Hacking incidents surged in July, causing the cryptocurrency industry to lose US$210.3 million.
In July, a total of 30 major hacking incidents occurred in the cryptocurrency industry, causing total losses of US$210.3 million, a significant increase of 177.2% from the US$75.87 million reported in June. These attacks highlight the security challenges that the industry continues to face. The losses were mainly driven by a few high-profile cases. Among them, the Coldcard wallet exploit incident was the largest this month and the third largest case this year, resulting in losses of up to US$70 million.
Other noteworthy security incidents in July included: AFX Trade exploits ($24 million), Ostium ($24 million), BONK ($21.2 million), Wanchain ($13 million), Triple-A ($10 million), Bonzo Lend ($9.05 million), Verus ($7.5 million), WEMIX ($6.25 million), and Summer.fi ($6 million).
Cryptocurrency hacking losses exceeded US$1 billion in the first half of 2026
According to online security platform Blockaid, the number of exploit incidents recorded in the cryptocurrency industry in the first half of 2026 reached a new high, and the losses caused by these hacking attacks exceeded US$1 billion. The attacks were mainly concentrated on Ethereum and Solana, which cost US$332 million and US$326 million respectively due to various exploits. Hackers exploited code vulnerabilities to attack Ethereum-based protocols, as well as key and infrastructure vulnerabilities on the Solana protocol.
Hackers target Ethereum and Solana-based applications
Hackers targeted vulnerabilities in Ethereum-based applications. Blockaid pointed out in its second quarter 2026 report that code vulnerability exploitation is the most common method used by hackers. However, Ethereum protocols such as Humanity Protocol and StablR were hacked through private key vulnerabilities. Blockaid also highlighted other attack vectors on Ethereum, including privileged account exploits, market manipulation, smart contracts and bridging vulnerabilities.
At the same time, the Drift protocol based on Solana was attacked through social engineering methods. The hackers spent months building a relationship with the protocol team, then used Solana's "persistent random numbers" feature to induce team members to sign transactions and gain administrator control. This allowed hackers to steal $285 million from the agreement, more than half of its total lockdown value (TVL). On-chain indicators indicate that North Korean hackers participated behind the theft. The Step Finance exploit was also blamed on North Korean hackers. The hackers stole $40 million after gaining device access from members of the project team. Subsequently, the team unpledged 261,854 SOLs and transferred them, causing the value of the STEP token to plummet 80%. In addition, there have been code-based exploits involving Volo and Raydium in Solana.

Exchange Ranking
Top Exchanges
24h Volume Ranking
Popularity Ranking
Exchange BTC Balance
Proof of Reserves
Decentralized Exchanges
Funding Rate
Funding Heatmap
Liquidation Data
Max Pain
Long/Short Ratio
Whale L/S Ratio
Binance/Okex/Huobi L/S
Bitfinex Margin L/S
ETF Tracker
Solana ETF
XRP ETF
Hong Kong ETF
Bitcoin Treasuries
Crypto Reversal
Ethereum Reserves
HyperLiquid Wallet Analysis
Hyperliquid Whale Watch
Large Transactions
On-chain Movement
Bitcoin ROI
Stablecoin Market Cap
Options Analysis
News
Articles
Economic Calendar
Features
Wallet
Contract Calculator
Security
Collections
Watchlist
Following
BONK
SOL
WEMIX