Attackers conducted a record 207 crypto hacks in H1 2026, but total losses fell to USD 972 million from USD 2.3 billion in H1 2025. TRM attributes about USD 643 million, or 66% of all stolen funds, to North Korea-linked activity, driven mainly by April attacks on Drift Protocol and KelpDAO that together accounted for about USD 577 million. The largest losses came from infrastructure and operational compromises affecting keys, credentials, signing systems, and custody workflows, while smart contract exploits drove most incident volume but a smaller share of losses.