North Korea-linked actors drove 76% of crypto hack losses in early 2026, targeting DeFi platforms with AI-assisted exploits.
DeFi protocols have lost over $1 billion in the first five months of 2026, with April alone accounting for $600 million in breaches. The $292 million KelpDAO exploit and $285 million Drift Protocol hack led the losses, while THORChain halted trading in May after a $10 million suspected exploit.
North Korea-linked groups were responsible for 76% of global crypto hack losses through April, up from 64% in 2025. Older, unverified smart contracts and cross-chain bridges have become prime targets, with AI tools accelerating vulnerability discovery.
The surge in attacks has exposed structural weaknesses in DeFi infrastructure, including admin systems and trust assumptions, according to industry data. Losses in 2026 are on pace to surpass prior years, with no signs of slowing.