Woofun AI data shows that $7.64 billion in cryptocurrency assets were lost in the second quarter of 2026, with 88.3% of these losses attributed to private key leaks, signature permission errors, and infrastructure vulnerabilities rather than smart contract flaws. Among 1,427 tracked projects, only 9% implemented third-party continuous monitoring, and merely 4% combined monitoring, bug bounties, and audits. The 14 projects attacked in Q2 had all undergone prior audits, yet most breaches occurred outside traditional audit scopes, involving signature devices, cross-chain bridges, and backend infrastructure.

Hacken reports that institutional investors are shifting due diligence toward continuous security proof, including signatory management and incident response capabilities. Federico Bagiotti, Head of Risk Management at Abraxas Capital, stated that aligning security levels with funding size is now a primary criterion for institutional decisions, outweighing project potential. Projects lacking continuous security measures may face higher risk premiums and reduced access to capital or insurance.