Web3 losses fall, but attack frequency rises: what should teams do?

TL;DR: Crypto losses fell 57% to approximately $972 million in H1 2026, but the number of security incidents hit a record high as attackers shifted toward more frequent and varied exploitation, according to FYEO. The pattern shows Web3 risk is becoming more distributed and operationally broad, not less dangerous.

Editorial analysis by NHI Mgmt Group, based on content published by FYEO: “Unpacking the $972M Crypto Loss in H1 2026: A Deeper…”.

By the numbers:

• Crypto losses fell 57% to approximately $972 million in H1 2026.
• The number of security incidents reached an all-time high in H1 2026.

Key questions

Q: How should Web3 teams respond when incident frequency rises but losses fall?

A: They should not treat lower losses as proof that controls are working.

Q: Why do front-end and dependency weaknesses matter as much as smart contract bugs?

A: Because they often give attackers a path to the user, the wallet, or the project team before any contract logic is touched.

Q: What are the first controls to prioritise in a Web3 security programme?

A: Start with the controls that reduce access abuse and repeatable compromise: MFA, least privilege for operational accounts, dependency review, and monitoring for unusual transaction behaviour.

Practitioner guidance

• Expand assurance beyond smart contracts Review front-end code, integrations, and third-party dependencies as part of the same security boundary as on-chain logic.
• Harden key and wallet access paths Treat operational wallets, signers, and administrative accounts as privileged assets with MFA, least privilege, and rapid revocation procedures.
• Increase detection for low-and-slow abuse Instrument monitoring to spot repeated smaller anomalies, unusual transaction patterns, and suspicious dependency behaviour before they accumulate into larger loss.

Bottom line: The core risk is no longer just large-scale theft. It is the growing number of smaller Web3 incidents that collectively weaken the environment.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →