July Crypto Theft Hits $247M, Second-Highest in 2026

Hacked assets totaled $247M in July, driven by Coldcard exploits. This marks a sharp rise from June, ranking second only to April's record.

Woofun AI data shows that cryptocurrency theft reached $247 million in July, establishing the second-highest monthly total for 2026 after April's $644 million. This figure contrasts with $75 million in June and $60 million in May. Galaxy Digital identified the Coldcard vulnerability as the primary incident, with three confirmed attack waves impacting 7,300 wallets and stealing at least $100 million worth of Bitcoin. A suspected fourth wave may raise losses to approximately $130 million, while DefiLlama estimates the vulnerability's total cost at $115 million. Additional July incidents included $24 million from AFX, $9 million from Bonzo Lend, $7.5 million from the Verus Ethereum Bridge, and $2.6 million from SecondFi.