February 2026 saw crypto hack and exploit losses fall to roughly $37.7 million, the lowest monthly tally since March 2025, according to blockchain security firm Certik. The figure marks a sharp drop from most months in 2025, which regularly exceeded $100 million.
Wallet Compromises and Price Manipulation Top Attack Categories
Wallet compromise incidents led all loss categories with $16.6 million stolen in February, accounting for 44% of the total. Price manipulation attacks followed with $11.4 million, while phishing drained $8.6 million from victims. Code vulnerability exploits added $5.1 million, and exit scams another $2.1 million.
YieldBlox, IoTeX Among Biggest Single Incidents
The largest single attack hit YieldBlox for $10.6 million. IoTeX suffered an $8.9 million exploit, and Foom lost $2.3 million. Instadapp posted the highest single-event loss at $10.5 million, followed by EFX ($8.9 million), Kasm ($2.2 million), and Initia ($2.1 million). CryptoFarm experienced two separate incidents totaling $2.7 million. Smaller cases included UCC and Hedgehog ($400,000 each), and Lending and SEI Token ($200,000 each).
DeFi Still Top Target, AI Projects Second
By project type, DeFi protocols incurred the heaviest losses at $14.4 million across multiple incidents. AI-related projects came second with $8.9 million stolen. Gambling platforms lost $2.3 million, while address poisoning and wallet drainer schemes combined for $2.7 million.
Monthly Losses Down 60% from January; Recovery Rate Improves
The $37.7 million February total represents roughly a 60% decline from January 2026 levels, driven by fewer high-value exploits rather than a drop in attack frequency. Phishing volumes remained flat month-over-month at $8.6 million. On a positive note, about 30% of stolen funds ($11.3 million) were either frozen or returned to victims in February, offering a rare bright spot in the cybersecurity landscape.