Coldcard exploit pushes July losses to $247M as second-worst month of 2026
Abstract:July saw $247.4 million stolen in cryptocurrency thefts, making it the second-worst month of 2026 after April‘s $644 million haul, according to DefiLlama. The total more than tripled June’s $75 million and May‘s $60 million. The largest incident was the Coldcard exploit, with at least $100 million in Bitcoin taken from 7,300 wallets across three confirmed attack waves, Galaxy Digital reported. A suspected fourth wave could raise losses to roughly $130 million, while DefiLlama’s tracker pegs the exploit at $115 million. CryptoRank noted that even cold storage carries technological risks affecting thousands of wallets at once. Other notable July hacks included Bonzo Lend ($9 million), SecondFi ($2.6 million), AFX ($24 million), and the Verus Ethereum Bridge ($7.5 million).
July emerged as the second-worst month of 2026 for cryptocurrency thefts, largely due to the recent Coldcard exploit.
Hackers stole $247.4 million in crypto in July, the most this year after the $644 million stolen in April, according to DefiLlama data. The total was more than triple the $75 million stolen in June and the $60 million stolen in May.
The Coldcard exploit was the month‘s biggest exploit, with at least $100 million in Bitcoin (BTC) stolen from 7,300 wallets across three confirmed attack waves, according to Galaxy Digital. The company also identified a suspected fourth wave that could bring total losses to about $130 million. DefiLlama’s hack tracker estimates losses tied to the Coldcard exploit at $115 million.
“July showed that even cold storage does not eliminate technological risks, which can put thousands of wallets at risk simultaneously,” research platform CryptoRank said in a Thursday X post.
Other notable July exploits included a $9 million hack against decentralized finance protocol Bonzo Lend, $2.6 million stolen from Cardano-based wallet SecondFi, $24 million stolen from Arbitrum-based perpetual exchange AFX and $7.5 million stolen through the Verus Ethereum Bridge.
Disclaimer
The views in this article only represent the author's personal views, and do not constitute investment advice on this platform. This platform does not guarantee the accuracy, completeness and timeliness of the information in the article, and will not be liable for any loss caused by the use of or reliance on the information in the article.
