Phishing, Deepfakes to Dominate Crypto Hacks by 2026: CertiK

Phishing assaults, real-time deepfakes, and vulnerabilities in cross-chain protocols are anticipated to drive essentially the most important crypto hacks in 2026, based on CertiK senior investigator Natalie Newson. These threats are already making their presence felt, with over $600 million stolen within the first 4 months of the yr.

Two of the biggest incidents to this point in 2026 had been linked to North Korean hackers. The $293 million exploit of the Kelp DAO by way of LayerZero’s cross-chain messaging protocol and a $280 million assault on Drift Protocol display how refined attackers are focusing on weak factors in blockchain infrastructure. In the meantime, Zerion, a crypto pockets supplier, revealed on April 15 that hackers used AI-enabled social engineering to steal $100,000 from its scorching wallets.

Newson warns that AI is amplifying the size and pace of those assaults, with instruments now able to producing convincing deepfakes and autonomously scanning sensible contracts for exploitable vulnerabilities. “The acceleration of AI in some elements will solely worsen crypto assaults,” she mentioned.

Phishing Stays a Key Entry Level

Phishing assaults stay a core technique for crypto hackers, with losses from phishing skyrocketing 200% year-over-year by early 2026. These assaults typically contain malicious hyperlinks, faux crypto platforms, or impersonation of distinguished figures and organizations to deceive victims. A single phishing incident involving ‘deal with poisoning’ in January 2026 resulted in a $12.25 million loss.

CertiK’s evaluation signifies that offer chain assaults have additionally change into a important subject, accounting for $1.45 billion in losses throughout 2025. The Bybit hack, which value $1.4 billion in February 2025, highlights how attackers are focusing on infrastructure suppliers to maximise harm.

AI: Double-Edged Sword

Whereas AI is getting used offensively, it additionally holds potential for protection. In accordance with CertiK, AI-powered instruments are more and more deployed to determine vulnerabilities earlier than attackers can exploit them. For instance, Anthropic’s AI mannequin, Claude Mythos, has been used to scan techniques for bugs and help in defensive cybersecurity measures.

Bug bounty applications have additionally seen a surge in submissions—each legitimate and invalid—as a result of developments in AI. These applications have gotten important for figuring out and patching vulnerabilities earlier than they are often exploited.

Defending In opposition to the Subsequent Wave

Newson advises retail buyers to take proactive steps reminiscent of verifying URLs, avoiding suspicious hyperlinks, and utilizing chilly wallets to retailer belongings. Chilly wallets, which isolate personal keys from web entry, considerably scale back the chance of theft. “The easiest way for buyers to guard themselves is to remain conscious of threats and undertake safe storage practices,” she mentioned.

Regulators are additionally ramping up efforts to fight escalating threats. The U.S. Division of the Treasury’s Workplace of Cybersecurity and Vital Infrastructure Safety (OCCIP) introduced in April 2026 that it might increase its menace identification program to incorporate digital asset corporations.

Trying Forward

With the typical dimension of crypto hacks reaching $19.5 million in 2025, the trade faces mounting challenges to safe its infrastructure. As attackers leverage AI and different superior instruments, the necessity for strong defensive measures, each technological and regulatory, will solely develop. For buyers, staying knowledgeable and adopting finest practices stays important because the ecosystem evolves.

Picture supply: Shutterstock