Crypto hacks top $17b in a decade as attackers pivot from code to keys

cryptonews04-22 05:00

DefiLlama logs 518 crypto hacks and over $17b in losses in 10 years, with attackers shifting from smart contracts to keys, bridges and wallets, as rsETH loses ~$290m. Summary DefiLlama has logged...

Source Link

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Comments

We need your insight to fill this gap

Leave a comment

{"i18n":{"language":"en_US"},"isChannel":false,"data":{"share":"https://ttm.financial/m/news/2629668063?lang=en_US&edition=fundamental","thumbnail":"","is_english":true,"pubTime":"2026-04-22 05:00","share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","id":"2629668063","market":"sg","top_or_hot":-1,"title":"Crypto hacks top $17b in a decade as attackers pivot from code to keys","media":"cryptonews","content":"<div>\n<p>DefiLlama logs 518 crypto hacks and over $17b in losses in 10 years, with attackers shifting from smart contracts to keys, bridges and wallets, as rsETH loses ~$290m.\n\n\nSummary\n\n\n\nDefiLlama has logged...</p>\n\n<a href=\"https://crypto.news/crypto-hacks-top-17b-in-a-decade-as-attackers-pivot-from-code-to-keys/\">Source Link</a>\n\n</div>\n","source":"crypto_news_highlight","html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Crypto hacks top $17b in a decade as attackers pivot from code to keys</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nCrypto hacks top $17b in a decade as attackers pivot from code to keys\n</h2>\n\n<h4 class=\"meta\">\n\n\n2026-04-22 05:00 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://crypto.news/crypto-hacks-top-17b-in-a-decade-as-attackers-pivot-from-code-to-keys/><strong>cryptonews</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>DefiLlama logs 518 crypto hacks and over $17b in losses in 10 years, with attackers shifting from smart contracts to keys, bridges and wallets, as rsETH loses ~$290m.\n\n\nSummary\n\n\n\nDefiLlama has logged...</p>\n\n<a href=\"https://crypto.news/crypto-hacks-top-17b-in-a-decade-as-attackers-pivot-from-code-to-keys/\">Source Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","isBrief":false,"type":0,"news_type":1,"symbol":"FT_SY_METH","symbol_name":"微型CME以太币","start_time":0,"source_url":"https://crypto.news/crypto-hacks-top-17b-in-a-decade-as-attackers-pivot-from-code-to-keys/","article_id":"2629668063","we_media_id":null,"thumbnails":[],"rights":{"source":"crypto_news_highlight","url":"https://crypto.news/crypto-hacks-top-17b-in-a-decade-as-attackers-pivot-from-code-to-keys/","rn_cache_url":null,"directOrigin":true},"url":"https://stock-news.laohu8.com/highlight/detail?id=2629668063","pubTimestamp":1776805200,"columns":[],"sourceInfo":{"source_id":"crypto_news_highlight","name":"Crypto News"},"weMediaInfo":null,"summary":"DefiLlama logs 518 crypto hacks and over $17b in losses in 10 years, with attackers shifting from smart contracts to keys, bridges and wallets, as rsETH loses ~$290m.DefiLlama has logged 518 crypto hacking incidents over the past 10 years, with total losses above $17 billion.A growing share of that damage comes from private key leaks, phishing and credential theft rather than pure smart contract bugs.Under the surface, however, the composition of those losses is shifting. Where early DeFi hacks often hinged on smart contract bugs and unchecked flashloan logic, recent incidents show attackers increasingly targeting the soft tissue around crypto — private keys, signing infrastructure and user devices — with credential theft, social engineering and SIMswapstyle attacks. Security firms told Cointelegraph that they expect 2026 to bring more advanced phishing and AIassisted scams capable of tricking even technically savvy users into signing malicious transactions or revealing seed phrases.Ev","collect":0,"end_time":0,"defaultTopTitle":"crypto.news","property":[],"viewcount":null,"language":"en","relate_stocks":{"ETHT":"ProShares Ultra Ether ETF","STCE":"Schwab Crypto Thematic ETF","ETHU":"2倍以太币期货ETF-Volatility Shares","BEGS":"RAREVIEW 2X BULL CRYPTOCURRENCY & PRECIOUS METALS ETF","BTF":"比特币&以太币期货ETF-CoinShares","ETHV":"以太坊ETF-VanEck","EZET":"以太坊ETF-Franklin","YETH":"Roundhill Ether Covered Call Strategy ETF","ETHW":"以太坊ETF-Bitwise","ETH":"低成本以太坊ETF-Grayscale","ETHA":"以太坊ETF-iShares","BK4601":"加密货币现货ETF","EETH":"以太币期货ETF-ProShares","ETHD":"ProShares UltraShort Ether ETF","BETE":"等权重比特币&以太币期货ETF-ProShares","FETH":"以太币ETF-Fidelity","ETHE":"最大以太坊ETF-Grayscale","BKCH":"AdvisorShares Sabretooth ETF","QETH":"以太坊ETF-Invesco Galaxy","BETH":"比特币&以太币期货ETF-ProShares","ETU":"T-Rex 2X Long Ether Daily Target ETF"},"translate_title":"随着攻击者从代码转向密钥，加密货币黑客攻击十年内突破170亿美元","themeId":null,"isJumpTheme":false,"ttsUrl":null,"symbols_score_info":{"ETHU":0.89,"BTF":0.89,"BETH":0.89,"ETHE":0.89,"ETHA":0.89,"BKCH":0.65,"BETE":0.89,"QETH":0.89,"EZET":0.89,"ETHW":0.89,"YETH":0.89,"FETH":0.75,"BEGS":0.65,"EETH":0.89,"ETHD":0.78,"ETH":0.9,"ETU":0.89,"METHmain":0.65,"ETHT":0.65,"ETHV":0.89,"STCE":0.9},"content_text":"DefiLlama logs 518 crypto hacks and over $17b in losses in 10 years, with attackers shifting from smart contracts to keys, bridges and wallets, as rsETH loses ~$290m.\n\n\nSummary\n\n\n\nDefiLlama has logged 518 crypto hacking incidents over the past 10 years, with total losses above $17 billion.\nA growing share of that damage comes from private key leaks, phishing and credential theft rather than pure smart contract bugs.\nThe latest example is Kelp DAO’s rsETH bridge exploit, which drained about 116,500 rsETH worth roughly $290–$293 million — 2026’s largest DeFi hack so far.\n\n\n\nCrypto’s security bill over the past decade has quietly climbed past $17 billion, according to DefiLlama data cited by Cointelegraph, with at least 518 documented hacks and exploits hitting exchanges, DeFi protocols, bridges and wallets since 2014. That figure captures everything from early exchange blow‑ups to today’s sophisticated cross‑chain attacks, and it comes even as the overall pace of large on‑chain exploits has slowed from peak‑mania years like 2021–2022.\nA decade of $17b in crypto losses\nUnder the surface, however, the composition of those losses is shifting. Where early DeFi hacks often hinged on smart contract bugs and unchecked flash‑loan logic, recent incidents show attackers increasingly targeting the soft tissue around crypto — private keys, signing infrastructure and user devices — with credential theft, social engineering and SIM‑swap‑style attacks. Security firms told Cointelegraph that they expect 2026 to bring more advanced phishing and AI‑assisted scams capable of tricking even technically savvy users into signing malicious transactions or revealing seed phrases.\nFrom smart contracts to bridges and wallets\nBridge infrastructure has been a particular weak point. DefiLlama’s hacks dashboard shows that bridges account for almost $3 billion of the roughly $11.8 billion it categorises as “total value hacked,” with large single incidents like the Ronin, Wormhole and Multichain exploits setting the tone for cross‑chain risk. The latest addition to that list is Kelp DAO’s rsETH cross‑chain bridge, which was hit on April 18 after an attacker forged a cross‑chain message on a LayerZero‑based link and minted or released 116,500 rsETH to an attacker‑controlled address.\nThose tokens — representing “restaked” Ether — were worth about $290–$293 million at the time, or roughly 18% of rsETH’s total supply, and have been called the largest DeFi exploit of 2026 so far by outlets including Bloomberg. The incident forced Kelp DAO to pause the bridge, coordinate emergency responses with exchanges and protocols, and sparked a blame game over LayerZero’s default single‑validator configuration, which critics argue left the system effectively one‑key‑away from catastrophic minting.\nEven away from headline‑grabbing exploits, everyday credential compromises continue to rack up damage. DefiLlama data cited by Cointelegraph shows that in the first quarter of 2026 alone, hackers stole about $168.6 million from 34 DeFi protocols, with the largest single hit — a $40 million Step Finance theft — traced back to a private key compromise rather than a pure code bug. That trend suggests DeFi’s smart contract security is slowly hardening, while attackers respond by moving upstream into the tools and human processes that sit between wallets and protocols.\nFor users and teams, the lesson is brutal but clear: audits and formal verification are necessary, but not sufficient. Hardware keys, multi‑sig schemes, segregated signing devices, strict key‑management policies, and relentless phishing hygiene are now as critical to safeguarding crypto as gas optimisations and bug bounties ever were — because it only takes one compromised credential to turn another line in DefiLlama’s hacks database into a nine‑figure loss.\n\n\n\n\n\n                Read more:\n            \n\n                Blockchain Futurist Conference announces Krown Network as exclusive official quantum blockchain and Qastle Wallet as exclusive official quantum wallet","kind":"highlight","is_publish_news":true,"is_publish_highlight":false,"is_publish_live":false,"is_publish_wemedia":null,"editions":null,"column":"","sentiment":"0","news_tag":"","news_rank":0,"isVideo":false,"video":null,"symbols":[],"gpt_button":0,"need_auth":false,"need_login_tip":false,"code":"91000000","status":"200"},"commentList":[],"isCommentEnd":true,"newsSizeData":{"likeSize":0,"commentSize":0,"repostSize":0,"favoriteSize":0,"likeStatus":false,"favoriteStatus":false},"APP":{"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","isDev":false,"isTTM":true,"tenantId":"TBGLOBAL","deviceId":"web-server-community-laohu8-v3","version":"4.42.0","shortVersion":"4.42.0","platform":"web","vendor":"web","appName":"ttm","isIOS":false,"isAndroid":false,"isTiger":false,"isTHS":false,"isWeiXin":false,"isWeiXinMini":false,"isWeiBo":false,"isQQ":false,"isBaiduSwan":false,"isBaiduBox":false,"isDingTalk":false,"isToutiao":false,"isOnePlus":false,"isHuaWei":false,"isXiaomi":false,"isXiaomiWebView":false,"isOppo":false,"isVivo":false,"isSamsung":false,"isMobile":false},"href":"/m/news/2629668063","isCrawlerRequest":true}