Crypto Hack Losses Surpass On-Chain Revenue in 2026

Crypto hack losses reached $8.78 billion in 2026, surpassing estimated on-chain revenue for the first time since 2020, according to BeInCrypto. A single breach at Binance accounts for about 72% of the tally, while losses across decentralized finance protocols have also risen from last year.

What we know

Why crypto hack losses overtook revenue

BeInCrypto reported on November 12 that DefiLlama’s 2026 hack-loss total stood at $8.78 billion. ARK Invest’s estimated on-chain revenue for the year was $5.6 billion. The comparison means reported thefts exceed estimated revenue by more than $3 billion, although the figures cover different periods.

ARK digital-asset research head Lorenzo Valente shared a related comparison on November 11. His chart put year-to-date hack losses at about $8.7 billion against estimated revenue of $5.6 billion. Valente’s longer-run figures, based on Token Terminal and DefiLlama data, show roughly $26.9 billion lost to hacks since 2017 against $47 billion in on-chain revenue, or 57 cents stolen for each dollar earned.

The October 29 Binance breach is the main reason 2026 crossed the threshold. Binance said its hot wallets were compromised at about 20:05 UTC, causing approximately $6.3 billion in token-asset losses. BeInCrypto uses a $6.36 billion estimate, around 72% of the year’s total. Binance said it would absorb the impact rather than pass it on to users, and reported replenishing about 98% of impacted assets by November 4. The remaining 2% involved less-liquid assets.

The FBI attributed the theft to North Korea’s TraderTraitor activity and said investigators observed the actors converting stolen assets primarily into Ether. North Korea denied responsibility, the Associated Press reported. The FBI’s attribution notice describes the agency’s position; attribution remains distinct from North Korea’s denial.

DeFi losses rose beyond the headline breach

Removing Binance brings 2026 losses to about $2.42 billion, below 2025’s $2.72 billion, BeInCrypto reported. But the incident count was higher: 342 logged incidents this year, compared with 148 in 2025. DeFi protocols alone lost $1.19 billion across 243 incidents, up from $757 million last year.

Two large April incidents included a $295 million loss at Solana-based trading platform Drift and a $293 million loss at liquid restaking protocol Kelp DAO. BeInCrypto said both were linked to North Korean hackers. These figures show that the total can be lower without Binance even as the incident count is higher and DeFi losses increase.

Independent trackers also use different methods. The Block reported that Blockaid called the first half of 2026 a record by incident count, with losses above $1 billion. Immunefi separately counted about $972 million across 207 incidents. That gap is a reminder that crypto hack losses depend partly on what each tracker includes and how it values stolen assets.

What is still unclear

The 2026 comparison is not final. BeInCrypto said hack totals run through November 11, while ARK’s revenue estimate annualizes data from the first three quarters. Both sides could change before year-end, so the current gap should not be treated as a settled full-year result.

The supplied data does not explain why ARK’s $5.6 billion estimate is below its $8.9 billion figure for 2025. The comparison is between hack losses and on-chain revenue, not a measure of industry profit. BeInCrypto reports that some projects direct part of that revenue to token buybacks.

Market data and analyst context

Market prices on November 12 do not show a clear, single-asset reaction to the report. At 10:13 UTC, Bitcoin was down 0.45% over 24 hours, while Ether fell 0.64% and BNB declined 1.13%. Those moves alone cannot establish that the hack-loss comparison caused the declines. Broader market conditions and other events can affect prices.

The Crypto Fear & Greed Index was 28, classified as Fear, on November 12. That reading describes sentiment, not a forecast. Valente’s central observation is the cumulative gap between revenue and theft; BeInCrypto’s reporting adds that the 2026 result is unusually concentrated in one exchange incident.

What it means for investors

The Binance event was a hot-wallet compromise at an exchange, while the Drift and Kelp DAO incidents involved DeFi protocols. Binance reported that withdrawals for additional assets would resume in phases after it replenished most of the impacted assets.

Binance said it would absorb the financial impact of its incident and later reported replenishing approximately 98% of impacted assets. Those statements describe Binance’s response and do not establish how another platform would respond.

What to watch next is whether updated year-end data keeps crypto hack losses above revenue, whether the outstanding Binance assets are replenished, and whether incident counts and DeFi losses continue rising. Updated tracker totals may differ because their methods vary. No single revenue-to-loss ratio captures the full security or financial condition of the industry.

Bottom line

Crypto hack losses have moved ahead of estimated on-chain revenue in 2026, largely because of the enormous Binance breach. The comparison is provisional and does not prove a broad market response, but rising DeFi losses and a high incident count make security outcomes worth following alongside the final annual totals.

Sources

• North Korea Responsible for $6 Billion+ Binance Attack (www.fbi.gov)
• Crypto Hack Losses Head Past On-Chain Revenue for First Time Since 2020 (BeInCrypto)
• Lorenzo Valente on X (x.com)

This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrencies are highly volatile; always do your own research before investing.