North Korea-Linked Hackers Steal $643M in Crypto in H1 2026

Unverified — auto-generated summary, not yet reviewedAltsJul 4, 2026

A relentless wave of DeFi exploits—spanning smart contracts, bridges, oracles, and governance—is draining billions and setting new hack records across the crypto sector.

North Korea-linked hackers were attributed with $643 million in cryptocurrency theft in the first half of 2026. This figure was reported alongside the broader crypto sector record of 207 attacks in H1 2026 with aggregate losses declining overall, indicating a concentration of large-scale losses in state-actor activity.

1 source

North Korea-linked hackers steal $643M in crypto in H1 2026 · cryptobriefing.com · T2

Story timeline · 24 entries

Jul 23, 2026
Ostium Relaunches After $24M Exploit
Ostium reopens trading on July 23 following the $23.75M oracle-price exploit, with recovery plan for liquidity providers advancing
Jul 19, 2026
Ostium Oracle Exploit: $23.75M
Ostium confirms total exploit losses at $23.75M via false oracle price manipulation, announces 24-hour notice before trading restart
Jul 16, 2026
Supra Oracle Exploit Spreads
Reporting reveals Supra patched oracle vulnerabilities on 11 other chains before the $9M Hedera exploit was publicly disclosed
Jul 16, 2026✦ Take
Ostium $18M Oracle Exploit
Ostium perp DEX loses $18M in oracle private-key compromise, halting trading and extending oracle-attack pattern
Jul 12, 2026
$9M Drained via Hedera Oracle Exploit
Bonzo Lend loses $9M as oracle price-feed manipulation extends exploit wave to Hedera ecosystem
Jul 8, 2026
$6M Lazy Summer Vault Exploit Detailed
Post-mortem reveals Lazy Summer Protocol's $6M vault exploit involved months of attacker preparation
Jul 8, 2026
ETH Leverage Loops and MEV Risks Flagged
Lido stETH leverage loops expose hidden liquidation risk as trader loses $2M in single-block backrun
Jul 7, 2026
Summer Finance $6M Vault Exploit
Summer Finance loses $6M in vault exploit, suspends all protocol vaults
Jul 4, 2026This story
North Korea Steals $643M in Crypto
North Korea-linked hackers steal $643M in crypto in H1 2026, emerging as a dominant contributor to record losses
Jul 1, 2026
BackedFi Loses $204K in Exploit
BackedFi loses ~$204K in Ethereum exploit, continuing the post-Q2 DeFi attack streak into July
Jun 29, 2026
$121K Exploit Hits AIDC on BSC
AIDC token on BSC loses ~$121K in exploit, adding another BSC incident to the mounting Q2 tally
Jun 29, 2026
Etherlink Bridge Halted After Attack
Etherlink suspends cross-chain bridge operations following an attack attempt
Jun 29, 2026
Q2 2026 Breaks Crypto Hack Records
Q2 2026 is confirmed as the worst quarter on record for crypto hacks by total losses
Jun 25, 2026
DLMC Token Exploited for $222K
DLMC token on BSC suffers $222,600 exploit, extending DeFi attack wave to smaller BSC targets
Jun 25, 2026
THORChain Resumes Trading, Plans Monero Swaps
THORChain returns to trading after $10.7M exploit and unveils Monero swap roadmap
Jun 24, 2026
THORChain Restarts After $10.7M Exploit
THORChain resumes trading following $10.7M exploit and month-long halt
Jun 22, 2026
Taiko Bridge Exploit Costs $1.7M
Taiko Chain's proof-of-state mechanism is compromised, losing $1.7M in bridge exploit
Jun 21, 2026
Stolen MEV Funds Flow to Tornado Cash
Attacker who executed the MEV bot reversal attack on jaredfromsubway.eth transferred a portion of the $7.5M exploit proceeds into Tornado Cash.
Jun 21, 2026
Namada Bridge Drained of 228K ATOM
Namada privacy chain loses 228,000 ATOM via cross-chain bridge exploit
Jun 20, 2026
Axelar Kills Bridge After $4.67M Hack
Axelar disables Secret Network bridge after $4.67M exploit affects IBC-linked assets
Jun 18, 2026
Aztec Hit by Second Exploit in a Week
SlowMist confirmed Aztec suffered a second exploit of approximately $2.1M within less than a week of the first $2.19M exploit, both attributed to deprecated contract vulnerabilities.
Jun 15, 2026
Aztec Network Loses $2.15M to Exploit
Aztec Network suffered a $2.15M exploit with root cause confirmed as a ZK proof–L1 settlement mismatch, consistent with prior warnings about legacy DeFi contract risk.
Jun 12, 2026
AI Accelerates DeFi Exploit Discovery
A new report highlights AI systems actively accelerating the identification of DeFi attack vectors, adding a systematic threat dimension to the isolated exploit incidents reported previously.
Jun 11, 2026
DeFi Hacks Drain $36M+ in Days
Crypto hackers drained over $36 million from protocols using unverified contracts across multiple incidents. A separate governance takeover attack resulted in the minting of 10 billion TOP tokens and the draining of $1.58 million from a Balancer pool. A NovaBox rewards pool was also exploited for 56.73 ETH through a vulnerability in its distribution mechanism.