📉 Bearish
⏱ 3 min read
Blockaid’s H1 2026 security report revealed that Ethereum and Solana suffered the highest crypto hack losses in the industry, with more than $650 million drained across both networks—a signal of persistent vulnerabilities and evolving threat vectors in blockchain infrastructure.
What Happened
According to Blockaid’s semiannual security report, Ethereum retained its position as the most targeted network for hacking incidents in the first half of 2026. Losses on the Ethereum network totaled approximately $332 million, with attackers focusing primarily on vulnerabilities in value-rich DeFi applications. Solana surged to second place, with $326 million stolen—a sharp rise compared to 2025, where Solana losses were around $127 million. The report tracks a total of 212 security incidents during this period. KelpDAO suffered the largest single exploit, with $292 million stolen in just one attack. Blockaid’s analysis found that the number of high-value exploits increased significantly, with H1 2026 seeing 3.4 times as many major attacks as all of the previous year.
For Ethereum, the nature of the breaches was predominantly code-based: attacks targeted vulnerabilities in bridges, smart contracts, and the broader stack underpinning key protocols like Humanity Protocol and StablR. There was also one major case (CoWSwap) involving user error. In contrast, Solana’s losses resulted largely from key compromises and issues with signing infrastructure, suggesting a different attack vector gaining prevalence as hackers adjust to newer blockchain environments. Arbitrum, previously the second-highest for losses, was overtaken by Solana amid this shift.
Why It Matters
These findings illustrate that as leading blockchains accumulate more value through institutional-grade applications and DeFi protocols, they become even more attractive targets for increasingly sophisticated attackers. For Ethereum, the density of high-value decentralized services remains a double-edged sword: while it fosters ecosystem growth, it also concentrates risk. The surge in Solana losses indicates attackers are actively shifting tactics and exploiting non-code vulnerabilities, highlighting the broader need for stronger key management and security layers beyond smart contract audits.
In broader market context, periods of rapid innovation—such as the ongoing expansion of DeFi and restaking—have historically seen a lag between new product deployment and the maturation of holistic security frameworks. The spike in high-threshold exploits points to a potential inflection point for the industry, where both technical and human elements must be integrated into risk assessment and mitigation. These trends challenge prevailing assumptions about the adequacy of modular audits and call for coordinated, multi-layered defenses.
Key Takeaways
- Ethereum and Solana led in crypto hack losses in H1 2026, with over $650M combined stolen funds.
- KelpDAO’s $292M exploit was the largest single incident in the period.
- Ethereum was hit hardest by code exploits, while Solana suffered from key and signing infrastructure breaches.
- The number of major exploits surged compared to all of 2025, heightening industry-wide security concerns.
What’s Next
The security landscape for leading blockchains will remain under close scrutiny. Analysts will focus on whether new technical standards and operational controls can narrow the window of vulnerability exposed in this cycle. Both Ethereum and Solana communities are expected to accelerate development of robust key management and real-time monitoring tools. Moving forward, the industry will watch whether this recent surge in attacks becomes the catalyst for more collaborative, defense-in-depth security strategies across all major networks.
🧠 HafidWatch Take
Blockaid’s H1 2026 report highlights Ethereum and Solana as the leading blockchains in crypto hack losses, reaching a combined total exceeding $650 million. Hack incidents surged to a record high, with Ethereum mainly targeted via code exploits and Solana vulnerable due to key compromises. KelpDAO suffered the largest single exploit.
Daily crypto intelligence. Before the market opens.
Including the Divergence Index — the sentiment gap no other newsletter tracks. Free, every morning at 7:30am ET.
✓ Free forever · ✓ No spam · ✓ 50+ sources monitored
