BlockThreat - Q1, 2026

Q1 2026 saw $192 million stolen across 122 DeFi incidents. That is nearly a 50% increase in incident count from the previous quarter, even as total losses stayed roughly flat. Average loss per incident fell by 33%. Some decline in monetary impact is expected in a weaker market; however, the real concern is the volume. Rather than slowing down as they traditionally do in the bear market, attackers stayed highly active:

In this quarterly brief, we will break down the exact incidents and attack vectors behind these numbers, including this quarter’s Top 10 DeFi Attack Vectors. This was also the first quarter where AI enhanced bug hunting is really coming into play so we will review exactly the kind of vulnerabilities these tools are exploiting and how they are already skewing the types of projects getting attacked. We will also highlight the emerging threats and broader security trends that defenders and auditors should be watching closely.