Crypto Hackers Stole $755 Million in Q2 2026, Making It the Industry's Worst Quarter on Record

Crypto's second quarter of 2026 logged 83 cybersecurity incidents and $755 million in total losses — the most-hacked quarter the industry has recorded. Cross-chain bridges, the infrastructure that lets assets move between separate blockchain networks, remained the single costliest attack category across the period.

A Quarter That Reset the Benchmark

Eighty-three incidents across three months works out to roughly one attack per day. The $755 million figure represents money that left wallets and, in most cases, does not return: on-chain theft is final once assets are moved through enough intermediary addresses. No prior quarter had produced a comparable combined loss total, placing Q2 2026 in a category of its own in the industry's short history.

That distinction matters less as a headline than as a trend line. Records in crypto security losses tend not to stand for long; each cycle produces a new one. The question worth asking is not whether Q2 2026 will eventually be surpassed, but why the same class of infrastructure keeps generating the same category of loss.

Why Bridges Keep Drawing Attacks

Cross-chain bridges function as custodians of locked assets: a user deposits Token A on Chain One and receives a synthetic equivalent on Chain Two, with the bridge contract holding the original as collateral. That custody concentration is the mechanism attackers exploit. A single successful bridge compromise can drain the entire collateral pool in one transaction — a risk-to-reward ratio that has made these protocols a recurring target across multiple market cycles.

The bridge vulnerability is not new. It has surfaced in previous quarters and previous years. What Q2 2026 demonstrates is that the attack surface has not been adequately closed despite repeated, expensive lessons.

Volume Over Sophistication

Eighty-three discrete incidents also signals breadth, not just severity. A quarter with that count suggests attackers are not limiting themselves to a few high-profile bridge raids; they are finding exploitable surface area across protocols of varying sizes. The aggregate loss total reflects that distribution: large-scale bridge drains pull the headline number high while smaller incidents pad the count.

For anyone tracking where industry capital actually disappears, Q2 2026 is a clean data point — more attacks, more losses, and the same structural weakness at the bridging layer that has defined crypto security's most expensive recurring problem.

Related reading

• New-Account Fraud Drives 62% of Identity Crimes as Bremerton Case Exposes Mail-Theft Pipeline