. A single incident — the $6.3 billion Binance hack — exceeded Valente's estimate for full-year 2026 onchain revenue on its own. Value lost to hacks is now on track to surpass total onchain revenue by year-end, something that hasn't happened since 2020.

What does this change for institutions?

The mounting exploits are already weighing on institutional appetite for decentralized finance. In an April research note, JPMorgan analysts identified bridge security as a long-standing structural challenge for the industry, one that repeated incidents have done nothing to resolve.

The string of high-value attacks this year tells the story. September brought the $387 million Bitget hack and the $320 million Liquid Network exploit. In April, Drift Protocol lost $295 million. Then came the Binance incident, which dwarfs all of them combined.

On-chain data shows the damage spreading through the sector. Total value locked in DeFi has fallen nearly 10% since the Binance exploit, according to DefiLlama — from $85.9 billion on Oct. 29 to $77.4 billion as of Thursday. That is capital leaving, not just sentiment souring.

Why the revenue comparison matters

Onchain revenue is the industry's actual earnings engine — the fees protocols collect for doing what they exist to do. When theft outruns those earnings, the sector is running at a structural loss from a security standpoint. Valente's framing turns hack losses from isolated incidents into a balance-sheet problem for the whole industry.

The comparison also raises the bar for anyone underwriting crypto exposure. A fund weighing DeFi allocation now has to model breach risk against fee income, and the current ratio makes that math unflattering.

Binance, for its part, has flagged operational risk beyond exploits themselves. The exchange separately warned that an iOS flaw could expose crypto wallet keys — a reminder that attack surfaces extend past smart contracts into device-level infrastructure.

If hack losses close the year above onchain revenue, as Valente's data projects, 2026 will mark a symbolic first since 2020 — and a hard test of whether the industry's security spending can finally catch up with its earnings.

via x.com (Original)

More from Marcus Bennett

Marcus Bennett

Show full bio

Senior reporter covering money, funding and market shifts around crypto and web3 industry at Mempool Brief.

1,009 articles