Q2 2026 has become the most-hacked quarter in DeFi history by incident count, according to DefiLlama, which logged approximately 70 separate exploits across April, May and the first two weeks of June. The quarterly dollar total stands at roughly $746 million.
The figures reflect a structural shift in how DeFi is attacked. Total losses are far below peaks reached during single mega-exploits in prior years, yet the attack frequency has roughly doubled the previous quarterly record. April alone set a monthly record with 28 to 30 confirmed incidents and more than $625 million in losses, driven largely by the $285 million Drift Protocol breach on April 1 and the $293 million KelpDAO exploit on April 18. Those two incidents together accounted for 93% of the month's losses, per Bitcoin.com's summary of DefiLlama's data.
April was already covered by The Defiant as the most-hacked month on record by incident count. Q2's quarterly total adds May's 41 reported incidents and approximately $84 million in losses, per a June 1 Cryip report, plus early June incidents including the $36 million Humanity Protocol bridge exploit.
The quarterly count of roughly 70 is double the previous record for any single quarter, per DefiLlama's hacks database. The $746 million total, while significant, is small relative to prior headline-grabbing single events: the February 2025 Bybit breach alone reached approximately $1.4 billion.
