According to Onchain Lens monitoring, in the first half of 2026 there were 224 publicly disclosed crypto hacker attacks and security incidents worldwide, with cumulative losses of about $1.32 billion. Among the specific types of attacks, major attacks caused by access control failures include Kelp DAO losing $292 million, Drift Protocol losing $280 million, Humanity Protocol losing $31 million, Step Finance losing $30 million, Truebit losing $26.5 million, Resolv Labs losing $25 million, AFX losing $24.15 million, and BonkDAO losing $21 million. Losses from phishing and social engineering attacks totaled $282 million. Oracle issues led to Ostium losing $24 million, Blend Protocol losing $10.86 million, and Bonzo losing $9 million. The report said that a small number of security incidents accounted for the vast majority of losses, and that tampered permissions and uncontrolled privileged access were the main triggers for multiple large-scale attacks.