July 2026 Records $247M in Crypto Losses, Becomes Year's Second-Worst Month Following Coldcard Breach
The security breach affecting Coldcard, resulting in losses exceeding $100 million, contributed to pushing cryptocurrency thefts in July to a total of $247 million, establishing it as 2026's second-most damaging month for digital asset theft.
The month of July has been identified as 2026's second-most damaging period for cryptocurrency theft incidents, with the recent security breach affecting Coldcard playing a significant role in driving up the numbers.
Criminal actors successfully extracted $247.4 million worth of digital currencies during July, representing the highest theft volume for the year aside from April's staggering $644 million in stolen assets, based on information compiled by DefiLlama data. This figure represented more than a threefold increase compared to the $75 million that was taken in June and significantly surpassed the $60 million stolen during May.
The security breach targeting Coldcard stood out as the month's most significant exploit incident, with no less than $100 million in Bitcoin (BTC) taken from 7,300 individual wallets throughout three verified attack waves, based on data from Galaxy Digital. Galaxy Digital has additionally pinpointed a potential fourth wave of attacks that could elevate the combined losses to approximately $130 million. The hack tracking system maintained by DefiLlama places the estimated losses connected to the Coldcard security breach at $115 million.
July showed that even cold storage does not eliminate technological risks, which can put thousands of wallets at risk simultaneously
CryptoRank, research platform
Additional significant exploitation incidents throughout July consisted of a $9 million security breach targeting the decentralized finance protocol known as Bonzo Lend, theft of $2.6 million from the Cardano-based wallet platform SecondFi, an attack resulting in $24 million being stolen from the Arbitrum-based perpetual exchange platform AFX, and $7.5 million extracted through exploitation of the Verus Ethereum Bridge infrastructure.