DefiLlama has counted 322 confirmed crypto hacks in 2026 as of Friday, already more than twice the total number of hacks recorded last year, with two months still remaining. The value taken across those incidents totals $8.734 billion, but the distribution is heavily skewed by one event. A single Binance hot wallet drain on 29 October accounts for $6.36 billion, or 72.8% of everything stolen in crypto this year.
Excluding the Binance incident, the other 321 crypto hacks average $7.4 million each, and the year had been running at that level through September. DefiLlama’s series runs back to 2011, and 2026 is already its highest annual incident count, surpassing the previous peak set in 2024. Separate trackers have produced different counts due to methodology: Immunefi logged 207 incidents in the first half, CertiK counted 344, and SlowMist counted 182. All point upward even if their figures vary.
DefiLlama classifies the Binance breach under “Key Leaked via Infrastructure.” Binance co-CEO Richard Teng said the company has found no evidence of any wallet private key leak, while TRM Labs assesses that the attacker likely compromised Binance’s signing infrastructure, calling it the largest theft on record. Binance has pledged to cover losses in full, about $3 billion has been frozen, and the exchange expects withdrawals to restart within 48 hours.
The incident reinforces broader security concerns. Immunefi previously reported that attacks had become more frequent but less costly per event, with median loss per DeFi exploit down 75% from the 2022 peak. The surge in hack counts may invite stricter regulatory scrutiny. DefiLlama also cautioned that a widely shared figure of roughly 750 incidents and $9.0 billion in 2026 does not match any published tracker.
