Connect with us
DAPA Banner

Crypto World

Q1 DeFi Hackers Stole $169M Across 34 Protocols, DefiLlama

Published

on

Crypto Breaking News

The first quarter of 2026 saw crypto hackers siphon more than $168.6 million from 34 DeFi protocols, according to DefiLlama’s quarterly tally. The figure marks a sharp decline from the same window in 2025, which recorded roughly $1.58 billion in losses, largely driven by a $1.4 billion breach at Bybit.

Notable incidents in Q1 2026 included a $40 million private-key compromise at Step Finance in January, a $26.4 million ether drain from Truebit caused by a smart contract manipulation on January 8, and a March 21 private-key attack targeting stablecoin issuer Resolv Labs. DefiLlama notes that even a handful of high-value hacks can shape quarterly totals, underscoring the ongoing risk landscape in DeFi security.

Key takeaways

  • DefiLlama records $168.6 million stolen across 34 DeFi protocols in Q1 2026, signaling a quieter quarter for hacks compared with 2025.
  • The largest single incident was Step Finance’s $40 million private-key compromise in January.
  • Bybit’s $1.4 billion breach in Q1 2025 dwarfed this quarter’s tally, illustrating how a few mega-hacks can skew year-over-year comparisons.
  • Security experts caution that cyber threats in crypto correlate with market cycles and liquidity concentration, not with calendar quarters, emphasizing the need for continuous defense.

DefiLlama tally and incident snapshots

DefiLlama’s dataset highlights 34 security breaches across DeFi protocols in the first three months of 2026, totaling about $168.6 million in stolen funds. The quarter’s largest incident was Step Finance’s $40 million private-key compromise in January, followed by a $26.4 million Ethereum loss from a Truebit vulnerability on January 8. A third notable case involved a private-key breach targeting Resolv Labs, a stablecoin issuer, on March 21. The concentration of losses around a few high-value breaches demonstrates how theDeFi security landscape can be shaped by a small number of outsized events even as total losses remain lower than a year earlier. For context on the data source, see DefiLlama’s hack tracker at DefiLlama hacks.

Attacker incentives rise with liquidity and market activity

Analysts point to market dynamics as a core driver of cybercrime activity in crypto. Nick Percoco, chief security officer at Kraken, told Cointelegraph that threat actors tend to intensify during market cycles and around major product launches, when more liquidity and value are at stake.

“Bull markets, major product launches and fast-moving growth phases all create more attractive conditions for attackers because more value is at stake and new infrastructure can introduce risk.”

“That said, attacks are not confined to just these periods. Vulnerabilities can be exploited in any market environment, particularly in complex or rapidly evolving systems, underlining that security in crypto must be continuous.”

The takeaway is clear: as long as liquidity concentrates and new tech enters the ecosystem, attackers will adapt. The industry’s challenge is sustaining rigorous security practices across evolving platforms and infrastructures.

Advertisement

Threat actors and the evolving risk landscape

North Korea-linked actors have long been a persistent threat to crypto investors and Web3-native companies. Attacks attributed to these groups have grown in visibility, including a high-profile Drift Protocol incident described as involving a private-key leak that led to an estimated $285 million in losses. Security experts describe the current threat landscape as a broad and evolving mix—ranging from highly coordinated groups targeting core infrastructure to opportunistic hackers scanning for weaknesses in smart contracts and client-facing systems.

As one industry voice summarized, “the most attractive targets tend to be those combining large concentrations of value, technical complexity and gaps in operational security.” The transparency of crypto networks can also aid opportunistic attackers in spotting emerging weaknesses, underscoring the need for vigilant, ongoing security measures. In tandem with these dynamics, researchers have warned that 2026 could see more credential theft, social engineering, and AI-powered attacks, elevating the overall risk profile for users, builders, and investors alike. A related Immunefi security report notes that hacked tokens often suffer substantial price declines and rarely recover, highlighting the lasting impact of breaches. See the related piece here: Hacked crypto tokens drop 61% on average and rarely recover, Immunefi report says.

As Q1 2026 closes, the industry faces a critical test: can security teams keep pace with rapid innovation and increasing attack surface, or will the trend towards bigger, more sophisticated exploits outpace defenders?

Readers should watch for ongoing upgrades in key management, more robust credential protection, and collaborative threat intelligence efforts across exchanges and projects as the market moves forward. The evolving threat landscape will continue to shape risk assessments, investment decisions, and security priorities in the months ahead.

Advertisement

Risk & affiliate notice: Crypto assets are volatile and capital is at risk. This article may contain affiliate links. Read full disclosure

Source link

Advertisement
Continue Reading
Click to comment

You must be logged in to post a comment Login

Leave a Reply

Crypto World

Marex launches Nvidia-linked ‘prediction market bond’ with 7% coupon

Published

on

Cyclops raises $8m for enterprise stablecoin infrastructure

Marex’s Nvidia‑linked “prediction market bond” pays 7% if NVDA stays the world’s most valuable company for a year, wrapping Polymarket‑style odds into principal‑protected credit.

Summary

  • Marex issues a bond-like note that pays a 7% coupon if Nvidia remains the world’s most valuable company in one year while returning principal if it does not.
  • The structure mirrors a principal‑protected structured note, shifting prediction‑market style bets into regulated credit markets with Marex as issuer and credit risk.
  • The deal comes as prediction markets like Polymarket see institutional capital inflows and Nvidia’s market cap hovers around $4.3 trillion, cementing its role at the center of the AI trade.

Marex Group has created and sold what it calls the first “prediction market bond,” a structured note that pays a 7% annual coupon in $ if Nvidia Corp. is still the world’s largest company by market value in one year, and simply returns principal if it is not. London‑based Marex is marketing the instrument to institutional clients as a way to express views typically traded on event‑driven platforms such as Kalshi and Polymarket, but without the all‑or‑nothing loss profile of traditional prediction markets. According to Bloomberg, the payoff hinges on a single observable outcome: Nvidia’s standing in the global equity league table at maturity, with investors exposed primarily to Marex’s own credit risk rather than direct equity downside.

Advertisement

The structure blends a zero‑coupon bond with an embedded derivative replicating the odds implied by event markets and options desks, effectively “gambling the yield” while preserving principal, as several market commentators on X noted. One user, @trevorlasn, summarized the economics bluntly: “you get 7% upside with principal protection? that’s just a structured note with better marketing lol,” while @StephGuildNYC asked, “Isn’t this just a principal protected structured note? They’ve been around for ages.”

Another commentator, @JamesChristoph, cautioned that “the risk reward here sounds good, but the payoff is quite bad,” echoing longstanding criticism that structured notes often favor issuers over buyers. In a separate X thread, @MickBransfield framed the deal more expansively: “marex issued a bond that pays 7% if nvidia stays the world’s largest company for a year. prediction markets just got a prospectus.”

Nvidia, currently valued at roughly $4.3 trillion in market capitalization, sits at the center of the global AI trade and remains the world’s most valuable listed company by a margin of more than $400 billion over Apple, according to recent market data. The note’s 7% $ coupon effectively prices the probability that Nvidia can retain that top slot for another year, a question that has been actively traded on on‑chain prediction venues as investors debate how far the AI cycle can run. Those venues have grown rapidly: Polymarket alone saw about $12 billion in trading volume in January 2026, generating over $11 million in on‑chain fees as users speculated on politics, commodities, and crypto prices. Intercontinental Exchange, parent of the New York Stock Exchange, has committed $2 billion to the sector, including a fresh $600 million investment in Polymarket, underscoring how event contracts are bleeding into mainstream market infrastructure. In a recent crypto.news story on Polymarket’s integration with Solana via Jupiter, prediction markets were described as “expanding rapidly heading into 2026,” a backdrop that helps explain why Marex is now wrapping such outcomes into regulated credit products.

The Marex deal also lands as crypto‑native prediction markets deepen their ties to traditional assets, with Polymarket rolling out stock and commodity contracts powered by Pyth Network’s price feeds and centralized exchanges like Deepcoin integrating “event contracts” tied to macro and crypto outcomes. Another crypto.news story highlighted how Vitalik Buterin has deployed roughly $440,000 across Polymarket, booking about $70,000 profit by fading “crazy mode” tail‑risk bets, illustrating how sophisticated traders already treat these markets as yield‑like instruments rather than pure gambling. Against that backdrop, Marex’s bond can be read less as a one‑off curiosity and more as an explicit bridge between on‑chain event speculation and off‑chain structured credit, one that denominates prediction risk in $ coupons instead of tokens.

Advertisement

Source link

Advertisement
Continue Reading

Crypto World

Why Malta Says ESMA Goes Too Far

Published

on

Europe, ESMA, Cryptocurrency Exchange, European Union, Malta, MiCA

Europe’s next crypto battle is no longer about whether to regulate the industry, but who gets to hold the pen. European Union leaders are weighing a European Commission proposal to hand direct supervision of the bloc’s largest crypto asset service providers (CASPs) to the Paris-based European Securities and Markets Authority (ESMA), shifting front-line control away from national regulators.

France, Austria and Italy believe the move is overdue. In a joint September 2025 paper, their market authorities called for “a stronger European framework,” arguing centralized oversight is needed to address “major differences” in how countries authorize firms and curb regulatory shopping. 

Malta’s Financial Services Authority (MFSA) is not convinced. A spokesperson told Cointelegraph it is “premature to introduce structural changes” like centralized supervision. The Markets in Crypto Assets Regulation (MiCA) regulation has only recently become fully applicable, and its “impact on the market and market players is still being assessed,” they said. 

The dispute matters because MiCA lets companies win authorization in one member state and then passport services across the EU. That means the question of who supervises crypto firms is no longer just administrative, but goes to how Europe will balance market integration, investor protection and national regulatory authority.

Advertisement

While a recent Bloomberg report framed the fight as one small state against the commission, Ian Gauci of Maltese law firm GTG, one of the architects of Malta’s original crypto rulebook, told Cointelegraph, “That is not what this is.” He said Malta’s arguments “are not jurisdictional” and “go to the structure itself and how it will behave wherever it is applied in the Union.” The MFSA said its position was not about national advantage but about “regulatory timing and effectiveness” and preserving Europe’s attractiveness to crypto firms.

Related: What happens as Europe enforces MiCA and the US delays crypto rules

Centralizing supervision under one roof

The ESMA already leads the supervisory convergence work, coordinating peer reviews of national authorities, including a fast-track review of one of Malta’s CASP authorizations, widely reported to be OKX. The review found Malta met expectations on supervisory settings, but that the firm’s authorization “should have been more thorough.”

Europe, ESMA, Cryptocurrency Exchange, European Union, Malta, MiCA
ESMA peer review of a Malta CASP approval. Source: ESMA

Supporters of centralization say that the episode makes the case. A spokesperson from the ESMA told Cointelegraph that a single supervisor for major cross-border companies would deliver “more efficient and harmonized supervision,” strengthen investor protection and reduce “the risk of forum shopping.” France, Austria and Italy similarly warned in their position paper that divergent practices could undermine investor protection and Europe’s digital asset market.

Gauci said he was not opposed to a stronger EU-level role where it is justified. But he argued that centralization should be targeted at genuinely systemic cross-border firms with clearly identified risks, rather than applied as a blanket fix for uneven supervision.

Advertisement

Malta warns centralization may go too far

OKX rejects the idea that companies pick smaller jurisdictions to capture regulators. Its European CEO, Erald Ghoos, told Cointelegraph that, unlike some competitors, the exchange had been supervised by Malta under a high-standard regime since 2021 and its MiCA authorization reflected a multi-year relationship, “not an expedited process.” With MiCA still rolling out, he argued that there was no evidence the current model is failing, making centralization look more like a “political decision.”

Related: What happens as Europe enforces MiCA and the US delays crypto rules

Ghoos said the case for concentrating supervisory power at the EU level had not yet been demonstrated.

Gauci accepts that inconsistencies exist but argues that the solution is to use existing tools. “Make peer reviews bite,” set timelines and impose consequences for persistent failure, rather than rewriting MiCA’s allocation of powers, he said.

Advertisement

His deeper concern is structural: Large firms operate as single systems, but the proposal would split oversight across ESMA, national authorities and the Anti-Money Laundering Authority (AMLA), while the Digital Operational Resilience Act (DORA) expects an integrated view of information technology risk. “Once you split supervision like this, that unity disappears,” he warned, leaving accountability fragmented in a crisis.

The real question, he said, is whether Europe values supervisory depth or scale. Early movers built expertise and proximity in a fast-moving industry; strip that away too quickly, and Europe risks replacing it with distance, removing the “incentive for jurisdictions to invest in serious supervisory capacity in the first place,” and encouraging the offshore drift policymakers want to avoid.

Magazine: 6 weirdest devices people have used to mine Bitcoin and crypto