According to Defillama, decentralized finance protocols suffered approximately 70 exploits during Q2 2026, roughly double the previous record for incident count in a single quarter. Despite the unprecedented frequency, total losses of $746 million remain below historical peaks, reflecting a shift toward smaller, more distributed attacks.
April 2026 alone accounted for roughly 30 incidents with over $625 million stolen, with Drift Protocol's $285 million exploit on April 1 and KelpDAO's $293 million breach on April 18 comprising approximately 93% of monthly losses. Remaining attacks mostly ranged from below $1 million to $5 million each.