{"id":76138,"date":"2026-07-30T06:43:36","date_gmt":"2026-07-30T06:43:36","guid":{"rendered":"https:\/\/crowdfundjunction.com\/blog\/security-firm-blockaid-says-212-onchain-exploits-stole-1-1b-as-ai-and-wallet-attacks-accelerate\/"},"modified":"2026-07-30T06:43:36","modified_gmt":"2026-07-30T06:43:36","slug":"security-firm-blockaid-says-212-onchain-exploits-stole-1-1b-as-ai-and-wallet-attacks-accelerate","status":"publish","type":"post","link":"https:\/\/crowdfundjunction.com\/blog\/security-firm-blockaid-says-212-onchain-exploits-stole-1-1b-as-ai-and-wallet-attacks-accelerate\/","title":{"rendered":"Security Firm Blockaid Says 212 Onchain Exploits Stole $1.1B as AI and Wallet Attacks Accelerate"},"content":{"rendered":"<p><b>(Originally posted on : Bitcoin News )<\/b><br \/>\n<\/p>\n<div>\n<div class=\"@container mb-[25px] rounded-sm overflow-clip py-0.5 pr-0.5 pl-2.5 bg-success-100\">\n<div class=\"flex flex-col gap-m overflow-clip rounded-[6px] !bg-success-10 p-3 @[420px]:p-m\">\n<h2 class=\"m-0 flex items-center gap-s text-[19px] !text-[#1c1c1c] md:text-[20px]\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"16\" height=\"10\" viewbox=\"0 0 16 10\" fill=\"none\" class=\"shrink-0 text-success-100\" aria-hidden=\"true\"><path d=\"M1 1.5h14\" stroke=\"currentColor\" stroke-width=\"2.5\" stroke-linecap=\"round\"\/><path d=\"M1 8.5h10\" stroke=\"currentColor\" stroke-width=\"2.5\" stroke-linecap=\"round\"\/><\/svg><span>Key Takeaways<\/span><\/h2>\n<ul class=\"m-0 flex list-none flex-col gap-m pl-0\">\n<li class=\"m-0 flex items-start gap-s !text-[#434248]\"><span class=\"mt-2 size-2 shrink-0 rounded-full bg-success-100\" aria-hidden=\"true\"\/><span class=\"text-body\">Blockaid verified a record 212 crypto exploits in H1 2026.<\/span><\/li>\n<li class=\"m-0 flex items-start gap-s !text-[#434248]\"><span class=\"mt-2 size-2 shrink-0 rounded-full bg-success-100\" aria-hidden=\"true\"\/><span class=\"text-body\">OpSec and key theft caused 74% of losses, with Drift and KelpDAO losing $577M.<\/span><\/li>\n<li class=\"m-0 flex items-start gap-s !text-[#434248]\"><span class=\"mt-2 size-2 shrink-0 rounded-full bg-success-100\" aria-hidden=\"true\"\/><span class=\"text-body\">Blockaid expects rising EIP-7702 and AI prompt-injection attacks in H2 2026.<\/span><\/li>\n<\/ul>\n<\/div>\n<\/div>\n<h2>North Korean Hackers Drive $600M in Stolen Funds<\/h2>\n<p>The first half of 2026 marked the most active period for onchain security threats on record, with security firm Blockaid noting a 3.4-fold increase in high-threshold exploits over all of 2025. According to <a href=\"https:\/\/www.blockaid.io\/h1-report-2026\" target=\"_blank\" rel=\"noopener noreferrer\">Blockaid\u2019s H1 2026 Onchain Security Report<\/a>, total dollar losses reached $1.1 billion, trailing the first half of 2025 due to the absence of a single multibillion-dollar mega-heist.<\/p>\n<p>However, the volume and technical sophistication of attacks escalated dramatically. Study data show attackers carried out 212 verified exploits during the six months, peaking in June with 57 separate incidents. Just four major incidents accounted for $707 million, or 64%, of total stolen funds. North Korea\u2019s \u201cTrader Traitor\u201d hacking cluster, tied to the Lazarus Group, was responsible for approximately $609 million of overall losses, Blockaid said.<\/p>\n<p>A majority of financial losses were concentrated in a handful of high-profile security breaches driven by North Korean state-sponsored threat actors. The period\u2019s two largest exploits, <a href=\"https:\/\/news.bitcoin.com\/zachxbt-flags-280m-kelpdao-exploit-hitting-ethereum-defi-lending-markets\/\">restaking protocol KelpDAO<\/a> ($292 million) and Solana perpetual DEX Drift Protocol ($285 million), were both attributed to Trader Traitor.<\/p>\n<p>Rather than relying on smart contract bugs, these attacks targeted human and operational vectors. In the Drift breach, weeks of targeted social engineering granted attackers administrative multisig control, resulting in $285 million stolen in less than 12 minutes. In the KelpDAO exploit, attackers used social engineering against a LayerZero developer to poison RPC infrastructure and forge cross-chain bridge attestations.<\/p>\n<p>Meanwhile, the report highlighted three major security boundaries that emerged in the first half of 2026 \u2014 areas historically outside standard audit scopes: EIP-7702 wallet delegation attacks, AI prompt injection, and off-chain bridge infrastructure. To highlight the threat posed by AI vulnerabilities, the report pointed to a May incident in which an attacker \u201cused prompt injection to trick Bankr\u2019s AI agent into approving an unauthorized transaction, taking $216K\u201d.<\/p>\n<p>Recovery rates remained starkly split depending on the attack vector. Stolen funds stemming from key compromises vanished almost immediately into mixers or cross-chain bridges. Conversely, protocol bugs occasionally allowed for partial or full recovery through swift white-hat coordination or contract pauses.<\/p>\n<p>Looking ahead, Blockaid warns that Web3 ecosystems should prepare for continued pressure in the second half of the year. Key areas of concern include persistent <a href=\"https:\/\/news.bitcoin.com\/the-763-9-million-shift-why-smart-contract-audits-couldnt-stop-web3s-worst-quarter\/\">social engineering campaigns<\/a> by sanctioned nation-state actors, scaling exploits around EIP-7702 wallet delegation features, and a rapid rise in prompt-injection attacks against autonomous AI trading agents as adoption grows across decentralized finance.<\/p>\n<\/p><\/div>\n<p><a href=\"https:\/\/news.bitcoin.com\/security\/security-firm-blockaid-says-212-onchain-exploits-stole-1-1b-as-ai-and-wallet-attacks-accelerate\/\">Source link <\/a><br \/>\n<br \/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>(Originally posted on : Bitcoin News ) Key Takeaways Blockaid verified a record 212 crypto exploits in H1 2026. OpSec and key theft caused 74% of losses, with Drift and KelpDAO losing $577M. Blockaid expects rising EIP-7702 and AI prompt-injection attacks in H2 2026. North Korean Hackers Drive $600M in Stolen Funds The first half [&hellip;]<\/p>\n","protected":false},"author":10,"featured_media":76139,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0},"categories":[32],"tags":[],"_links":{"self":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts\/76138"}],"collection":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/comments?post=76138"}],"version-history":[{"count":0,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts\/76138\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/media\/76139"}],"wp:attachment":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/media?parent=76138"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/categories?post=76138"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/tags?post=76138"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}