Overview of June Attacks: 40 Incidents, $75.87M Lost
Blockchain security firm PeckShield reported that in June 2026, the cryptocurrency ecosystem suffered 40 major hacking incidents, with total losses reaching approximately $75.87 million. This marks a 7.13% decline from May's $81.7 million, indicating a slight easing in the frequency and scale of attacks, though the overall security landscape remains challenging.
Major Incident Details: Humanity Protocol, Syscoin Bridge, and MEV Bot Lead the List
The most costly attack involved Humanity Protocol, a decentralized identity verification platform, which lost around $31 million. The second-largest was the Syscoin cross-chain bridge hack, with losses of about $10 million. The JaredFromSubway.eth MEV (Maximal Extractable Value) bot was also drained of approximately $7.5 million. Other victims include Secret Network, Polymarket users, SecondFi, TESSERA, Aztec Bridge, and Aztec Connect. A noteworthy pattern emerged as both Aztec Bridge and Aztec Connect were exploited in the same month. Aztec Bridge is the bridging layer for the privacy-focused Aztec protocol, while Aztec Connect is its wallet integration service; combined losses from these two incidents totaled roughly $4 million.
Attacker Laundering Activity and Possible Link to KelpDAO: Multi-Chain Mixing Raises Suspicion
PeckShield's on-chain tracking revealed that the Humanity Protocol attacker has been actively laundering stolen funds through multiple blockchains, including Bitcoin (BTC), Solana, Hyperliquid, and BNB Chain. More critically, these funds have been observed mixing with the proceeds from the earlier KelpDAO attack. Both sets of assets were deposited into the same mixers or intermediate wallets, strongly suggesting that the two threat actors may be the same entity or at least share a common money-laundering infrastructure. Law enforcement and on-chain analytics teams are currently monitoring the related addresses closely, as the investigation continues.