ARK Invest research highlights cryptocurrency’s growing security challenges as $8.78 billion in 2026 thefts threaten to exceed annual blockchain revenue for the first time since 2020. The cryptocurrency industry has lost approximately $26.9 billion to hacking incidents since 2017, equivalent to 57 cents for every dollar generated in on-chain revenue over the same period, according to research shared by ARK Invest. Lorenzo Valente, ARK Invest’s head of digital asset research, disclosed the findings on November 11, 2026, comparing cumulative cryptocurrency thefts with approximately $47 billion in blockchain-generated revenue.
The analysis, drawing on data from Token Terminal and DefiLlama, illustrates the financial scale of security failures across cryptocurrency exchanges, decentralized finance protocols and blockchain infrastructure. The findings also suggest that cryptocurrency losses in 2026 could exceed annual on-chain revenue for the first time since 2020, largely because of the record-breaking Binance security breach in October. Valente identified security as a major constraint on the industry’s development, warning that repeated exploits undermine the economic benefits generated by blockchain applications.
Binance’s $6.36 Billion Hack Drives Record 2026 Losses
According to DefiLlama, cryptocurrency hacking losses reached approximately $8.78 billion across 341 recorded incidents through November 11, already exceeding ARK Invest’s estimated $5.6 billion in on-chain revenue for 2026. The October 29 Binance breach accounted for approximately $6.36 billion, representing more than 72% of the year’s recorded losses. The Federal Bureau of Investigation attributed the attack to North Korea’s TraderTraitor hacking group, which allegedly exploited vulnerabilities in the exchange’s operational infrastructure. Removing the Binance incident reduces 2026 hacking losses to approximately $2.42 billion, below the $2.72 billion recorded throughout 2025.
However, decentralized finance protocols have experienced a separate increase in security incidents. DeFi-related losses reached approximately $1.19 billion in 2026, compared with $757 million in 2025, representing an increase of roughly 57%. Major incidents included an approximately $295 million exploit involving Solana-based trading platform Drift and a $293 million attack affecting liquid-restaking protocol Kelp DAO. The incidents demonstrate that security vulnerabilities remain widespread even when unusually large exchange breaches are excluded.
On-Chain Revenue Declines as Security Costs Mount
ARK Invest estimates that cryptocurrency applications will generate approximately $5.6 billion in on-chain revenue during 2026, substantially below the $8.9 billion recorded in 2025. The projection annualizes financial data from the first three quarters and incorporates a fourth-quarter estimate. Historically, hacking losses last exceeded annual blockchain revenue in 2020, when approximately $4 billion was stolen against $1 billion in revenue. On-chain revenue subsequently expanded to approximately $12.5 billion in 2021, exceeding reported hacking losses throughout the following four years.
The cumulative comparison requires careful interpretation. Hacking losses represent stolen assets, while on-chain revenue measures income generated by blockchain applications. They are not directly equivalent accounting categories. Consequently, the 57-cent ratio does not mean every cryptocurrency business loses 57% of its revenue to hackers or that the industry operates at a corresponding loss margin. The figures also exclude potential differences in reimbursement, recovered assets and incident classification across tracking providers. Nevertheless, ARK’s findings highlight the economic significance of cybersecurity as cryptocurrency infrastructure expands. Improved custody controls, operational security and transaction monitoring remain important considerations for institutions seeking greater exposure to blockchain-based financial services.