REKT: Cryptocurrency hackers lost US$1.2 billion in 2026, with Coldcard vulnerabilities accounting f

REKT: Crypto hackers lost US$1.2 billion in 2026, with Coldcard vulnerabilities accounting for 10%

Blockchain security company REKT reported that cryptocurrency hacking incidents surged in 2026, with 276 independent attacks occurring so far this year, with a total loss of approximately US$1.2 billion. The company emphasized that recent Coldcard hacking incidents alone accounted for approximately 10% of the total annual losses, highlighting the increasingly complex and far-reaching impact of attacks on the encryption ecosystem.

Coldcard vulnerability: an important driver of annual losses

REKT data shows that the Coldcard incident occurred in just a few days and became a major part of this year's losses. Coldcard, a hardware wallet maker known for its security, suffered exploits that led to the theft of user funds, raising concerns about the security of even the most trusted self-managed solutions. The breach exposed a disturbing trend: Attackers are increasingly targeting infrastructure and supply chains rather than individual users, amplifying the scale of damage.

This year's figures are significantly higher than in previous years. In 2025, total losses from cryptocurrency hacking incidents were estimated at $1.8 billion, involving 300 incidents, while the frequency of attacks and average losses per incident increased in 2026. Losses are concentrated in high-profile vulnerability incidents such as Coldcard, indicating that threat actors are targeting high-value targets with the potential for mass impact.

Impact on the Cryptography Industry

The surge in hacking incidents has renewed calls for stronger security protocols and regulatory oversight. Exchanges, DeFi platforms and wallet providers are urged to adopt stricter audits, real-time monitoring and user education to reduce risks. The Coldcard incident in particular sparked discussion about the limitations of hardware wallets, which were previously considered one of the most secure storage methods.

What it means for investors and users

For ordinary crypto users, the increase in attacks means that even the most seemingly secure solutions can hide unknown vulnerabilities. The financial impact is huge: A $1.2 billion loss represents the actual loss of money by individuals and institutions, and the psychological impact on market confidence may be more profound. Understanding the nature of these attacks and the precautions being taken is crucial for anyone involved in the digital assets space.

In addition, REKT's data provides a key resource for security researchers and policymakers, providing a clear picture of the threat landscape. As the industry matures, such reports will be indispensable for formulating effective countermeasures and building trust in blockchain technology.

Conclusion

The 276 recorded hacking incidents and US$1.2 billion in losses in 2026 indicate that the encryption industry faces ongoing and escalating security challenges. Coldcard vulnerabilities accounted for a significant proportion of total losses throughout the year, demonstrating the possibility of high-impact attacks on well-known platforms. Over time, stakeholders must prioritize strengthening security measures and collaborative threat intelligence to curb losses and protect users.

Frequently Asked Questions

Q1: What is REKT? How does it track hacking incidents?

REKT is a blockchain security company that monitors and records cryptocurrency hackers, exploits and thefts. It provides a comprehensive overview of losses in the ecosystem by integrating public reporting, on-chain analytics and contributions from the safe community.

Q2: How does the Coldcard hack compare to other major encryption vulnerabilities?

Coldcard hacking incidents account for approximately 10% of total losses in 2026, and their scale and speed are eye-catching. Although historically cases such as the Ronin Network hack (2022) and the FTX crash (2022) have had a greater financial impact, the Coldcard incident is particularly worrying because it targets hardware wallets-a product designed for high security.

Q3: How can users protect themselves from similar hacking attacks?

Users should take multi-level security measures: use well-known hardware wallets with the latest firmware, enable two-factor authentication, do not share private keys, and keep an eye on known vulnerabilities. Decentralizing storage methods and placing large amounts of assets in cold wallets can further reduce risks. In addition, focusing on security bulletins from trusted sources such as REKT helps users respond quickly to emerging threats.