40+ DeFi Protocols Shut Down in 2026: Inside the $770M Hack Crisis Reshaping Crypto

The first six months of 2026 will likely be remembered as a particularly harsh downturn for the decentralized finance world, though the cause won’t be what many anticipate.

More than forty cryptocurrency protocols have failed, resulting in over $770 million lost to hacking. April 2026 now holds the record for the most hacking incidents in crypto history. Unlike past collapses like Celsius, FTX, and Terra, which were largely due to fraud, these failures stem from issues like unsustainable business models, security breaches, and companies being unable to stay afloat financially. These were real businesses with users, funding, and products that simply ran out of money.

As an analyst, I’m seeing a significant shakeout in the DeFi space – what I’m calling the ‘Great Protocol Attrition.’ We’re witnessing a wave of projects shutting down, suffering hacks, and generally facing an uncertain future. I’m tracking all of this to understand how many more DeFi protocols might not make it through 2026. Essentially, the entire DeFi landscape is being reshaped as weaker projects fall by the wayside.

The Headline Numbers: 2026 by the Brutal Truth

Before we get into the names, let’s establish the scale of what’s happening:

40+ protocols have ceased operations or moved to wind-down mode between January and May-start 2026.
$770+ million has been stolen in DeFi hacks year-to-date through April.
April 2026 alone saw losses topping $606–$651 million across roughly 28–30 separate exploits, making it the most-hacked month in crypto history by incident count.
More than $13 billion in DeFi TVL fled to safety in the 48 hours after after the April 18 KelpDAO exploit alone, with $8.4 billion in deposits leaving Aave.
Two protocols — Kelp DAO ($293M) and Drift Protocol ($285M) — accounted for nearly 88% of April’s losses.
TRM Labs estimates DPRK-linked operations were responsible for 76% of all 2026 crypto hack losses through April.
DeFi recorded 47 separate incidents in the first four and a half months of 2026, compared with 28 in the same period of 2025; a 68% year-over-year increase in attack frequency.

This is not a normal bear market cull. It’s a structural reset.

The Full List: 40+ DeFi Protocols That Shut Down in 2026

This is a list, in order of when they closed, of all the important projects – including protocols, wallets, marketplaces, and infrastructure providers – that shut down between January and June 2026.

Date	Protocol / Entity	Sector	Reason for Shutdown	Status
Jan 15	MilkyWay	Liquid Staking	Liquidity depletion on Celestia	Permanent
Jan 15	Pixiland	GameFi	Pivot to Web2 / offline strategy	Permanent
Jan 16	Sound.xyz	Music / NFTs	Sunsetting platform for on-chain model	Transitioned
Jan 24	Nifty Gateway	NFT Marketplace	Falling volumes; high overhead	Withdrawal Only
Jan 24	Entropy	Custody	Capital returned to investors	Permanent
Jan 27	Slingshot	DeFi Aggregator	Market consolidation, funding failure	Permanent
Jan 27	Forgotten Runiverse	GameFi	Server maintenance unsustainable	Permanent
Jan 27	Foundation	NFT Marketplace	Failed Blackdove acquisition	Temporary
Feb 13	Polynomial	Derivatives	Persistent liquidity issues	Permanent
Feb 16	ZeroLend	Lending	Liquidity crunch; oracle dropouts	Permanent
Feb 19	Parsec Finance	Analytics	No path to revenue after 5 years	Permanent
Feb 23	Step Finance + Solana Floor	Portfolio Mgmt	$27M+ exploit; failed rescue funding	Permanent
Feb 23	Remora Markets	Prediction	Exploit + Regulatory friction, low retention	Permanent
Mar 04	Angle Protocol	Stablecoins	Sunset of EURA and USDA	Phased
Mar 04	DataHaven	Analytics	Failure to monetize data feeds	Permanent
Mar 17	Tally	Governance	Regulatory shift made DAO infrastructure optional; “infinite garden” thesis collapse	Permanent
Mar 24	Balancer Labs	DeFi Corporate	Legal liability from V2 exploit	Dissolving
Mar 31	Yupp AI	AI / Analytics	Failed Series A	Permanent
Mar 31	Bit.com	CEX	Strategic retreat	Permanent
Apr 01	Magic Eden Wallet	Wallet	Refocus on Solana	Export Only
Apr 02	Dmail	Communication	Infra costs vs. weak token utility	Permanent
Apr 07	Seamless Protocol	Lending	Consolidation under larger ecosystem	Permanent
Apr 15	Foundation (Permanent)	NFT	Final closure after Blackdove acquisition collapse	Permanent
Apr 17	Mint Blockchain	Infrastructure	Lack of developer adoption	Permanent
Apr 17	Pixel Heroes	GameFi	Server costs vs. token decline	Permanent
Apr 17	77-Bit	GameFi	Funding exhaustion	Permanent
Apr 17	XOCIETY	Metaverse	Pivot to non-blockchain gaming	Permanent
Apr 24	Luckio	iGaming	Regulatory pressure	Permanent
Apr 30	Carrot	DeFi Tooling	Failed acquisition	Permanent
Apr 30	GENSO Online	GameFi	Server costs 5× revenue	Permanent
May 15	Dmail (final)	Communication	Service termination date	Permanent
May 28	Leap Wallet	Multi-chain Wallet	Strategic misalignment	Permanent
June	Fantasy Top	SocialFi	Engagement and TVL decline	Permanent
TBD	Intergaze	Infrastructure	Liquidation process	Permanent
Various	Bloktopia, Echooo, Yupp AI, others	Mixed	Funding & demand collapse	Permanent

The number of company closures is increasing rapidly, and research firms like RootData and Phoenix Group are now releasing updates on these closures every week.

Why Is This Happening? The Macro Drivers Behind the Attrition

The upcoming downturn in 2026 will be unlike previous crypto crashes. The 2022 crash happened because of scams and excessive borrowing, but the expected 2026 drop will be caused by flaws in the underlying economics of crypto itself.

1. The “Token-as-Revenue” Model Has Broken

From 2021 to 2024, many mid-sized DeFi projects didn’t rely on earning money through fees. Instead, they stayed afloat because the value of the tokens they held in reserve increased. They used these tokens to pay their developers, support trading liquidity, and cover expenses like marketing, security audits, and legal costs.

In 2026, when it became difficult to buy and sell smaller, less established cryptocurrencies, the entire system faltered. The value of project funds plummeted, leaving them with only a short time to operate, and many projects that seemed stable suddenly went bankrupt.

2. “Slow Declines” Have Replaced Sudden Collapses

Unlike the rapid collapses of Celsius and FTX, newer crypto projects, often called “2026 protocols,” are failing more slowly, over weeks or months. We’re seeing declining user engagement, reduced income from fees, and a decrease in the value of the project’s assets. By the time the team admits the project is ending, there’s usually no money or activity left to save it.

3. Security Costs Have Outpaced Mid-Tier Budgets

Increasingly complex cyberattacks, often linked to the Lazarus Group backed by North Korea, are making security too expensive for many cryptocurrency projects. Things like security audits, monitoring systems, secure transaction setups, and responding to attacks now require the large budgets typically seen in big companies. According to TRM Labs, hackers believed to be connected to North Korea have been responsible for a growing share of stolen cryptocurrency – less than 10% in 2020-2021, but climbing to 64% in 2025 and 76% of all losses by April 2026. Many projects are still relying on basic, makeshift security measures, according to one expert.

4. Regulatory Relaxation Has Made Decentralization Optional

Things have changed in the world of crypto regulation and decentralized finance (DeFi). Previously, projects often used decentralized autonomous organizations (DAOs) and decentralized governance mainly to avoid being classified as securities under the leadership of former SEC Chair Gary Gensler. Now, with a more lenient approach from the Trump administration and the development of the Digital Asset Clarity Act, decentralization is no longer a requirement – it’s a choice.

Once decentralization is no longer legally necessary, the need for the technology and services that enable it will sharply decline, creating a difficult situation for companies in that space.

The DeFi Hack Crisis: $770M+ Lost in the First Four Months of 2026

The recent disruptions aren’t just about systems going offline. They’ve also been accompanied by an unprecedented wave of security breaches and hacks in the decentralized finance (DeFi) world.

April 2026: The Worst Month in Crypto History

Data from DefiLlama shows that April 2026 experienced the most cryptocurrency hacks ever – around 28 to 30 separate attacks resulting in losses between $606 million and $651 million, depending on how the data was calculated. Some estimates put the total losses for April at $641.67 million, making it the worst month for crypto hacks since the Bybit breach in February 2025.

The damage was concentrated in two devastating attacks:

Kelp DAO — $293 Million (April 18, 2026)

In 2026, a hacker stole approximately $293 million from Kelp DAO in what is currently the year’s biggest DeFi hack. Kelp DAO is a platform where users deposit their staked Ether and receive rsETH tokens in return. The hacker targeted Kelp’s connection to LayerZero, which held a large supply of rsETH used to support tokens on over 20 different networks like Arbitrum, Base, Linea, and Scroll.

A hacker tricked Kelp DAO by sending a false message through the LayerZero network, falsely claiming that rsETH tokens had been destroyed on Unichain. This deception led Kelp DAO to release 116,500 rsETH – about 18% of all rsETH in circulation. Following the attack, the Arbitrum Security Council froze around $71 million worth of ETH linked to the exploit on the Arbitrum network. These funds are currently held pending legal action related to the Terrorism Risk Insurance Act.

Drift Protocol — $285 Million (April 1, 2026)

Drift Protocol lost $285 million on April 1st after hackers linked to North Korea gained access to the platform. The hackers didn’t exploit a flaw in the code; instead, they spent six months carefully manipulating people within the company – a process called social engineering – to gain control. They used pre-signed authorizations that were hidden, allowing them to operate as if they were authorized users.

Other Notable 2026 Exploits

Step Finance — $27.3 million treasury theft on January 31 (later assessments placed the total damage closer $40 million as market conditions fluctuated). Attackers compromised an executive’s device via phishing and used stolen private keys to drain 261,854 SOL from the protocol’s multisig. The hack triggered Step’s full shutdown.
Truebit — $26.4 million lost on January 8 to an integer overflow flaw
Rhea Finance / Rhea Lend — $18.4 million
Grinex — $19.38 million hot wallet hack (initially reported as $15M, later revised upward)
Wasabi Protocol — ~$5 million across multiple blockchains; compromised deployer admin key on April 30
CrossCurve (formerly EYWA) — ~$3 million via a cross-chain bridge access control flaw
Foom Cash — $2.3 million via faulty zk-SNARK verifier (78% recovered)
Volo Protocol (Sui) — $3.5 million
CoW Swap — $1.2 million via domain hijacking
Hyperbridge — $2.5 million
Aethir bridge — $423,000
Silo V2 markets — $392,000
Scallop Lending — $140,000

These days, hackers are primarily targeting bridges and the security of how crypto platforms operate, rather than flaws in the smart contracts themselves. Bridges are responsible for the biggest financial losses in the crypto world because they store massive amounts of digital assets and use complex communication methods between different blockchains that are hard to confirm as secure.

When Hacks Become Death Sentences

Between 2020 and 2022, even significant hacks usually didn’t destroy projects. Communities would come together to help, funds would be used to cover losses, and the systems would be fixed. However, starting in 2026, hacks are much more likely to be fatal, leading to the complete failure of projects.

Step Finance is a prime example of a project that failed after a major security breach. Following a theft of over $27 million in January, the team announced it would shut down in February. This decision came after a $40 million hack, and despite efforts to find funding or a buyer, they were unable to secure the necessary resources to continue operating.

Why are hacks more deadly now? Three reasons:

Treasuries are smaller. Token-denominated war chests have lost 70–90% of their dollar value.
There’s no white-knight capital. VCs are no longer writing rescue checks for protocols they already wrote down.
The “too much risk for too little reward” calculation has flipped. Liquidity providers exit immediately at the first sign of trouble, accelerating insolvency.

The events following the attacks in April clearly demonstrate the potential for widespread impact. Within the first two days, over $8.4 billion was withdrawn from Aave, and the total value of all assets in decentralized finance (DeFi) decreased by more than $13 billion. Aave also experienced a significant increase in outstanding debt, estimated to be between $123 and $230 million.

The Stories Behind the Biggest Shutdowns

Numbers alone don’t capture what’s happening. Let’s look at four shutdowns that define the era.

Tally: The End of “Governance-as-a-Service”

Tally was a key platform for how decentralized organizations (DAOs) made decisions and managed their funds. It supported voting and financial operations for over 500 DAOs, including well-known projects like Uniswap, Arbitrum, and ENS. In total, Tally processed over $1 billion in transactions and helped protect up to $80 billion in assets.

It still couldn’t find a sustainable business model.

The recent shutdown of Tally highlights a critical issue: simply having people use a service doesn’t guarantee funding. Many projects viewed Tally as a free public resource and weren’t willing to pay for its services. Dennison Bertram, CEO of Tally, has stated that the traditional venture capital funding model doesn’t work for tools that support decentralized governance. He also pointed out that reduced regulatory pressure under the Trump administration lessened the need for DAOs to adopt decentralized governance in the first place. Now, many large DAOs are quickly working to either build their own voting systems or switch to popular alternatives like Snapshot.

Nifty Gateway and Foundation: The NFT Marketplace Reckoning

Sales of NFTs have plummeted, falling over 93% from their highest point in 2021. This decline has been so severe that two well-known NFT marketplaces have been forced to close down.

Nifty Gateway, which Gemini acquired in 2019, was once a leading platform for digital art, handling over $300 million in sales. However, in January 2026, it stopped allowing new purchases as Gemini shifted its focus to building a comprehensive “super app.”

Foundation’s situation was more complicated. Attempts to save it through a merger—specifically, a deal with the Blackdove art platform—failed after a thorough review. Ultimately, Foundation shut down in April. This failure demonstrates a key risk with NFTs: even if the artwork itself is securely recorded on the blockchain, the platforms that support it—like servers and websites—can disappear, effectively making the artwork inaccessible.

Magic Eden: The Strategic Pivot Survivor

Magic Eden chose a different path. Instead of full closure, it executed a radical refocus.

Magic Eden will stop supporting Bitcoin and Ethereum-compatible networks, including its multi-chain wallet and marketplaces, by early April 2026. According to CEO Jack Lu, this decision is based on the fact that over 85% of the platform’s trading activity happens on Solana, and maintaining support for other networks isn’t cost-effective.

The company is launching Dicey, a new online gaming and gambling platform that uses its $ME token. This move reflects a wider trend in the industry: companies are shifting away from creating general marketplaces and focusing instead on apps and services that offer higher profits.

Bitcoin and EVM NFT trading stopped in March 2026. Starting April 1st, 2026, the Magic Eden Wallet only allowed users to export their assets. The wallet app will be completely shut down and removed from app stores on May 1st, 2026.

Leap Wallet: The Multi-Chain Wallet Casualty

Leap Wallet will close down all of its services on May 28, 2026, after four years as a leading self-custody wallet within the Cosmos ecosystem. This includes its browser extensions, mobile apps, Compass Wallet, Swapfast, and the Leap Cosmos Hub validator.

Leap, a popular wallet for Cosmos users, launched in 2022 and quickly gained traction with those seeking airdrops on networks like Celestia, Cosmos Hub, and Osmosis. Backed by $3.2 million in funding from CoinFund and Pantera Capital, it grew to support over 100 different blockchains. However, the team decided that maintaining support for so many separate chains was no longer sustainable, despite having served hundreds of thousands of users.

More and more people are switching to wallets like Phantom, MetaMask, and Keplr, which is making it more likely that a few wallets will dominate the market.

ZeroLend: When Oracles Walk Away

ZeroLend, a lending platform that operates on several blockchains, is closing down after three years. The team said the platform wasn’t financially viable due to low profits and increasing security risks. They specifically mentioned that some data providers stopped offering support, and there wasn’t enough activity on blockchains like Manta, Zircuit, and XLAYER.

The team explained that because lending protocols often have small profit margins and are risky by nature, the protocol frequently lost money. ZeroLend’s experience highlights a new type of problem: when essential services like oracles and data providers stop supporting smaller blockchains, protocols relying on them can suddenly stop working.

The Distressed Asset Market: A New DeFi Sector Emerges

Surprisingly, the recent string of project failures is leading to the development of a real market for buying and selling distressed debt on the blockchain. Following the model of traditional “vulture funds,” projects like Curve Finance are exploring ways to turn lender claims into tokens (like cvcrvUSD). This allows users to sell their holdings in failing projects at prices determined by the market, rather than hoping for a rescue that may never come.

The move towards using tokens to represent claims and creating markets for these loans is a positive step forward for the industry. It means DeFi now has a system for handling failing projects without everyone losing their money – something that was lacking in previous cycles and led to significant losses.

Second-Order Effects: How the Industry Is Reshaping

Winner-Take-Most Consolidation

With the closure of several smaller NFT marketplaces, OpenSea and Blur now control over 73% of all NFT trading activity. This shift also means that important decisions about how projects are run are increasingly being made through Snapshot or directly by the projects themselves, rather than through platforms like Tally. As for wallets, more and more users are choosing Phantom, MetaMask, and Keplr.

This follows a common pattern in the tech world – things start scattered, then consolidate around a few key players – but it’s happening much faster than usual, in a matter of months instead of years.

The Shift to “Invisible” Infrastructure

Large investors, like Goldman Sachs who put $108 million into a Solana ETF in April 2026, aren’t interested in directly handling digital wallets or participating in blockchain governance. They want simple, user-friendly applications that hide all the complex blockchain technology behind the scenes.

Retail analytics tools like Parsec and DataHaven, and governance interfaces like Tally, are becoming obsolete. The trend is moving towards embedding data and the ability to act on it directly within broader, professional-grade products.

Capital Coordination Over Voting Portals

As I’ve been observing the Web3 space, the initial idea of ‘Infinite Garden’ – a truly open and decentralized governance system – seems to be shifting. We’re now seeing a move towards models where governance is tightly linked to how protocols actually *make* money. Instead of being a separate layer on top, governance is becoming built *into* the protocols themselves, functioning as a tool to drive profit rather than an end in itself.

How Many More Will Fall in 2026?

Here’s what we expect to happen in the latter half of 2026, based on current trends and what our experts are saying:

Another 15–25 mid-tier protocol shutdowns are realistic by year-end, particularly in lending, perps, and chain-specific DeFi tooling on low-activity L1s and L2s.
Wallet consolidation will accelerate. Expect at least 2–3 more multi-chain wallets to follow Leap Wallet’s path as super-app dominance solidifies.
Cross-chain bridges remain the highest-risk surface. Given that the two largest 2026 hacks both targeted bridge infrastructure, expect continued exploits and at least one more nine-figure incident before year-end.
GameFi continues bleeding out. Server-cost-vs-token-value imbalances make most current GameFi projects mathematically untenable.
The analytics sector consolidation isn’t done. With Parsec and DataHaven gone, expect remaining independent providers to merge or close as institutional data bundlers (Goldman, Fidelity) absorb the market.

What This Means for You: Practical Takeaways

If you’re involved with decentralized finance (DeFi) or have assets in any of the protocols mentioned earlier, here’s what you should do:

Audit your wallet exposure now. Check whether any of your assets sit in protocols on the shutdown list — especially Leap Wallet (May 28 deadline) and any GameFi or analytics services with low recent activity.
Export keys before deadlines. Most shutdowns include grace periods, but app store removals can leave keys unrecoverable.
Prefer dominant infrastructure. In wallets, Phantom/MetaMask/Keplr. In governance, Snapshot. In NFT marketplaces, OpenSea/Blur/Magic Eden (Solana-only).
Avoid bridge concentration. With bridges driving the worst losses, minimize how much capital sits in any single bridge protocol’s locked reserves at any time.
Watch for terminal exploit signals. A hack >10% of a mid-cap protocol’s TVL in 2026 is now usually a death sentence. Don’t wait for the recovery announcement.

The Bottom Line

The anticipated downturn in 2026, often called the Great Protocol Attrition, will be difficult, but it’s a necessary and revealing test for the DeFi space. The projects that make it through will be those that have moved beyond simply rewarding users with tokens and have instead created sustainable, functioning businesses. Those that fail weren’t viable in the long run.

After six years of hype about changing finance, 2026 will be a turning point for the industry. Simply having good ideas isn’t enough – projects need to start making money. Attractive systems that don’t generate income will fail, and it’s no longer acceptable to just patch security flaws on top of large amounts of digital assets.

The early, experimental phase of decentralized finance, often called the “Infinite Garden,” is giving way to a more streamlined and professional version. This new DeFi focuses on strong security, prioritizes generating revenue, and is likely to see a few major players dominating the market.

More than forty have already failed. The real question isn’t if others will follow, but whether those who remain can create something truly enduring.

2026-05-09 08:21