ARK: Crypto Hackers Stole 57 Cents per $1 Earned Onchain Since 2017
ARK's Lorenzo Valente calculates that the crypto industry has lost 57 cents to theft for every dollar it has earned onchain since 2017, and 2026 is on track to be the first year hack losses exceed total onchain revenue since 2020.
The numbers from ARK quantify what Bitcoin skeptics of altcoin DeFi have argued for years: the attack surface is eating the revenue.
Key takeaways
- ARK's Lorenzo Valente calculates that crypto has lost $26.9 billion to hacks since 2017 against $47 billion in total onchain revenue, a ratio of 57 cents stolen per dollar earned.
- In 2026, $8.7 billion in hack losses has already surpassed ARK's $5.6 billion full-year onchain revenue estimate, the first such inversion since 2020, with the $6.36 billion Binance breach accounting for roughly 72% of the year's losses.
- DeFi protocol losses rose 58% year-over-year independent of the Binance event, $1.19 billion across 243 exploits versus $757 million in 2025, confirming the deterioration is structural, not a one-time outlier.
Lorenzo Valente, Director of Research, Digital Assets at ARK Investment Management, posted an analysis on November 11 showing that since 2017, the crypto industry has lost $26.9 billion to hacks while earning $47 billion in total onchain revenue. The math: 57 cents stolen for every dollar earned, drawing on data from Token Terminal and DefiLlama.
"Security is the bottleneck," Valente wrote.
The 2026 Ledger
The 2026 numbers make the cumulative ratio look restrained. Hack losses stand at $8.7 billion year-to-date against ARK's $5.6 billion full-year onchain revenue estimate. Losses have already exceeded projected revenue before the calendar year closes, the first time that has happened since 2020.
The $6.36 billion Binance breach is the dominant event, accounting for approximately 72% of 2026's total. But strip it out and the picture is still ugly: the remaining $2.42 billion in non-Binance losses nearly matches 2025's full non-Binance total of $2.72 billion, with six weeks left in the year.
The revenue side is moving in the wrong direction too. ARK's $5.6 billion 2026 projection compares to $8.9 billion in 2025 full-year onchain revenue. The denominator is shrinking while the numerator is rising. The ratio is deteriorating on both ends simultaneously.
DeFi protocols specifically logged $1.19 billion in losses across 243 events in 2026, up 58% from $757 million in 2025, per DefiLlama data. That trend is entirely independent of the Binance exploit. Total value locked in DeFi fell sharply in the two weeks following the Binance breach, per DefiLlama.
What the Ratio Actually Measures
The 57-cent figure is not just a bad look for a press release cycle. It quantifies the hidden cost of a system that marketed itself as removing counterparty risk while multiplying attack surfaces.
DeFi's core pitch was that smart contracts replace trusted intermediaries. What the pitch omitted: you have not removed counterparty risk, you have distributed it across bridges, liquidity pools, exchange hot wallets, and smart contract execution layers. None of them are backstopped by deposit insurance or recoverable after the fact. The aggregate outcome is 57 cents lost per dollar earned over nine years, worse than what the traditional financial system delivers on theft alone, before accounting for any other cost.
The falsifiable version of this thesis: if a majority of the $26.9 billion in cumulative losses were traced to Bitcoin-native custodians rather than altcoin protocols, DeFi contracts, and exchange hot wallets, the framing that this is a structural DeFi and altcoin failure collapses. Alternatively, if DeFi protocols demonstrate sustained years where hack losses fall below 10% of onchain revenue at scale, the "broken by design" reading requires revision. Neither condition is close to being met. The Mercado Bitcoin and CoinDCX incidents earlier this year are further entries in the same ledger.
Bitcoin does not appear in these tallies. No bridge to drain, no DeFi smart contract execution layer to exploit at the base layer, no cross-chain interoperability surface handing attackers a single point of entry. The Across Protocol domain compromise last week is another reminder of what that attack surface looks like in practice. The conservatism of Bitcoin's design, UTXO accounting, no Turing-complete scripts at L1, bearer-asset self-custody, is precisely what keeps it out of Valente's chart.
What to Watch
The capital flight from DeFi post-Binance is now measurable in TVL data. Whether that rotation accelerates into year-end, and whether it moves toward Bitcoin or simply toward stablecoins, will determine how the market prices the security premium on simpler, more constrained systems. ARK's projected 2026 onchain revenue figure ($5.6 billion) is annualized from Q1 through Q3 data; a worse-than-expected Q4 would push the revenue-to-loss ratio further into negative territory.
Sources
Frequently Asked Questions
Has Bitcoin's base layer ever been exploited for losses at this scale?
No. The $26.9 billion in cumulative losses Valente documents are concentrated in altcoin protocols, DeFi smart contracts, bridges, and custodial exchange hot wallets. Bitcoin's base layer has not been exploited. Losses attributed to "Bitcoin" in aggregator data typically involve custodial services, centralized exchanges, or second-layer products built on top of Bitcoin, not the base protocol itself.
What is onchain revenue and why use it as the benchmark?
Onchain revenue is the aggregate of protocol fees and income generated by blockchain networks, the closest available analog to operating revenue for a software business. ARK uses it as the economic output yardstick: if an industry is losing more to theft than it generates in fees, the security cost alone renders the business model insolvent on a net basis. The 57-cent ratio measures exactly that gap.
What happened to DeFi total value locked after the Binance hack?
DefiLlama data shows DeFi TVL fell sharply in the two weeks following the October 29 Binance breach, a measurable capital exit from the DeFi ecosystem in direct response to the hack, not a broader market move.
