Cryptocurrency thefts totaled $247.4 million in July, the second-worst monthly total of 2026, driven by a exploit targeting the Coldcard hardware wallet.
The figure more than tripled the $75 million stolen in June and the $60 million lost in May, marking a sharp reversal after two quieter months.
July's $247.4 million trails only April's $644 million for the year, according to DefiLlama data.
The Coldcard exploit alone accounted for at least $100 million in Bitcoin stolen from 7,300 individual wallets. Galaxy Digital confirmed three distinct attack waves; a suspected fourth could push losses from the single exploit to approximately $130 million. DefiLlama's hack tracker puts total losses tied to the incident at $115 million, a divergence that reflects the difficulty of accounting for multi-wave, multi-wallet breaches.
CryptoRank said July's events showed that "even cold storage does not eliminate technological risks, which can put thousands of wallets at risk simultaneously."
Beyond Coldcard, several other protocols took hits. Bonzo Lend, a DeFi lending platform, lost $9 million. AFX, a perpetual exchange on Arbitrum, lost $24 million in a breach that exposed liquidity pool risk on the derivatives platform. SecondFi, a wallet on Cardano, lost $2.6 million. The Verus Ethereum Bridge was exploited for $7.5 million, adding to a long list of cross-chain bridge incidents.
The stolen Bitcoin at the center of the Coldcard exploit carries significant market value; Bitcoin trades at $64,834, up 0.9 percent over the past 24 hours.
