Victims Recovered 0.8% of $1.18 Billion in 60 January-August 2026 Exploits by Sept. 2

Across 60 major onchain exploits from January through August 2026, $9.8 million of the $1.18 billion stolen had reached victims by Sept. 2, a 0.8% recovery rate.

At the same cutoff, $81.4 million had been frozen without being returned. Together with the $9.8 million that had reached victims, frozen or recovered funds totaled $91.2 million. Five of the 60 incidents involved any freeze or recovery.

A separate $287.1 million remained in attacker wallets across 16 incidents. The funds could be tracked but not frozen while they remained there, making this a portion of the stolen assets with a specific control limitation rather than the overall unrecovered balance. Most was held in assets without a central issuer able to block transfers from individual addresses, including Bitcoin (BTC), Ether (ETH), wrapped tokens and liquid staking tokens.

About $229 million of this amount was tied to the April Drift exploit. Roughly 107,165 ETH remained in three attacker addresses as of Sept. 2.

In 59 incidents with movement data, funds first moved a median of 17 minutes after an exploit. Movement began within an hour in 40 cases and within the first minute in 13.

Protocols, governance bodies and validators secured $90.4 million of the $91.2 million frozen or returned. That total includes about $71 million frozen by the Arbitrum Security Council after the Kelp DAO exploit, around $9 million in unauthorized Syscoin tokens that were burned, and $6.9 million quarantined by Stellar validators after the Blend exploit.