Web3 Losses Hit $1.3B in H1 2026 – CertiK Report

CertiK's Hack3D report tallied $1.3 billion in Web3 losses for the first half of 2026. The blockchain security firm said the figure covers hacks, exploits, scams, and phishing across decentralized protocols from January through June.

Private key compromises drove a disproportionate share of the total. A separate CoinDesk analysis found that poor key management and social engineering accounted for 40% of cumulative crypto hack losses, not smart contract bugs. CertiK's data aligns with that pattern.

Not everyone agrees on the dollar figure. TRM Labs, another security tracker, reported H1 2026 losses below $1 billion, even as the number of incidents hit a record high. The gap comes down to methodology. CertiK includes rug pulls and phishing alongside protocol exploits; TRM focuses more narrowly on technical hacks.

Both firms agree on the direction. The pace of security incidents in H1 2026 was elevated by any measure. That suggests Web3 security risk has not meaningfully declined despite years of auditing investment. CertiK itself is one of the largest audit firms in the space.