Hackers stole $247.4 million in crypto during July, the second-worst month of 2026 for cryptocurrency thefts, according to DefiLlama data. April 2026 remains the highest with $644 million in stolen assets.
The Coldcard exploit was the largest incident in July, resulting in at least $100 million in Bitcoin stolen across 7,300 wallets in three confirmed attack waves, according to Galaxy Digital. Estimates vary: Galaxy Digital identified a suspected fourth wave that could push total losses to approximately $130 million, while DefiLlama's hack tracker places Coldcard-related losses at $115 million.
July's theft total represents more than triple the amounts stolen in prior months. Hackers took $75 million in June and $60 million in May.
Other notable exploits in July included a $9 million hack on DeFi protocol Bonzo Lend, a $24 million exploit of Arbitrum-based perpetual exchange AFX, $7.5 million stolen through the Verus Ethereum Bridge, and $2.6 million taken from Cardano-based wallet SecondFi.
The incidents highlight persistent vulnerabilities across crypto infrastructure layers—from hardware wallets to DeFi protocols and cross-chain bridges.
