‘Median hack size’ declines despite 3 DeFi exploits in 24 hours – Here’s why!

Given how much more sophisticated the exploits have become, 2026 can undoubtedly be referred to as a year of exploits. Nearly five different exploits have attracted attention in the last day alone, some of which are mentioned below.

Platforms and tokens compromised

Web3 security firm TenArmor first reported an incident affecting FCOW, a token deployed on $BNB Smart Chain (BSC).

An attacker allegedly exploited a vulnerability, causing an estimated loss of $61,300. TenArmor identified the suspicious on-chain transaction, allowing researchers to trace the stolen funds.

Though the specific exploit method has not yet been made public, the incident underscores the ongoing risks facing decentralized finance (DeFi) projects on BSC.

Furthermore, DefiTuna revealed that an attacker had taken advantage of its lending pools. The attack caused an estimated $580,000 loss and left its $USDC pool with a similar deficit.

The investigation remained ongoing. However, the team said it had identified the attack vector and introduced safeguards against further exploitation.

Then, according to PeckShield, a blockchain security company, Cascade was exploited, which affected its CLS vault, allowing user funds worth about 1.34 million $USDC to be stolen.

The warning claims that the attacker swiftly transferred the stolen assets between several blockchains. This was done by bridging the funds from Arbitrum to Solana [SOL] before transferring them to Ethereum [$ETH] via Relay Protocol and transforming them into DAI in the process.

Funds laundering

This is not all, though, as blockchain security researchers have discovered that the attacker responsible for the Resolv Labs exploit, who stole about $25.9 million in March, has resumed their activities. The exploiter has moved 580 $ETH ($1.09 million) in the last few hours and is actively using cryptocurrency mixing services to channel the money.

Finally, the wallet that lawfully purchased 4.426 trillion $BONK, or roughly $21.2 million, from the $BONK treasury has started selling off its holdings.

The address has sent 1.19 trillion $BONK ($4.11 million) to Binance [$BNB], suggesting a possible sale. The wallet currently contains about 3.2 trillion $BONK ($10.85 million), despite the transfers.

Naturally, this has raised concerns that more sales and deposits may soon increase selling pressure on the token.

2026 vs. 2025

Interestingly, even though the frequency of attacks increased, DeFiLlama reported that overall losses fell sharply to $1 billion as of July 2026. This is less than half of the $2.135 billion that was stolen in the same time frame in 2025.

In fact, Haseeb Qureshi, Managing Partner at Dragonfly, also believes that security concerns have actually been downplayed when he said,

Median hack size by year is also declining, showing that we’re moving more toward smaller hacks of smaller protocols.

Final Summary

• $61,300, $580,000, and 1.34 million $USDC have been lost from the above three exploits in the just past 24 hours.
• Despite the rise in attacks in 2026, 2025 still remains the year with maximum exploits.