Crypto Hackers Steal $169M From DeFi Protocols in Q1 2026
Crypto hackers stole nearly $169 million from DeFi protocols in Q1 2026, marking a sharp decline from last year’s record-breaking losses.
A cold wallet is a physical device or offline storage medium used to secure cryptocurrency private keys. Unlike hot wallets, which are connected to the internet, cold wallets remain strictly offline, significantly reducing the risk of unauthorized access or cyber attacks. They typically come in the form of hardware devices, paper wallets, or dedicated offline computers. To execute a transaction, a user must temporarily connect the cold wallet to an internet-enabled device, sign the transaction offline, and then broadcast it to the network. This method ensures that the private keys are never exposed to online vulnerabilities. Because of their enhanced security, cold wallets are considered the safest method for storing large amounts of cryptocurrency over long periods.
Crypto hackers stole nearly $169 million from DeFi protocols in Q1 2026, marking a sharp decline from last year’s record-breaking losses.
Crypto payments platform Bitrefill says a cyberattack linked to the Lazarus Group exposed about 18,500 purchase records and drained funds from several hot wallets.
US authorities seized over $61 million in USDT linked to a large-scale pig butchering fraud scheme, highlighting increased enforcement against crypto-enabled scams.
Mandiant, operating under Google Cloud, reported a surge in North Korea-linked social engineering attacks targeting crypto and fintech firms with new malware strains.
North Korean hackers stole more than $2 billion in cryptocurrency in 2025, marking a sharp rise in proceeds despite a decline in the number of attacks, according to Chainalysis.
South Korean authorities are investigating a possible connection between the recent $36 million hack of the Upbit crypto exchange and the North Korea-linked Lazarus Group.