Exchange Ranking
Top Exchanges
24h Volume Ranking
Popularity Ranking
Exchange BTC Balance
Proof of Reserves
Decentralized Exchanges
Funding Rate
Funding Heatmap
Liquidation Data
Max Pain
Long/Short Ratio
Whale L/S Ratio
Binance/Okex/Huobi L/S
Bitfinex Margin L/S
ETF Tracker
Solana ETF
XRP ETF
Hong Kong ETF
Bitcoin Treasuries
Crypto Reversal
Ethereum Reserves
HyperLiquid Wallet Analysis
Hyperliquid Whale Watch
Large Transactions
On-chain Movement
Bitcoin ROI
Stablecoin Market Cap
Options Analysis
News
Articles
Economic Calendar
Features
Wallet
Contract Calculator
Security
Collections
Watchlist
Following
BTC 
ETH 
WEMIX Cryptocurrency projects suffered losses of US$210.3 million due to hacking attacks in July, a surge of 177% month-on-month.
According to statistics from security agencies, in July 2024, cryptocurrency projects, wallets and infrastructure providers lost approximately US$210.3 million in 30 major hacking attacks, an increase of 177.2% from US$75.87 million in June.
PeckShield's July security report showed that about $70 million was stolen from wallets associated with Coldcard, followed by AFX Trade and Ostium, with losses of about $24 million each. There were also attacks on governance systems, cross-chain bridges, oracle infrastructure, project control wallets, and privileged smart contracts that occurred that month.
Coldcard wallet theft became the third largest theft in 2026
Block's research team traced two sets of transactions with the same wallet fingerprint, involving 1,082.59 bitcoins, so the Coldcard incident became the largest security loss in July. Coinkite has warned users who generate mnemonic words on Coldcard Mk3 firmware versions 4.0.1 to 5.0.3 that these wallets may have been exposed. This vulnerability causes the generated mnemonic words to be much less random than expected, allowing attackers to narrow the range of possible recovery phrases if they have enough information on the setting process.
The loss of approximately US$70 million ranks the third most reported cryptocurrency theft cases in 2026. The top two are US$292 million in the attack on the KelpDAO and LayerZero cross-chain bridge, and US$285 million in the attack on Drift Protocol. Coinkite did not confirm that all transactions identified by Block originated from the Mk3 vulnerability.
Cross-chain bridges, oracle and governance failures cause huge losses
AFX Trade's Arbitrum Cross-Chain Bridge resulted in the theft of 24.15 million USDC units after the signatures of five hot validators reached the required approval threshold. The attackers transferred stablecoins to Ethereum and exchanged them for approximately 12467 ETH.
PeckShield raised its estimated damage from the Ostium oracle attack to approximately $24 million, up from its original estimate of $18 million. The attacker used authorized and future-dated price reports to create false trading profits against the USDC liquidity vault.
In addition, a malicious proposal stole approximately US$21.2 million from the BonkDAO treasury; Wanchin's Cardano-BNB Chain cross-chain bridge caused 515 million NIGHT tokens to flow out of the treasury due to a suspected signature reuse vulnerability, resulting in a loss of approximately US$13 million.
Five other incidents caused nearly US$39 million in damage
Wallets associated with payment service provider Triple-A were stolen over US$9.7 million on four networks, and the assets were subsequently integrated into Ethereum. Bonzo Lend suffered a oracle attack and lost $9.05 million; the Verus Ethereum Cross-Chain Bridge released assets without matching deposits due to failed import verification, resulting in a loss of $7.54 million. WEMIX lost approximately US$6.25 million due to contract ownership being tampered with;Summer.fi was stolen approximately US$6.04 million due to treasury bookkeeping loopholes.
The top 10 security incidents in July totaled approximately US$191 million in losses, and the remaining 20 hacking attacks totaled approximately US$19.3 million in losses.
