$1.3B Web3 Security Shift: Attackers Target Infrastructure, Bridges, and Human Credentials

Web3 security losses have surpassed $1.31 billion in mid-year data, highlighting a shift in threat matrix where attackers increasingly target infrastructure, bridges, and human credentials.

The most catastrophic losses stem from structural weaknesses outside core code, with bridges acting as high-value choke points.

Wallet compromise was the most costly attack vector in H1 2026, with $444.53 million stolen across 33 incidents.

Phishing was the second most costly, with $366.31 million stolen across 63 incidents.

The AFX Trade Bridge Validator Breach resulted in around $24.15 million loss after attackers compromised private keys belonging to five separate validators of the AFX cross-chain bridge on Arbitrum.