Crypto Hack Losses Top $8.78B, Beating On-Chain Revenue for the First Time Since 2020

Crypto's hack bill has officially outrun its income. Losses hit $8.78 billion in 2026, according to DefiLlama, while ARK Invest pegs on-chain revenue at $5.6 billion for the same period. It's the first year since 2020 that stolen funds have topped what the industry actually earned.

One monster attack does the heavy lifting. The October 29 Binance hack cost $6.36 billion, roughly 72% of the annual total, and the FBI pinned it on North Korea's TraderTraitor group. Binance says it has since covered about 98% of the stolen funds from its own reserves.

Strip Binance out and the picture flips. Remaining 2026 losses sit at about $2.42 billion, below 2025's $2.72 billion — even though logged incidents jumped to 342 from 148. But DeFi protocols went the other way, bleeding $1.19 billion across 243 incidents, up from $757 million in 2025. Solana-based trading platform Drift lost $295 million in April, and liquid restaking protocol Kelp DAO lost $293 million that same month; both were linked to North Korean hackers.

ARK's Lorenzo Valente laid out the long view in a November 12 post: since 2017, crypto has lost $26.9 billion to hacks while earning $47 billion on-chain, based on Token Terminal and DefiLlama data. That's 57 cents stolen for every dollar earned. ARK's revenue figure covers the 27 largest projects plus all others, and its 2026 estimate lands well below 2025's $8.9 billion.

Last time hacks won was 2020, when attackers took $4 billion against $1 billion in on-chain revenue. Revenue then leapt to $12.5 billion in 2021 and stayed ahead of losses through 2025. Buybacks, funded by part of that revenue, helped most tokens that pay holders outperform Bitcoin this year.

Both sides of the math can still shift. ARK annualizes revenue from the first three quarters, while the hack tally runs only through November 11.