Crypto’s Biggest Hacks of 2025 and 2026

The biggest crypto hacks of 2025 and 2026 are now running into the billions. Based on CoinGecko’s overview, the combined damage from the twenty largest incidents comes to approximately $3.04 billion. One attack stands out by a distance: Bybit lost approximately $1,436 billion, accounting for nearly half of the total.

Bybit comfortably tops the list

The hack at Bybit is by far the largest on the list. In second place is KelpDAO with $292 million, followed by Drift Protocol with $285 million.

Cetus comes in at $223 million and Balancer at $128 million. Bitget rounds out the group with losses of at least $100 million.

The full top 20:

1. Bybit: $1,436 billion
2. KelpDAO: $292 million
3. Drift Protocol: $285 million
4. Cetus: $223 million
5. Balancer: $128 million
6. Bitget: $100 million
7. Nobitex: $90 million
8. Phemex: $74 million
9. BTCTurk: $52 million
10. Infini: $50 million
11. CoinDCX: $44 million
12. GMX: $42 million
13. Swissborg: $42 million
14. UXLink: $41 million
15. Humanity Protocol: $36 million
16. Step Finance: $27 million
17. BigONE: $27 million
18. Truebit: $26 million
19. Resolv Labs: $25 million
20. SBI Crypto: $24 million

Top five accounts for the bulk of the damage

The five largest incidents together account for approximately $2.36 billion. That is well over three-quarters of the total amount in this top 20.

The Bybit hack in particular pulls the average sharply upward. Without Bybit, the combined damage of the remaining nineteen incidents would still be around $1.6 billion.

Both exchanges and DeFi affected

The list also shows that the problem is broad. It is not only centralised trading platforms that are affected. DeFi protocols and other blockchain projects also rank highly in the overview.

As a result, there is no clear category that remains entirely unscathed. Exchanges such as Bybit, Bitget, Phemex and CoinDCX are listed alongside projects like Balancer, GMX, Cetus and KelpDAO.

Even at the bottom of the ranking, the amounts involved still run to tens of millions of dollars. That makes clear how big security incidents in crypto can still turn out to be, even outside the very largest hacks.