- OKX’s H1 2026 report exhibits 182 incidents and $956 million in complete losses, a 50% enhance in worth however a 60% lower in losses.
- The massive losses went to operational failures, social engineering, single level dangers, and AI assaults.
- Customers and AI brokers at the moment are the largest targets, with defenses shifting throughout the machine, signature, and belief layers.
OKX has launched its Web3 Safety Semi-Annual Report for the primary half of 2026. The outcomes revealed 182 safety incidents that resulted in a complete lack of $956 million. This represents a 50% enhance within the variety of instances in comparison with the primary half of 2025. In the meantime, complete losses decreased by 60% as attackers moved from large-scale sensible contract exploits to assaults leveraging social engineering, single-point threat, and AI.
OKX report information 182 crypto incidents and $956 million in losses within the first half of 2026
In keeping with OKX’s Web3 Safety Report, co-authored with SlowMist and OtterSec, there have been 182 publicly disclosed safety incidents within the first half of 2026, with complete losses of $956 million, a 50% enhance from 121 incidents within the first half of 2025. Whole losses had been down about 60% from the $2.373 billion reported in the identical interval in 2025.
The numerous discount in losses was as a result of absence of outlier occasions such because the roughly $1.5 billion provide chain assault on Bybit in February 2025. OtterSec’s high 10 checklist of venture losses was topped by the KelpDAO assault with roughly $292 million, adopted by the Drift Protocol assault with roughly $285 million.
How AI is reshaping crypto assaults past sensible contract exploitation
The report reveals that the largest financial losses not come primarily from sensible contract vulnerabilities. Somewhat, losses had been attributable to provide chain compromises, social engineering, cloud key theft, and single level validation failures. Provide chain assaults brought about roughly $298 million in losses, adopted by contract logic points at $152 million and personal key leaks at $130 million.
Notably, the report cites the Bankr incident as an example how AI brokers will be manipulated. The attacker enabled membership privileges on the agent and despatched a Morse code immediate injection to xAI’s Grok, which decoded and forwarded it to @bankrbot. The bot accepted the directions as trusted enter and executed roughly $150,000 to $200,000 price of transfers on Base.
Associated: Google warns AI-powered hackers are bypassing 2FA safety
AI has additionally expanded the assault floor within the cryptocurrency world via social engineering, id forgery, and code era. This report talked about North Korea’s HexagonalRodent, which used ChatGPT, Cursors, AI-generated web sites, and faux recruitment campaigns to compromise over 2,700 developer techniques. OtterSec additionally linked 35 of the 74 CVEs in March 2026 to AI-generated code.
What occurs subsequent when customers and AI brokers turn into the largest targets?
As customers and AI brokers emerge as main targets, the following part of Web3 safety will concentrate on proactive defense-in-depth that strikes safety early within the assault chain, earlier than it’s signed, executed, or trusted. We count on to see extra widespread adoption of invocation of sandboxing instruments, privilege hierarchies, pre-execution simulations, and secondary human overview of delicate actions.
Moreover, extra wallets and platforms will supply real-time machine scanning, URL and DApp threat detection, and malware identification to dam threats earlier than seed phrases or connections happen. The report recommends understanding earlier than you signal, avoiding single factors of failure, and verifying earlier than trusting via rigorous AI-generated code audits, scoped permissions, transaction transparency, and a multi-layered backstop that does not rely solely on AI judgment.
Associated: CertiK: Crypto Wrench Assaults Attain $124 Million in H1 20206
Disclaimer: The data contained on this article is for informational and academic functions solely. This text doesn’t represent monetary recommendation or recommendation of any type. Coin Version shouldn’t be chargeable for any losses incurred because of the usage of the content material, merchandise, or companies talked about. We encourage our readers to do their due diligence earlier than taking any motion associated to our firm.