Crypto breaches drained over $3.6 billion despite security audits, report finds

The short version

• Between January 2025 and July 2026, cryptocurrency platforms lost over $3.63 billion to cyberattacks and compromised passkeys.[CNBC]
• Roughly 88% of the total stolen capital and 60% of targeted platforms had undergone independent security reviews.[CNBC]
• Bybit sustained the heaviest damage with a $1.4 billion theft in February 2025, followed by KelpDao losing $292 million and Drift Protocol losing $285 million.[CNBC]

Key facts

• Cyberattacks and stolen passkeys accounted for more than $3.63 billion in cryptocurrency platform losses between January 2025 and July 2026.[CNBC]
• Independent security audits had been completed by approximately 60 percent of impacted platforms, representing roughly 88 percent of stolen funds.[CNBC]
• Bybit incurred the largest individual loss due to a $1.4 billion breach in February 2025.[CNBC]
• KelpDao lost $292 million and Drift Protocol lost $285 million in separate security incidents.[CNBC]

Sources

Outlet counts describe coverage, not independent confirmation. Reports may share a wire service or original source.

• Crypto platforms have lost over $3.63 billion to cyberattacks — even though most of them did security checksCNBC