# Victims Recovered 0.8% of $1.18 Billion in 60 January-August 2026 Exploits by Sept. 2 By Simon Yoon Canonical URL: https://www.tokenpost.com/news/technology/34914 Published: 2026-10-19T17:19:12.000Z Updated: 2026-10-19T17:19:12.000Z Section: Technology > By the cutoff, $9.8 million had reached victims, $81.4 million was frozen but not returned, and $287.1 million remained in attacker wallets that could not be frozen. Across 60 major onchain exploits from January through August 2026, $9.8 million of the $1.18 billion stolen had reached victims by Sept. 2, a 0.8% recovery rate. At the same cutoff, $81.4 million had been frozen without being returned. Together with the $9.8 million that had reached victims, frozen or recovered funds totaled $91.2 million. Five of the 60 incidents involved any freeze or recovery. A separate $287.1 million remained in attacker wallets across 16 incidents. The funds could be tracked but not frozen while they remained there, making this a portion of the stolen assets with a specific control limitation rather than the overall unrecovered balance. Most was held in assets without a central issuer able to block transfers from individual addresses, including Bitcoin (BTC), Ether (ETH), wrapped tokens and liquid staking tokens. About $229 million of this amount was tied to the April [Drift exploit](). Roughly 107,165 ETH remained in three attacker addresses as of Sept. 2. In 59 incidents with movement data, funds first moved a median of 17 minutes after an exploit. Movement began within an hour in 40 cases and within the first minute in 13. Protocols, governance bodies and validators secured $90.4 million of the $91.2 million frozen or returned. That total includes about $71 million frozen by the Arbitrum Security Council after the Kelp DAO exploit, around $9 million in unauthorized Syscoin tokens that were burned, and $6.9 million quarantined by Stellar validators after the Blend exploit. ## Links in this article - [Drift exploit](https://www.tokenpost.com/news/technology/25855)