The second quarter of 2026 just became the most-hacked period in crypto history. Hackers stole $755 million across 83 separate cybersecurity incidents, according to industry tallies. That’s a record no one wanted — and cross-chain bridges were once again the prime target.
The numbers
Eighty-three breaches in three months. That’s roughly one every 33 hours. The $755 million figure covers losses from exploits, flash loan attacks, and private key compromises. No previous quarter has seen this many incidents or this much value drained. The frequency alone suggests attackers are getting faster, not sloppier.
Why bridges keep getting hit
Cross-chain bridges remained the most costly attack vector in the industry. These protocols hold vast amounts of locked liquidity, often in smart contracts that span multiple blockchains. A single vulnerability can drain millions before developers even spot the exploit. The pattern is familiar, but the scale keeps growing.
A quiet quarter for big names
While the total is staggering, no single exchange or DeFi giant suffered a headline-grabbing $100M+ heist this quarter. Instead, the damage came from a barrage of smaller-to-mid-sized attacks — a shotgun spread rather than a single cannon blast. That makes it harder for the industry to rally around one fix, and easier for bad actors to keep finding fresh targets.
What’s next
Security teams are now racing to patch the most common bridge vulnerabilities before Q3. The pressure is on: if the current pace holds, 2026 could easily become the worst year for crypto theft. Regulators in the US and EU are also watching — a quarter like this tends to accelerate rulemaking, whether the industry is ready or not.
