HACK3D: The Web3 Security Report 2022

52 verified wrench attacks and $124.1 million in recorded exposure in H1 2026: a 33.3% rise in incidents, an 11.8-fold rise in losses, and a threat that has narrowed into a Western European crisis.

Web3 security losses exceeded $1.31 billion in H1 2026 across 344 incidents, with wallet compromise emerging as the most financially destructive attack vector and phishing shifting toward fewer, higher-value social engineering attacks.

This article analyzes that security model across the full asset-control lifecycle. It traces a single transaction through Clave's open-source implementation, surveys past vulnerabilities in WebAuthn, FIDO2, and CTAP, maps them onto the lifecycle of a typical Passkey Wallet, and ends with implementation checks for teams building one.