According to data from DefiLlama, hackers stole $247 million in crypto assets during July, making it the second-largest month for thefts so far in 2026. Only April was higher, with $644 million stolen. The July total also jumped sharply from $75 million in June and $60 million in May.
Galaxy Digital said the Coldcard vulnerability was the largest attack event of the month. The firm confirmed three rounds of exploits affecting 7,300 wallets, with at least $100 million in Bitcoin stolen. It also identified a suspected fourth round that could bring total losses to around $130 million. DefiLlama's hack tracker estimates losses tied to the vulnerability at $115 million.
Other July incidents include a $9 million attack on DeFi lending protocol Bonzo Lend, a $2.6 million theft from the Cardano-based wallet SecondFi, a $24 million drain of Arbitrum-based perpetual trading platform AFX, and a $7.5 million loss at Verus Ethereum Bridge.
Hackers stole $247 million in crypto assets during July, the second-largest monthly haul of 2026, according to DefiLlama data.
Only April's $644 million was higher. The July figure also jumped well above June's $75 million and May's $60 million.
Coldcard vulnerability tops July attacks
Galaxy Digital identified the Coldcard vulnerability as the largest attack event of the month. The firm confirmed three rounds of exploits affecting 7,300 wallets, with at least $100 million in Bitcoin stolen. Galaxy also flagged a suspected fourth round that could lift total losses to around $130 million. DefiLlama's hack tracker, for its part, estimates losses from the vulnerability at $115 million.
Other notable incidents
- DeFi lending protocol Bonzo Lend lost $9 million
- Cardano-based wallet SecondFi was drained of $2.6 million
- Arbitrum-based perpetual trading platform AFX lost $24 million
- Verus Ethereum Bridge saw $7.5 million stolen
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
