This same story repeated in June but from a different angle: the month’s largest loss, more than $30 million at Humanity Protocol, came from a private key compromised on a team member’s machine, with the contract untouched, per the project’s own account.
This is the shape of 2026’s worst losses, with crypto losing roughly $972 million so far this year. The number of incidents keeps climbing, and the money increasingly leaves through something other than a contract bug: a stolen signing key, a misconfigured verifier, a treasury anyone can vote their way into. If you look at the sheer number of incidents, you would think the industry is losing ground. But if you look into how much has actually been stolen in total, a narrower, more uncomfortable pattern shows up.
We can be precise about it. Across the 425 hacks we studied from 2021 to 2025, a small share of operational failures carries most of the value lost. In the 2024 to 2025 window,…
