CoinGecko report: 60% of hacked crypto platforms had security audits

A security audit was supposed to be the gold standard. Get your code reviewed by professionals, publish the report, and signal to users that your platform is safe. According to CoinGecko’s 2026 State of Crypto Security Report, that signal is worth considerably less than advertised. The report, released on August 27, 2026, found that 147 of 245 exploited platforms, roughly 60%, had completed independent security audits before they were hacked. Those audited platforms accounted for 88.44% of all stolen funds across the study period. The numbers behind the headline CoinGecko tracked losses from January 2025 through July 2026, documenting $3.63 billion stolen across 245 separate incidents. The damage was heavily concentrated: the ten largest attacks alone represented more than 72.5% of total losses. Infrastructure and supply-chain vulnerabilities were the single biggest driver of losses, responsible for more than $1.8 billion of the total. Smart-contract exploits at decentralized applications cost another $546 million, while centralized exchanges were hit primarily through private-key compromises. Perhaps the most pointed finding: only about 11% of all incidents involved vulnerabilitie...