BlockThreat - May, 2026
Two attack vectors drove the biggest losses. The next major exploit may not start with a stolen key.
May 2026 saw $81M lost across 60 DeFi incidents. At first glance, that looks like an improvement from bloody April’s $644M in losses. Unfortunately, if we separate out the two major nation-state hacks, LayerZero/KelpDAO and Drift Protocol, the broader trend does not look better. So let’s not let relax just yet.
Monthly incident count remains elevated and the top losses are concentrated around just two attack vectors teams must prioritize. We will also fact-check the current state of operational security using BlockThreat's incident dataset to see whether the ecosystem really did get worse last month.
Let’s dive into the stats!
Bring BlockThreat Inside Your Security Program
See the threats that matter to your stack before they become your incident.
BlockThreat Enterprise gives security teams organization-specific threat intelligence reports, monthly briefings, priority access, and optional tailored feeds based on the exploits, threat actors, techniques, and trends I track every day across Web3.
Trusted by teams behind major L1s, DeFi protocols, staking infrastructure, wallets, and security organizations responsible for billions of dollars in assets.
Use BlockThreat Enterprise to see around corners, understand what is coming for your stack, and prepare your team before emerging risks turn into active exploits.
Subscribe to BlockThreat Enterprise - $2,000/month
Limited availability: Enterprise subscriptions include direct engagement and tailored reporting, so only a small number of teams can be supported.