The cryptocurrency industry suffered another costly month in July, with total losses from hacks and exploits reaching approximately $247.4 million, making it the second-worst month for crypto thefts in 2026. The surge in stolen funds was largely driven by the Coldcard wallet exploit, which alone accounted for more than $100 million in Bitcoin losses and highlighted the growing sophistication of attacks targeting even self-custody solutions.
According to blockchain analytics platform DefiLlama, July’s losses more than tripled those recorded in June and May, underscoring a sharp escalation in security incidents across the digital asset ecosystem.
Coldcard Exploit Dominates Monthly Losses
The largest security incident of the month was the Coldcard wallet exploit, which resulted in the theft of at least $100 million worth of Bitcoin from approximately 7,300 wallets across three confirmed attack waves.
Blockchain research firm Galaxy Digital later identified evidence of a suspected fourth wave of attacks, estimating that total losses could eventually rise to nearly $130 million if additional victim reports confirm the activity.
DefiLlama’s security tracker currently estimates the exploit’s financial impact at around $115 million, making it one of the most significant hardware wallet security breaches in recent years.
The incident shocked many within the crypto community, as Coldcard has long been regarded as one of the industry’s leading Bitcoin hardware wallets focused on high-security self-custody.
July Becomes Second-Worst Month of the Year
With total crypto thefts reaching $247.4 million, July ranks behind only April 2026, when hackers stole approximately $644 million across multiple major exploits.
The comparison highlights how rapidly attack activity intensified during the summer.
Monthly losses included:
- April 2026: $644 million
- July 2026: $247.4 million
- June 2026: Approximately $75 million
- May 2026: Approximately $60 million
The dramatic month-over-month increase illustrates how a handful of large-scale exploits can significantly reshape annual cybersecurity statistics.
Even Cold Storage Faces New Threats
The Coldcard incident has reignited discussions surrounding hardware wallet security.
While cold wallets remain among the safest methods for storing digital assets, the exploit demonstrated that no technology is completely immune to vulnerabilities.
Blockchain research platform CryptoRank noted that the incident serves as a reminder that technological weaknesses can place thousands of wallets at risk simultaneously, even when users rely on offline storage solutions.
The attack has intensified industry-wide efforts to improve firmware security, vulnerability testing, and hardware wallet auditing as AI-assisted security research continues to accelerate.
Other Major Crypto Hacks in July
Although the Coldcard exploit dominated headlines, several other significant attacks contributed to July’s elevated losses.
Among the largest incidents were:
- Bonzo Lend: Approximately $9 million stolen through an exploit affecting the Hedera-based decentralized finance protocol.
- AFX Protocol: Around $24 million lost in an attack targeting the Arbitrum-based perpetual trading platform.
- SecondFi Wallet: Approximately $2.6 million stolen from the Cardano ecosystem following a wallet vulnerability.
- Verus Ethereum Bridge: Roughly $7.5 million lost in a bridge-related exploit.
These incidents illustrate that attackers continue targeting a wide range of blockchain infrastructure, including decentralized finance protocols, bridges, wallets, and trading platforms.
Security Challenges Continue to Evolve
The increase in major exploits reflects the rapidly changing cybersecurity landscape within digital assets.
Security researchers have increasingly warned that artificial intelligence is accelerating vulnerability discovery, allowing attackers to identify and exploit software weaknesses much faster than in previous years.
At the same time, blockchain developers and security firms are deploying AI-powered auditing tools and automated code analysis to strengthen protocol defenses before vulnerabilities can be exploited.
This ongoing race between attackers and defenders is becoming one of the defining challenges facing the crypto industry.
Industry Focus Shifts Toward Stronger Security
The scale of July’s losses is expected to intensify calls for stronger security standards across wallets, decentralized applications, bridges, and exchange infrastructure.
Many projects are expanding independent code audits, bug bounty programs, continuous monitoring systems, and AI-assisted vulnerability detection in an effort to reduce future exploits.
For users, the Coldcard incident also serves as an important reminder that while self-custody remains a cornerstone of cryptocurrency ownership, maintaining security requires not only protecting private keys but also ensuring that the underlying software and hardware continue to receive rigorous security scrutiny.
As the digital asset ecosystem continues to mature, cybersecurity remains one of the industry’s highest priorities, with July’s $247 million in losses reinforcing the importance of proactive defense against increasingly sophisticated attacks.
