Blockchain Security Attacks Surge 50% in H1 2026 as Losses Reach $956 Million

According to SlowMist's mid-year report released on July 7, blockchain security incidents surged 50% in H1 2026, with 182 incidents recorded between January and June compared to 121 in the same period of 2025. Total losses reached approximately $956 million, down 60% year-on-year from $2.37 billion, driven largely by the absence of catastrophic single events rather than reduced attack sophistication.

Cross-chain bridges proved most financially damaging, with just 20 incidents generating $346 million in losses. The KelpDAO exploit in April alone accounted for $292 million, attributed to the Lazarus Group. Attackers compromised LayerZero's RPC infrastructure and forged cross-chain messages to mint and extract assets. DeFi remained the most targeted sector at 64% of all incidents with $490 million in losses, while supply chain attacks generated $298 million despite representing a smaller incident count, signaling a shift toward more sophisticated, coordinated threats.