Crypto's $16B Hack Problem: It's Stolen Passwords, Not Broken Tech

Nearly 40% of crypto's $16.69B in hack losses came from stolen 'private keys' — not flawed technology. Here's how the industry is fighting back.

Almost every week, there's news of a crypto project losing millions to hackers. But here's the surprising truth: the technology behind crypto usually isn't the problem. The real weak spot is something much simpler — stolen "keys."

What's actually going wrong?

According to data source DeFiLlama, blockchain projects have lost a massive $16.69 billion to hacks. About 40% of that wasn't caused by broken code — it was caused by someone stealing a *private key*.

A private key is basically a secret password that controls access to your crypto. Whoever holds it controls the money. So if a hacker steals it, they can drain the funds — even if the underlying technology is perfectly safe.

A simple comparison: Think of online banking. The bank's systems (the technology) almost never get broken into directly. But if someone steals your login password, they can empty your account. In crypto, the "password" is the private key.

The key facts:

Total lost to crypto hacks: $16.69 billion
Share linked to stolen private keys: about 40%
The rest comes from other flaws, like bugs in *smart contracts* (self-running programs on the blockchain)

Security firm CertiK told CoinDesk that attacks on smart contracts are going down, while attacks targeting people, systems, and tools are going up. Why? Because companies poured money into securing their code — so hackers simply switched to easier targets, like stealing keys.

What's being done about it?

The industry is rolling out new defenses, including:

Multi-party computation (MPC): splitting a private key into pieces so no single person ever holds the whole thing
Account abstraction: smarter, more flexible account setups with built-in safety rules
Stronger everyday security habits across teams

The goal is to stop relying on one single key — making attacks far harder to pull off.

Bottom line: Crypto's biggest weakness right now isn't the technology — it's how people store and protect their secret keys. Fixing that human and operational side could prevent billions in future losses.

This is an AI-generated summary. Read the original article at: https://www.coindesk.com/tech/2026/06/29/private-keys-not-smart-contracts-caused-40-of-crypto-s-usd16-billion-hack-losses-here-s-whats-being-done