Losses from crypto hacks and scams hit an 11-month low in February, totaling just $26.5 million across 15 incidents, according to PeckShield. That marks a 98.2% plunge from February 2025 and a 69.2% decline from January’s $86 million.
YieldBlox and IoTeX Lead February Losses
Two attacks drove more than two-thirds of February’s losses. Attackers exploited an oracle price manipulation bug on the DAO-managed lending pool YieldBlox, stealing over $10 million. Decentralized identity protocol IoTeX lost about $8.9 million due to a compromised private key—though IoTeX initially estimated the figure at only $2 million.
Other notable events include $3 million taken from cross-chain protocol CrossCurve, and combined losses exceeding $4 million from separate exploits targeting FOOM CASH and Moonwell.
CertiK Logs $37.7M Total Including Phishing
Separate data from CertiK puts total February losses at nearly $37.7 million, factoring in $8.6 million from phishing attacks. By attack vector, wallet compromise topped the list at $16.6 million, followed by price manipulation at $11.4 million, and phishing in third place.
Phishing involves tricking users into revealing private keys or seed phrases via fake websites, social media messages, or impersonation. Earlier reports noted that roughly $48 million in seized Bitcoin was stolen from South Korea’s Gwangju District Prosecutors’ Office, with phishing suspected as the cause.