If you lost cryptocurrency in a Decentralized Finance (DeFi) exploit, you may be able to claim a tax deduction for your loss. The key is proving the crypto was held as an investment and that you have no reasonable prospect of recovery. This guide explains the IRS rules and the steps to take.

DeFi Exploits: A New Normal for Investors

The world of DeFi moves at a breakneck pace, but so do the risks. In the first quarter of 2025 alone, over $1.6 billion in crypto was reportedly lost to hacks and exploits Reuters. High-profile incidents, from massive exchange breaches like the reported $1.5 billion Bybit hack Reuters to protocol exploits on various platforms, have left countless investors with empty wallets.

For those affected, the financial sting is sharp. The question quickly becomes: beyond hoping for a recovery, is there any tax relief available?

The answer is a qualified "yes." The U.S. tax code provides a path to deduct losses from theft, but navigating the specific requirements for crypto is complex. Getting it right can provide significant tax savings, while getting it wrong can lead to a denied deduction or even an IRS audit.

Can You Deduct Stolen Crypto? The IRS Rules Explained

The primary rule governing theft losses is Internal Revenue Code (IRC) Section 165 irs.gov. This section allows taxpayers to deduct losses not covered by insurance or other reimbursements. However, for individuals, the rules are specific.

The IRS distinguishes between three main types of losses for individuals:

Losses incurred in a trade or business.
Losses incurred in any transaction entered into for profit.
Personal casualty or theft losses.

For most crypto investors, the second category is the most important. If you held your crypto as an investment with the intention of making a profit, a theft of that crypto is considered a profit-motivated theft loss coin-counsel.com.

The Critical Distinction: Profit Motive vs. Personal Loss

This distinction is everything. From 2018 through 2025, the Tax Cuts and Jobs Act (TCJA) suspended deductions for most personal casualty and theft losses, unless they occurred in a federally declared disaster area irs.gov. While that suspension has now expired for the 2026 tax year, the rules for personal losses remain restrictive.

Crucially, the TCJA suspension never applied to profit-motivated losses under IRC §165(c)(2). These have remained deductible all along.

In recent guidance, the IRS Office of Chief Counsel has analyzed various crypto scam scenarios, consistently reinforcing this principle coin-counsel.com.

Deductible as Investment Theft: An investor loses funds in a "pig butchering" scam where they were lured onto a fraudulent trading platform. The motive was profit, making the loss potentially deductible. This same logic applies to a DeFi exploit where your staked investment tokens are stolen.
Not Deductible as Personal Loss: A person sends crypto to a scammer in a romance scheme. The motive was personal, not profit-driven, making the loss a non-deductible personal loss under the old TCJA rules (and still subject to high hurdles now).

For victims of a DeFi hack, the case for a profit motive is usually strong. If your funds were in a liquidity pool, staking contract, or lending protocol to earn yield, you were clearly in a "transaction entered into for profit."

Three Paths for Crypto Losses: A Comparison

When you lose crypto, there isn't just one way to report it. Depending on the circumstances, your loss could be a theft loss, a capital loss, or an abandonment loss. Choosing the correct path is vital as it dramatically affects your tax outcome.

Factor	Theft Loss	Capital Loss	Abandonment Loss
Trigger Event	Criminal taking of your property (e.g., hack, exploit, scam).	Sale, trade, or other disposition of the asset for less than its basis.	Asset becomes completely and provably worthless, and you discard it.
IRS Form	Form 4684, Section B	Form 8949 & Schedule D	Form 4797, Part II
Loss Type	Ordinary Loss	Capital Loss	Ordinary Loss
Annual Limit	No limit on offsetting ordinary income (but requires itemizing).	Offsets capital gains first, then up to $3,000 of ordinary income.	No limit on offsetting ordinary income.
Deduction Amount	Your adjusted cost basis in the stolen crypto.	Proceeds (often $0) minus your adjusted cost basis.	Your full adjusted cost basis.
Key Requirement	Proof of theft and no reasonable prospect of recovery.	A sale or exchange must occur.	Proof of complete worthlessness and an act of abandonment.
Best For	DeFi hacks, exchange exploits, investment scams.	Tax-loss harvesting, selling assets that have declined in value.	Rug-pulled tokens, coins on dead blockchains, lost private keys.

As the table shows, a theft loss is often the most favorable treatment for a hack victim because it's an ordinary loss not subject to the $3,000 annual limit against ordinary income. If you had a $50,000 cost basis in crypto that was stolen, you could potentially deduct the full $50,000 against your income in a single year (provided you itemize).

A Step-by-Step Guide for Hack Victims

If you've lost funds in a DeFi exploit, here is a structured plan to document your loss for tax purposes.

Step 1: Document the Theft Immediately

Your claim is only as strong as your evidence. As soon as you discover the exploit:

Take Screenshots: Capture images of the protocol's website, Discord, and Twitter announcements acknowledging the hack.
Save Transaction Hashes: Use a block explorer like Etherscan to find and save the transaction IDs of your deposits into the protocol and, if possible, the hacker's transactions draining the funds.
File a Police Report: Contact your local police department to file a report. While they may not be able to investigate, the report is a crucial piece of evidence that a theft occurred.
File an IC3 Complaint: Report the incident to the FBI's Internet Crime Complaint Center at ic3.gov. Save the confirmation number and any correspondence.

Step 2: Establish Your Cost Basis

Your deduction is limited to your adjusted cost basis, not the market value of the crypto when it was stolen. If you bought 10 ETH for $1,000 each (a $10,000 basis) and it was worth $40,000 when stolen, your maximum deduction is $10,000.

This is the most challenging step for many investors. You must trace the full history of the stolen assets, including:

Original purchase dates and fiat cost.
All transaction fees and gas fees, which are added to the basis.
Records of any crypto-to-crypto trades that led to acquiring the stolen asset.

Manually tracking this across multiple wallets and exchanges is incredibly difficult. This is where a crypto tax software platform like dTax is essential. By connecting your wallets and exchanges, dTax can automatically calculate the acquisition cost for your specific lots of stolen crypto.

Step 3: Prove No Reasonable Prospect of Recovery

According to the IRS, you can only claim a theft loss in the year you discover it, provided there is "no reasonable prospect of recovery" irs.gov.

If the DeFi protocol or a third party announces a full reimbursement plan, you cannot claim a loss.
If a partial recovery is possible, your loss is your basis minus the expected recovery amount.
For most DeFi exploits involving anonymous hackers and funds sent to mixers, the prospect of recovery is effectively zero. Document this with news articles, blockchain analysis reports (e.g., from Chainalysis or Elliptic), and statements from the project team about recovery efforts.

Step 4: File Form 4684

Theft losses for investment property are reported on Form 4684, Section B (Business and Income-Producing Property).

You will describe the property (e.g., "10 ETH lost in Drift Protocol exploit").
Enter your calculated cost basis.
Enter any insurance or reimbursement received (usually $0).
The final loss amount flows from Form 4684 to Schedule A (Itemized Deductions).

Because the deduction appears on Schedule A, you must itemize your deductions to benefit from it. If your total itemized deductions (including the theft loss) do not exceed the standard deduction, you won't get a tax benefit from this method.

Common Pitfalls When Claiming a Theft Loss

Avoid these common mistakes that can jeopardize your deduction:

Deducting Market Value: You can only deduct your cost basis. Deducting the higher market value at the time of the theft is a frequent error that the IRS will disallow.
Claiming in the Wrong Year: The loss is claimed in the year of discovery, not necessarily the year of the initial investment. If you discover a 2025 hack in early 2026, it's a 2026 tax event.
Lack of Documentation: A deduction without police reports, transaction records, and proof of basis is an audit waiting to happen. Keep meticulous records.
Confusing Worthlessness with Theft: If a token's value drops to zero because of a market crash or project failure (a "rug pull"), it may be an abandonment loss, not a theft loss. Theft requires an illegal taking of your specific property.

How dTax Simplifies Theft & Loss Reporting

Calculating the basis of stolen assets is the biggest hurdle in claiming a theft loss. dTax is designed to solve this problem.

By connecting your wallets and exchange accounts via API or file upload, dTax automatically aggregates your entire transaction history. Our AI-assisted classification engine helps identify trades, transfers, staking rewards, and other complex DeFi events. When a theft occurs, you can:

Isolate Stolen Assets: Tag the specific outgoing transactions related to the hack as "stolen."
Generate Accurate Basis Reports: dTax calculates the precise cost basis for the stolen crypto using accounting methods like FIFO or SpecID, providing the exact number you need for Form 4684.
Maintain an Audit Trail: The platform serves as a permanent record of your transaction history, providing the documentation needed to substantiate your basis calculation if the IRS ever asks.

While our AI helps achieve high accuracy in transaction classification, we always recommend a final human review to ensure every detail matches your specific situation. This combination of powerful automation and user verification significantly reduces the manual effort and uncertainty of loss reporting.

This content is for informational purposes only and does not constitute tax, legal, or financial advice. Consult a qualified tax professional for your specific situation.

Start automating your crypto taxes and be prepared for any scenario with dTax.

Frequently Asked Questions

What if the hackers return some of the money later?

If you claim a theft loss deduction and then receive a reimbursement in a future year, you must include the recovered amount as income in the year you receive it. This is known as the "tax benefit rule." For example, if you deducted a $10,000 loss in 2026 and receive a $2,000 recovery in 2028, you must report $2,000 of income on your 2028 tax return Reuters.

Can I claim a loss for crypto in a wallet where I lost the private keys?

Yes, this may be possible starting with the 2026 tax year. The expiration of the TCJA's suspension on miscellaneous itemized deductions may reopen the door for claiming a loss on worthless or abandoned property. If you can prove you have permanently lost access to the wallet and the assets are unrecoverable, you might be able to claim an abandonment loss on Form 4797. This requires proving the asset is completely worthless to you and that you've taken an affirmative step to abandon it. The standards are very high, so extensive documentation of your recovery attempts is critical.

My stolen crypto was from an airdrop. Can I still claim a loss?

It depends on how you treated the airdrop initially. Per IRS guidance, crypto received from an airdrop is taxed as ordinary income at its fair market value on the date you gained control of it. That value becomes your cost basis. If you reported the airdrop as income when you received it, you have a basis and can claim a theft loss equal to that basis. If you never reported the airdrop as income, your basis is zero, and therefore you cannot claim a deduction for the theft.