Overall Statistics: Attack Count Unchanged, Losses Edge Lower
Blockchain security firm PeckShield reported that June 2026 witnessed 40 significant hacking incidents in the cryptocurrency space, resulting in total losses of approximately $75.87 million. This represents a 7.13% month-over-month decline from May's $81.7 million, although the number of attacks remained flat. The data indicates a sustained high level of threat activity, with the average loss per incident decreasing slightly.
Major Incidents: Humanity Protocol Tops Losses, Bridges and MEV Bots Involved
The largest single event in June was the attack on Humanity Protocol, a decentralized identity platform, which suffered losses of around $31 million—accounting for 40.8% of the month's total. Next was the Syscoin Bridge hack, with approximately $10 million in losses. The well-known MEV bot JaredFromSubway.eth was also compromised, losing about $7.5 million. Other affected parties include Secret Network, Polymarket users, SecondFi, TESSERA, Aztec Bridge, and Aztec Connect. A particularly noteworthy pattern: Aztec Bridge and Aztec Connect were both breached within the same month, with combined losses of approximately $4 million, potentially indicating a novel attack vector targeting privacy protocol bridging components.
Money Laundering and Threat Actor Links: Cross-Chain Mixing Raises Red Flags
PeckShield further highlighted that the attacker behind Humanity Protocol has been actively moving and laundering stolen funds across multiple chains, including Bitcoin (BTC), Solana, Hyperliquid, and BNB Chain. More critically, these funds show signs of being mixed with proceeds from the earlier KelpDAO attack, suggesting the two incidents may be linked to the same threat actor or group. This cross-chain mixing technique is emerging as a new challenge for security teams tracking illicit funds.
Overall, while June's losses improved modestly month-over-month, attackers' technical sophistication and money-laundering capabilities continue to evolve. Project teams must strengthen multi-chain asset security audits and monitoring to stay ahead of emerging threats.