June Attack Overview: 40 Incidents, $75.87M in Losses
Data from blockchain security firm PeckShield shows that in June 2026, the cryptocurrency sector experienced 40 major hacking attacks, with total losses of approximately $75.87 million. Compared to May's $81.7 million, the loss amount decreased by 7.13% month-on-month, indicating a slight slowdown in the overall volume of attacks, though the severity of individual major incidents still warrants attention.
Major Attacks and Losses: Humanity Protocol Leads
The largest single incident in June was an attack on Humanity Protocol, a decentralized identity protocol, which lost about $31 million, accounting for 40.8% of the month's total losses. The next largest was the cross-chain bridge Syscoin Bridge, with losses of about $10 million. JaredFromSubway.eth's MEV bot was attacked, losing approximately $7.5 million. Other affected projects or addresses include Secret Network, Polymarket users, SecondFi, TESSERA, Aztec Bridge, and Aztec Connect. Notably, Aztec Bridge and Aztec Connect were both attacked within the same month, with combined losses of roughly $4 million, highlighting vulnerabilities in the Aztec ecosystem.
Attackers' Money Laundering and Association Analysis: Multi-Chain Mixing and KelpDAO Link
PeckShield further noted that attackers behind the Humanity Protocol hack have been actively laundering stolen funds across multiple chains, including BTC, Solana, Hyperliquid, and BNB Chain. Crucially, there are indications that these laundered funds are being mixed with the stolen funds from the previous KelpDAO attack, suggesting the threat actors behind both incidents may be linked. This finding implies that the attackers could belong to the same hacker group or share laundering channels, complicating future tracking and fund recovery. Professional security teams are continuously monitoring on-chain fund flows.