Blockchain security firm PeckShield reports that hackers drained close to $76 million from the crypto industry in June, bringing total losses for the first half of 2026 to roughly $750 million. The figures come from the firm's ongoing tracking of exploits, hacks and fraudulent withdrawals across the sector, one of the most closely watched private-sector datasets in crypto security.

The June number, while substantial, represents a fraction of the half-year total, indicating that losses were front-loaded in earlier months of 2026. PeckShield's tally aggregates value extracted from protocols, platforms and custodial services, and the firm regularly publishes its running counts as incidents are confirmed through on-chain forensics.

The scale of the first-half figure — three quarters of a billion dollars — puts the industry on a pace that, if sustained through the second half, would approach or exceed the annual loss totals recorded in recent years. For an industry that has poured resources into audits, real-time monitoring and incident-response partnerships, the persistence of nine-figure cumulative losses raises uncomfortable questions about where security spending is actually working.

Why the number matters

Loss tallies of this kind function as a market-structure indicator, not merely a scoreboard of failures. Every dollar extracted by attackers represents capital removed from protocols, treasuries or user wallets — and, in many cases, it represents insurance payouts, reimbursement programs or outright write-offs for retail participants who cannot absorb the loss.

The figures also carry operational consequences beyond the immediate victims. Protocols that suffer exploits typically face liquidity stress, a scramble to pause contracts, and negotiations with attackers over partial returns — the so-called white-hat bounty dynamic that has become a recurring feature of major incidents. Exchanges and bridge operators, meanwhile, face pressure to freeze flagged funds flowing through their platforms, a task complicated by cross-chain laundering infrastructure.

For institutional participants, cumulative loss data feeds directly into risk models. Custodians, market makers and funds that allocate to DeFi venues price in exploit risk, and a half-year figure of $750 million strengthens the case for conservative exposure limits, insurance coverage and contractual protections that smaller retail users rarely enjoy. The gap between institutional-grade protections and retail exposure remains one of the structural asymmetries the data underscores.

The persistent problem

The security industry has matured considerably — PeckShield itself is part of an ecosystem of forensic firms, auditors and monitoring services that did not exist at this scale a few years ago. Yet the 2026 numbers suggest that defensive capability has not outpaced attacker sophistication or the sheer growth in value locked across chains and platforms.

Attackers have consistently demonstrated the ability to adapt: techniques that were once rare, such as private-key compromises of operational infrastructure and social-engineering attacks against protocol teams, now routinely produce some of the largest individual losses in any given month.

Barring a sharp change in the incident rate, the industry will enter the second half of 2026 with security performance under renewed scrutiny — from regulators weighing custody rules, from insurers pricing coverage, and from users deciding where, and whether, to keep assets on-chain.