Coingecko 2026 State of Crypto Security Report

[ObeyKnock]

So, unlike what happened with ByBit, most of these hacks are in the range of less than $100 million, which is a good indicator for a market that has billions of dollars in market capacity and operates 24/7.
If the data is accompanied by the daily trading volume of those platforms, we will get a better view.

What I would like to see I guess is the volume view, but as far as I am concerned the breakdown by attack type tells a more clear story. No, it is not hundreds of medium-sized hacks adding up – in fact, just about 15% of incidents were system hacks and roughly 76% of the dollar loss came from just a few system hacks, many of which were linked to Lazarus/North Korea, and can wipe out a whole year's worth of good news in one incident.

[PX-Z]

Therefore, an audit is not proof that a project is completely safe. Even those that were hacked before, I’m sure many of them had already gone through security audits.

Hackers are just good at finding the part that auditors missed, and that small weakness is enough for them to exploit the whole system. As we can see, billions are being lost, so even big platforms are not completely safe.

I agree. An audit is a good sign, but it doesn't guarantee that a hardware wallet is completely safe. Audits have a specific scope, well, it really depends on those who audit and vulnerabilities can still exist outside it or be discovered later, say, those AIs who can saw these faults after scanning the open source code or whatever. It's just one part of the overall security picture, and sure is not a guarantee.

[Danish Ali]

So, unlike what happened with ByBit, most of these hacks are in the range of less than $100 million, which is a good indicator for a market that has billions of dollars in market capacity and operates 24/7.
If the data is accompanied by the daily trading volume of those platforms, we will get a better view.

What I would like to see I guess is the volume view, but as far as I am concerned the breakdown by attack type tells a more clear story. No, it is not hundreds of medium-sized hacks adding up – in fact, just about 15% of incidents were system hacks and roughly 76% of the dollar loss came from just a few system hacks, many of which were linked to Lazarus/North Korea, and can wipe out a whole year's worth of good news in one incident.

That factually break down supports the hugeblack's position or opinion more not less. TLDR, If it is to be believed that there are few major, state involved attacks (Lazarus etc) that account for 76% of losses then what are other 85 percent of attacks on the systems? TAILS, right? Small and contained as a "tail" certainly manageable in context of the size of the market, as 76% is still big money. Real problem is not "crypto gets hacked constantly," it is "so a few nation state actors can do pretty well at hitting specific targets." It is not problem with the whole market, it is problem for exchanges that needs to be fixed.

[Josefjix]

And it also good to highlight that majority of those have passed the so called security audit and yet there are still loopholes that wasn't found by this this independent security audits. We can say that it's not a guarantee of safety for this platforms.

The good thing is, as long as they continue learning from these mistakes, audits and security practices should also improve. Hopefully we will see fewer of these kinds of hacks in the future.

The more big companies works on security audits, the more hackers develops software that penetrates the system, it's impossible to outsmart hackers, they are good in the game and uses money to develop what seems to be true. I've come to understand that hacking needs money to funds the tools needed, these guys are ready to buy and spend for the tools that outsmart companies system.

Even in future, many exploit news will happen despite the tight security set by the big companies, it will never end at all.

[Mayor of ogba]

If we want to check the top exchanges, it is looking like Binance and Coinbase have better security than most of them else they would have been the primary target of these hacks. That does not mean that it is safe to keep money in them because the attackers are not sleeping but are doing everything they can to steal people's livelihood... what a wicked world.

Seeing this volume of hacks makes me wonder what we will be battling when quantum computer finally become a reality.

I believe Binance and Coinbase are primary target for hackers that has been in the game for long, however Binance and Coinbase high security is making it difficult for such hackers to succeed in their attempts but any day they identify weaknesses or loopholes in the side of either Binance or Coinbase they will succeed. Binance has experienced hack twice, so people shouldn't store their funds on Binance or any other exchange since hackers are working tirelessly to crack exchanges security and steal people hard earned money.

[o48o]

So, unlike what happened with ByBit, most of these hacks are in the range of less than $100 million, which is a good indicator for a market that has billions of dollars in market capacity and operates 24/7.
If the data is accompanied by the daily trading volume of those platforms, we will get a better view.

That's in many ways a strange take. Saying that's a good indicator is a stretch. Would that be a good indicator if we were talking about banks being hacked? "At least they didn't take billions every time."

Also, trading volume isn't sadly giving more information, as in most smaller exchanges has been faked for a long time now. They aren't even good at hiding it because you could just manually verify it by looking at the charts / liquidity. There's supposedly ton of trading happening between the buy and sell walls where there isn't even liquidity. Any real sells (way smaller then the volume of any fake trades) are making spikes to charts in them.

And i just noticed that they haven't listed lots of hacks that happened before this article was updated.

[Conqueror777]

Here is the report of Coingecko to the status of hacks on crypto platforms.



https://www.coingecko.com/research/publications/state-of-crypto-security-report-2026

As so as what we have seen at the first half of the year, there was a lot of massive attacks. Like every week, we will see reports of Defi and other infrastructure being exploited and draining with millions.

And it also good to highlight that majority of those have passed the so called security audit and yet there are still loopholes that wasn't found by this this independent security audits. We can say that it's not a guarantee of safety for this platforms.

Hopefully, this should be a eye opener for other platforms to look at their security and to hardened everything.

that's why you shouldn't leave your cryptocurrency in a crypto exchange. Not your keys not your money, and if a crypto exchange gets hacked it might go bankrupt and you loose all your money.

[trendcoin]

I think we all know very well, including the person who published the list, that it was released a bit early and needs to be updated. The world of cryptocurrency is so open to change that, unfortunately, these changes don’t always have to be for the better. Moreover, in this world, simply conducting transactions on decentralized platforms can sometimes be enough to protect our money.

People who’ve managed to survive in this world are as lucky or wise as those who’ve managed to survive a nuclear attack.

I believe the market experience gained through just a few cycles in this world is greater than what one would gain after decades of experience in traditional stock markets. In the future, I’ll guide my child to gain significant experience with small amounts in the treacherous waters of this world. This is one of the world’s most ruthless economic training grounds.

[gwestcot]

And it also good to highlight that majority of those have passed the so called security audit and yet there are still loopholes that wasn't found by this this independent security audits. We can say that it's not a guarantee of safety for this platforms.

Therefore, an audit is not proof that a project is completely safe. Even those that were hacked before, I’m sure many of them had already gone through security audits.

Hackers are just good at finding the part that auditors missed, and that small weakness is enough for them to exploit the whole system. As we can see, billions are being lost, so even big platforms are not completely safe.

The good thing is, as long as they continue learning from these mistakes, audits and security practices should also improve. Hopefully we will see fewer of these kinds of hacks in the future.

I do an AI scan twice per week to look for vulnerabilities. I honestly think, moving forward, it will be about AI hackers versus AI defense. I am not sure how it all ends up playing out, but the advantage is probably still in the hackers court because it only takes one small vulnerability for there to be an exploit.