What’s your prediction for Web3 hacks in 2026?

2025 saw billions lost and a shift away from “smart contract bugs only” toward access control, infrastructure, and operational failures.
Looking ahead to 2026, do you think the number of hacks will increase, decrease, or just change shape?

Will better tooling and awareness actually reduce losses, or will attackers just move up the stack targeting keys, infra, bridges, and governance instead of contracts?

Curious how others here see the threat landscape evolving next year.