Key facts
- July saw $247.4 million in cryptocurrency stolen.
- The Coldcard exploit accounted for at least $100 million in stolen Bitcoin.
- This makes July the second-worst month of 2026 for crypto thefts.
- Other exploits in July included hacks on Bonzo Lend, SecondFi, AFX, and the Verus Ethereum Bridge.
July emerged as the second-worst month of 2026 for cryptocurrency thefts, with hackers stealing a total of $247.4 million. This figure represents a significant increase from previous months, more than tripling the $75 million stolen in June and the $60 million stolen in May. The substantial losses in July were largely attributed to the Coldcard exploit, which alone resulted in at least $100 million in Bitcoin being stolen from approximately 7,300 wallets across three confirmed attack waves, according to Galaxy Digital. DefiLlama's hack tracker estimates the losses from this specific exploit at $115 million. The Coldcard incident underscores the persistent technological risks within the cryptocurrency space, even affecting cold storage solutions. Other notable security breaches in July included a $9 million hack against the decentralized finance protocol Bonzo Lend, $2.6 million stolen from the Cardano-based wallet SecondFi, $24 million taken from the Arbitrum-based perpetual exchange AFX, and $7.5 million lost through the Verus Ethereum Bridge.