Cryptocurrency theft totaled $247.4 million in July 2026, the second-worst month this year after April's $644 million in losses, driven primarily by a Coldcard hardware wallet exploit that affected 7,300 devices.
The Coldcard incident resulted in at least $100 million in stolen Bitcoin across three confirmed attack waves, according to Galaxy Digital analysis. Galaxy identified a suspected fourth wave that could push total Coldcard losses to approximately $130 million, while DefiLlama's hack tracker estimates $115 million tied to the exploit.
The breach demonstrated that cold storage infrastructure remains vulnerable to sophisticated attacks. "July showed that even cold storage does not eliminate technological risks, which can put thousands of wallets at risk simultaneously," CryptoRank said in a Thursday post.
Analysts are still investigating the specific vulnerability. It remains unclear whether the exploit targeted certain firmware versions or device batches.
Beyond Coldcard, other July incidents included a $9 million hack on Bonzo Lend, $24 million removed from the Arbitrum perpetual exchange AFX, $7.5 million stolen through the Verus Ethereum Bridge, and $2.6 million taken from the Cardano-based wallet SecondFi.
