June 2026 Immunefi Ecosystem Update

Ready to get involved in the Ecosystem? Buy IMU →
Allocating into crypto security? Talk to us →

June Snapshot: H1 2026 closed with hack losses of $972M, less than half of H1 2025, even as incident count hit the highest ever recorded. IronScore shipped, Hacker Pledging set a new record, and lifetime researcher payouts crossed $140M.

The Defense Is Winning Where It's Deployed: DeFi Hack Losses Down 74% From Peak

Despite the perception that the security landscape is worsening - driven by a record 207 hack incidents in H1 2026 - the reality is that the industry is becoming more resilient. While incident counts have hit record highs, total exploit losses have fallen below $1B for the first time on record, continuing a broader downward trend. 

Immunefi’s 2026 Ecosystem Vulnerability Audit Report confirms this: DeFi exploit losses have plummeted 74% since the 2022 peak, dropping from $2.62B to $680.3M, with the median loss per exploit falling 75% in the same timeframe.

More attacks, less stolen: that is what resilient security looks like. Infrastructure and key compromises drove most of the damage, while smart contract exploits - the focus of continuous researcher coverage - shrank to a fraction. We pay the good guys to break the code before the bad guys rob it. The vulnerability apocalypse is being met with a superior defense.

Security Signal: $972M lost, a fraction paid to stop it.

Across H1, the industry lost about $972M to exploits (TRM Labs). The Immunefi platform paid researchers roughly $13.45M to surface 837 valid bugs before attackers could reach them. Security researchers are the best ROI in crypto, by orders of magnitude.

June Highlights

IronScore is live: check your wallet's risk in 10 seconds.

IronScore (formerly Shield My Bags) launched free to everyone.

You can see a token's price to eight decimals. The APR on a vault, the TVL in a pool, the gas on a pending transaction. It's all wonderfully transparent. But the one number that matters most, how seriously the protocol holding your money takes security, stays invisible right up until the exploit.

With IronScore, paste a wallet and it scores your security exposure across 5 security dimensions with a SAFE / AT RISK / CRITICAL verdict, plus a public leaderboard of 200+ protocols. No sign-up, no wallet connection.
Check your wallet →

Researcher Spotlight: Hacker Pledging just set a record.

Hacker Pledging crossed 26.1M IMU in June, up from 17.1M in May, its biggest single-month jump yet, as pledgers put real capital behind the researchers they believe are most likely to find the next critical vulnerability. Pledge IMU here →.

Base Azul and Firedancer V1 competitions wrapped.

The Base Azul ($250K pool) and Firedancer V1 ($1M pool) audit competitions on the Immunefi platform have closed, with reward evaluation underway. Institutional-grade infrastructure, pressure-tested through the Immunefi competition format before mainnet. Launch a competition →

June by the Numbers:

Critical bounties dominated June. Nearly 6 in 10 bounty dollars paid in June went to critical severity vulnerabilities.

The researcher base is compounding. The Immunefi platform added 20,895 new researchers in H1 and passed 92,000 registered, further cementing that Immunefi is the home not only of the best but the most crowdsourced security talent in crypto. 

Immunefi Platform Progress 

Instascope v2: 11 chains, zero setup. Instascope v2 shipped in June. Normally, before a researcher can test a bug, they have to manually build a testing environment, which is slow and fiddly. Now one click sets that up automatically across 11 blockchains, so researchers can start hunting for bugs right away.

Code4rena migration to Immunefi continues. Customer porting, scope re-creation, and warden onboarding carried through June, with new programs like Strata joining the ecosystem with bounties up to $250K and C4 warden, gzeon, joining the Immunefi All Stars. 

Hacker Pledging Season 2 enters its final stretch. Season 2 runs through July 7. The bonus structure compounds IMU demand alongside the platform's growing share of critical vulnerability disclosures. Stay tuned for updates on Season 3!

Pledge IMU to a researcher here to keep the network compounding.

Content Highlights

• Immunefi says DeFi is getting safer as exploit losses fall 74% from 2022 peak (The Block, June) - coverage of Immunefi's 2026 Ecosystem Vulnerability Audit Report and the AI-driven security arms race.
• DeFi hack losses drop from 2022 peak as security defenses improve (FX Street, June) - the audit report's findings for the trader audience.
• If you want to secure your crypto in 2026, do this (IB Times, June) - Mitchell's practical security guidance for mainstream readers.

Join the Mission

For the community: Buy IMU →
For institutional partners: Get in touch with Institutional Relations →

Immunefi is the security platform for the onchain economy. 92% of crypto's critical vulnerability disclosures now flow through it. It protects more than $180 billion in assets across 650-plus protocols, has helped prevent more than $25 billion in hacks, and has paid more than $140 million in bounties, more than the rest of the market combined, powered by a community of over 92,000 security researchers.

The Immunefi Foundation is scaling security to save crypto from hacks and build a safe, resilient onchain economy. The IMU token coordinates protocols, researchers, and community to continuously compound security for a safer onchain future.