Cryptocurrency security had one of its best months in recent memory in May 2026: losses from exploits and hacks totaled roughly $68 million, according to blockchain security firm CertiK — nearly a 10-fold drop from April's record $651 million. The monthly report was published on June 1, 2026.
What Happened
CertiK's latest monthly statistics put total crypto exploit losses at approximately $68 million in May 2026 — a 90% decline from April. For an industry that regularly sees nine-figure theft events, this is rare good news. CertiK described May as one of the most subdued months for security incidents in recent years.
Why April Was So Devastating
April 2026 was one of the worst months for crypto hacks in over three years, with total losses reaching $651 million. Two massive attacks drove most of the damage:
- Kelp DAO — approximately $293 million drained via a LayerZero infrastructure vulnerability.
- Drift Protocol — roughly $280 million stolen in a similarly structured attack.
Both attacks have been linked to North Korea-backed hacker groups. According to Chainalysis and CertiK, North Korean operatives stole over $2 billion in crypto in 2025 alone, effectively industrializing digital asset theft as a state revenue source.
What Made May Different
CertiK hasn't pointed to a single explanation for the sharp decline. The most likely drivers are a combination of factors: no major high-value targets were successfully exploited, security teams stepped up audits after April's high-profile incidents, and LayerZero infrastructure underwent renewed review following the Kelp DAO breach.
A similar lull occurred in February 2026, when monthly hack losses dropped to $37–38 million. This supports a pattern observed in crypto security: major exploits tend to cluster in waves rather than occurring at a steady monthly rate.
What This Means for the Market
Lower theft figures are a clear positive signal for crypto investors and DeFi developers. Large exploits routinely trigger sharp sell-offs and erode confidence in decentralized finance broadly. May's quiet month gives markets a chance to recover.
Security researchers caution, however, that the data can shift rapidly. North Korea-linked hackers haven't stepped back, and the next major target is always one undiscovered vulnerability away.
- May 2026: ~$68 million in losses (−90% vs. April)
- April 2026: ~$651 million (one of the worst months in 3+ years)
- Data source: CertiK, Web3 security audit platform
