Code exploits drove Ethereum incidents, while breaches of keys and signing infrastructure accounted for most Solana losses, according to the report.<\/p>\n
Ethereum losses reflected the risks of high-value protocols<\/h2>\n
Ethereum incurred the highest losses from incidents in H1 2026, with attackers primarily targeting vulnerabilities in applications built on the network.<\/p>\n
Blockaid said code exploits dominated Ethereum incidents by count, with major losses also linked to key compromises involving Humanity<\/a> Protocol and StablR<\/a>. CoWSwap, an Ethereum-based decentralized exchange, was the only major Ethereum incident in the report classified as a user mistake.<\/p>\n Blockchain losses by network in the first half of 2026. Source: Blockaid.<\/em><\/p>\n Blockaid identified several common attack methods targeting Ethereum, including bugs in bridges and smart contracts, unauthorized access to privileged accounts and market manipulation techniques.<\/p>\n The report said Ethereum remains a major target because it hosts many of the crypto industry\u2019s most valuable applications, including restaking platforms, stablecoins and decentralized exchanges.<\/p>\n Solana incurred nearly as much in losses as Ethereum during the first half of 2026, a sharp increase from the roughly $127 million in stolen funds the network recorded during 2025.<\/p>\n \u201c2025 had $2.58 billion lost across 63 incidents, concentrated in Q1 by Bybit\u2019s $1.5 billion, with Ethereum and Arbitrum the top chains by stolen-fund flow,\u201d Blockaid CEO Ido Ben-Natan told Cointelegraph.<\/p>\n Blockchain losses by network in 2025. Source: Blockaid.<\/em><\/p>\n The change did not stem from a rise in smart contract exploits. Instead, compromised keys accounted for more than 98% of Solana\u2019s losses, driven largely by incidents involving Drift Protocol<\/a> and Step Finance<\/a>, which Blockaid linked to North Korea-linked cyber groups.<\/p>\n Unlike Ethereum, where attackers primarily exploited vulnerabilities in protocol code, Solana incidents targeted signer infrastructure and organizational security, while a handful of code exploits involving Raydium and Volo accounted for the remaining losses.<\/p>\n Magazine: <\/strong><\/em>A quantum roadmap would push Bitcoin much higher: Charles Edwards<\/strong><\/em><\/a><\/p>\n![\"\"](\"https:\/\/s3-images.ctmedia.io\/media\/content\/pasted-image-2185.png\")
<\/p>\n<\/p>\nSolana losses surged as attackers shifted focus<\/h2>\n
![\"\"](\"https:\/\/s3-images.ctmedia.io\/media\/content\/pasted-image-2186.png\")
<\/p>\n<\/p>\n