The ack3 H1 2026 DeFi Incident Dataset: Audit Coverage and Incident Data

The ack3 H1 2026 DeFi Incident Dataset is a public, evidence-graded cybersecurity dataset covering 135 confirmed or likely DeFi and crypto-security incidents dated 1 January to 29 June 2026. The corpus reports USD 939.86 million in attributed losses and records incident details, affected projects, attack mechanisms, audit history, relationships between incident paths and identified public pre-incident audit scopes, evidence confidence, and supporting source links. Three included incidents have no public loss estimate in version 1.0; their loss values are null and excluded from the summed loss total. Audit history was identified for 68 incidents. Within this subset, 46 incident paths had only outside-scope evidence, 20 had at least one in-scope match, and 2 were unresolved. Outside-scope paths represented 67.6% by incident count and 94.4% of reported audited-victim loss. Excluding the two largest incidents reduced the loss-weighted share to 72.1%. The dataset underlies the paper “The ack3 H1 2026 DeFi Incident Dataset: Audit Scope Across 135 Security Incidents” and the interactive report published by ack3 at ack3.ai. The release includes the frozen JSON and CSV exports, source manifest, codebook, methodology, known-issues disclosure, citation metadata, license, release notes, and checksums. Incident window: 2026-01-01 to 2026-06-29. Dataset version: 1.0. Generated: 2026-07-01. First published: 2026-07-24.