Security firm CertiK has warned that phishing, deepfakes and supply chain attacks will drive some of the largest crypto hacks in 2026.
Senior investigator Natalie Newson said emerging threats such as AI-powered social engineering and cross-chain vulnerabilities are already contributing to rising losses.
“The best way for investors to protect themselves is to be aware of the current threats they may face... For instance, to protect yourself against phishing, always verify the authenticity of URLs and smart contracts,”
Newson said.
The warning follows more than $600 million in crypto losses this year, including major exploits linked to North Korea-backed groups targeting platforms such as Drift Protocol and KelpDAO.
Newson said increasingly sophisticated attack methods, including real-time deepfakes and automated exploit tools, are making traditional security measures less effective.
She advised users to adopt stronger protections, including cold wallet storage, to minimise exposure of private keys and reduce reliance on exchange-based custody.
At the same time, researchers say artificial intelligence may also strengthen defences, while regulators are expanding cybersecurity oversight of digital asset firms in response to escalating threats.