TRM Labs tracks record high price manipulation exploits in 2026, 207 total hacks

Price manipulation exploits in DeFi have nearly tripled year over year, and the playbook behind them is getting cheaper to run. TRM Labs reported 32 such incidents through August 2026, obliterating the previous annual record of 12 set in 2025. These attacks now represent roughly one in every eight crypto hacks. Back in 2022, the ratio was one in 17. Flash loans and thin liquidity: a recipe for exploitation The mechanics behind most of these exploits follow a familiar template. An attacker uses a flash loan, which is essentially a massive uncollateralized loan that must be repaid within a single blockchain transaction, to temporarily inflate the price of a low-liquidity token. They then use that artificially pumped token as collateral to borrow real assets from a lending protocol before the price snaps back to reality. TRM Labs attributes the record surge to the proliferation of protocols relying on low-liquidity oracles. The attacks are cheap and repeatable, which explains why the total dollar value stolen hasn’t spiked proportionally to the number of incidents. The median loss per hack in the first half of 2026 sat at approximately $219,000, with 207 total hacking incidents produc...