TL;DR
- July crypto thefts reached $247.4 million, more than triple June’s total, making it the second-worst month of 2026 behind April’s $644 million.
- The Coldcard exploit drove the surge, stealing at least $100 million in Bitcoin from 7,300 wallets, with potential losses reaching about $130 million.
- Other July attacks hit AFX, Bonzo Lend, the Verus Ethereum Bridge and SecondFi, showing that wallets, DeFi protocols, exchanges and cross-chain infrastructure remained exposed.
July became the second-worst month of 2026 for cryptocurrency thefts after hackers stole $247.4 million, more than tripling June’s $75 million total and far surpassing May’s $60 million. The surge was driven primarily by the Coldcard exploit, which accounted for at least $100 million in stolen Bitcoin across 7,300 wallets and three confirmed attack waves. What makes the episode unsettling is that a security product designed for cold storage became the center of the month’s largest crypto breach, challenging assumptions that keeping assets offline is enough to neutralize sophisticated technological threats.
$247M Stolen in July: Crypto’s Second-Worst Month of 2026
In July, losses from cryptocurrency hacks reached $247M, making it the second-largest monthly total since the beginning of the year. One of the main contributors was the incident involving Coldcard hardware wallets.
As… pic.twitter.com/E9E0YmFzQm
— CryptoRank.io (@CryptoRank_io) August 6, 2026
The scale of the Coldcard incident remains uncertain. Galaxy Digital identified three confirmed attack waves and a suspected fourth that could push total losses to roughly $130 million, while DefiLlama’s hack tracker estimated $115 million tied to the exploit. The gap between confirmed and potential losses underscores how difficult it can be to measure damage while an attack is still being reconstructed. CryptoRank said July demonstrated that cold storage does not eliminate technological risk, noting that vulnerabilities can simultaneously place thousands of wallets in danger despite the perception that offline custody offers a defensive boundary.
Coldcard dominates a month packed with crypto exploits
Coldcard was not the only target. Other notable incidents included a $24 million theft from Arbitrum-based perpetual exchange AFX, a $9 million attack against decentralized finance protocol Bonzo Lend, $7.5 million stolen through the Verus Ethereum Bridge and $2.6 million taken from Cardano-based wallet SecondFi. Together, these incidents show that July’s losses were distributed across wallets, DeFi protocols, exchanges and cross-chain infrastructure, even though Coldcard overwhelmingly shaped the monthly total. The diversity of targets also illustrates how attackers continue probing different layers of the crypto ecosystem rather than concentrating on one category.
July’s $247.4 million theft total was exceeded this year only by April, when attackers stole $644 million. That comparison places the month well above recent levels, with losses more than three times June’s figure and more than four times May’s. The numbers reveal how quickly the security picture can deteriorate when one large exploit coincides with several smaller breaches. Coldcard alone represented a substantial share of July’s damage, while the additional attacks amplified the final tally. The result leaves 2026 with another unusually severe month for crypto theft and renewed questions about how much protection specialized custody technology can realistically provide.
Be the first to comment