Audited Platforms Account for Majority of Crypto Hacked Funds

A new report from CoinGecko reveals that security audits, once considered a gold standard for crypto platforms, may not be as effective as thought.

The 2026 State of Crypto Security Report found that 60% of hacked platforms had completed independent security audits before they were exploited. These audited platforms accounted for 88.44% of all stolen funds across the study period, which included $3.63 billion in losses from January 2025 to July 2026.

The majority of these losses came from infrastructure and supply-chain vulnerabilities, with smart-contract exploits at decentralized applications responsible for an additional $546 million. The report highlights that only about 11% of all incidents involved vulnerabilities within the scope of a completed audit, accounting for $396 million in losses.