According to CoinMeta, as reported by Coin Bureau, since 2026, the DEFI sector has suffered losses of up to $1.3 billion due to hacker attacks, and these same attack methods continue to persist. For the first time, it has been recorded that attacks involving stolen keys have surpassed those caused by code vulnerabilities to become the primary method of attack. This year's largest losses include: KelpDAO with $290 million (a single validator was compromised), Drift with $285 million ( emptied in 128 seconds), a wallet on Coldcard with $130 million (guessable seeds), AFX Trade with $24 million (keys from 5 stolen validators), and VerusCoin with $19 million (the same bridge was attacked twice). North Korea's Lazarus Group is behind the attacks on Drift and KelpDAO, with a total loss of $575 million, which accounts for nearly half of this year's total losses. All of these protocols had undergone comprehensive security audits before being attacked.