Cryptocurrency thefts reached $247.4 million in July, the second-highest monthly total of 2026, according to DefiLlama data. Only April exceeded it, with $644 million stolen.
The Coldcard hardware wallet exploit dominated the month's losses. At least $100 million in Bitcoin was stolen from 7,300 wallets across three confirmed attack waves, with Galaxy Digital identifying a suspected fourth wave that could push total Coldcard losses to roughly $130 million. DefiLlama's hack tracker independently estimated Coldcard losses at $115 million.
Other significant breaches compounded July's total. AFX, an Arbitrum-based perpetual exchange, lost $24 million. Bonzo Lend, a decentralized finance protocol, suffered a $9 million exploit. The Verus Ethereum Bridge saw $7.5 million stolen, and SecondFi, a Cardano-based wallet, lost $2.6 million.
July's theft volume more than tripled June's $75 million and significantly exceeded May's $60 million, reflecting heightened security vulnerabilities across multiple blockchain ecosystems.
