Protocol Hacks Push DeFi Losses Past $600 Million Mark

The decentralized finance ecosystem has suffered a severe wave of security breaches, absorbing more than $600 million in cumulative losses over a highly condensed timeframe. The recent series of exploits has impacted multiple protocols and drastically reduced the total capital held within onchain markets, underscoring ongoing vulnerabilities in decentralized infrastructure.

Tracking the exact timeline of the stolen funds has yielded slightly different reporting windows across industry monitors. Data from CoinMarketCap indicates that the decentralized finance sector absorbed the $600 million in total losses over a three-week period. Conversely, analysis from Rod's Blog notes that more than $600 million was explicitly stolen from over 10 different decentralized finance protocols in just the past two weeks alone. Both timelines highlight a rapid escalation in successful onchain attacks targeting smart contracts and cross-chain architecture, draining capital from platforms at an alarming pace.

Cross-Chain Bridge Vulnerability

The majority of the recent financial damage stems from a single, massive breach involving the Kelp DAO cross-chain bridge. Security monitors and reporting outlets, including CoinMarketCap, Merkle Science, Binance Square, and Medium, observed that an attacker successfully drained $292 million directly from the protocol.

Due to the complex nature of the bridge exploit and varying methodologies for calculating the value of the stolen digital assets at the exact time of the breach, alternative loss amounts for Kelp DAO have circulated across the industry. Security firm Hypernative reported the total loss at $291 million. Meanwhile, the specialized report Kelp DAO Hack Simplified estimated the damage at approximately $290 million. Additional assessments include a loss range of $280 million to $293 million provided by Rod's Blog, and a notably lower estimate of $200 million cited by Apple Podcasts. Despite the varying exact totals, the incident stands as one of the most severe bridge exploits in the digital asset sector.

Impact on Total Value Locked

The immediate aftermath of the Kelp DAO bridge exploit, combined with the broader string of attacks across more than 10 other protocols, has triggered a severe contraction in total decentralized finance capital. Following the incidents, the total value locked across the entirety of the decentralized finance sector fell to approximately $82.4 billion, according to market metrics from CoinMarketCap.

This sudden decline in total value locked illustrates a significant departure from earlier market baselines. CoinMarketCap data shows that the current $82.4 billion total represents a 25% drop from the $110 billion recorded at the start of 2026. The substantial loss of funds, both through the direct theft of over $600 million and the subsequent market drawdown, reflects a highly challenging period for decentralized finance security operations and total capital retention.