Crypto Hack Losses Top Revenue for First Time Since 2020

A Security Flipping Nobody Wanted to See

Imagine running a business where thieves steal more money from your store than you make in total sales. That is the exact situation facing the cryptocurrency industry in 2026.

According to tracking data from DefiLlama, crypto security breaches reached $8.78 billion in 2026 as of November 11. Meanwhile, asset manager ARK Invest estimates that total on-chain revenue for the entire year will reach roughly $5.6 billion.

This creates a sobering milestone: it marks the first time since 2020 that annual security losses have overtaken total revenue earned across public blockchain networks.

The Big Picture: 57 Cents Stolen for Every Dollar Earned

Lorenzo Valente, an analyst at ARK Invest, put these figures into historical perspective in a public post on November 12, 2026. By examining industry metrics dating back to 2017, the team mapped out how much crypto platforms earn versus how much they lose.

Since 2017, the global crypto ecosystem has generated $47 billion in total on-chain revenue. On-chain revenue refers to transaction fees paid by users to interact with blockchains, smart contracts, and decentralized applications.

Over that exact same timeframe, malicious hackers have managed to steal $26.9 billion from various protocols and trading platforms.

When you break those numbers down, it means that bad actors have stolen roughly 57 cents for every single dollar the crypto industry has earned since 2017, based on figures from Token Terminal and DefiLlama.

How a Single Mega Hack Rewrote 2026 Statistics

While total losses look overwhelming, a single massive breach accounts for the vast majority of 2026's stolen funds.

On October 29, 2026, centralized exchange Binance suffered an unprecedented security exploit that led to $6.36 billion being drained. That single incident accounts for approximately 72% of all stolen funds recorded across the entire year.

The FBI officially linked the attack to TraderTraitor, a known state-sponsored hacking collective operating out of North Korea. Binance later announced that it covered about 98% of the affected user funds directly from its internal corporate reserves.

If you strip out the extraordinary Binance breach, the baseline numbers look noticeably different:

• Without the Binance breach, 2026 hack losses drop to $2.42 billion.
• That baseline figure sits below 2025's total annual loss of $2.72 billion.
• However, individual attack frequency spiked sharply, with 342 logged incidents in 2026 compared to 148 incidents in 2025.

DeFi Exploits Surge Even as Protocol Revenues Thin

Even without the giant exchange hack, decentralized finance (DeFi) protocols faced severe headwind threats throughout 2026. DeFi platforms lost $1.19 billion across 243 separate incidents, representing a 58% increase from the $757 million stolen in 2025.

A rapid succession of high-profile exploits hit the market during the spring season:

• Drift: The SolanaSOL+0.67%-based perpetual trading platform lost $295 million in an April attack.
• Kelp DAO: The liquid restaking protocol suffered a $293 million exploit during the exact same month.
• Both major April exploits were subsequently linked by security researchers to North Korean cyberCYBER-8.57% operations.

Revenue Trends, Token Buybacks, and Historical Context

On the income side, ARK's 2026 revenue projection of $5.6 billion reflects a noticeable slowdown from 2025's total on-chain revenue of $8.9 billion.

Several Web3 protocols utilize portion of their network fee revenues to conduct token buybacks on open markets. Interestingly, projects sharing revenue with token holders through buyback programs generally outperformed Bitcoin (BTCBTC+0.31%) over the course of the year.

Past performance of digital assets or past operational performance is no guarantee of future results.

Looking back at previous cycles, the last time security breaches outstripped total revenue was in 2020. That year, hackers stole $4 billion while on-chain revenues stood at just $1 billion.

The market quickly flipped in 2021 as on-chain revenue leaped to $12.5 billion, maintaining a comfortable lead over security losses every year through 2025.

Important Variables to Keep in Mind

Analysts emphasize that both sides of the 2026 comparison could shift slightly before the final year-end tallies are locked in:

1. Annualized Revenues: ARK Invest's revenue figure is calculated by annualizing performance data collected across the first three quarters of 2026.
2. Cut-off Dates: The hack loss total of $8.78 billion captures incidents recorded only through November 11, 2026.

As protocol architectures grow more interconnected, institutional security practices and code audits remain central focus areas for development teams across the blockchain industry.