Monthly · Issue 1 · 2026-07-01 – 2026-07-31
Crypto security incidents · monthly · 2026-07
From 2026-07-01 to 2026-07-31, 38 crypto security incidents were publicly reported, with about $254.4M lost; the previous month had 36 and $86.9M, a change of +193% in losses. The largest was COLDCARD (2026-07-31, about $116.0M). By technique, "Key Compromise" accounted for the most losses: 7 incidents, $176.6M. 2 incidents ($930K) were phishing, frontend hijacks or rugpulls, which happen at the moment of payment; checking the payee address and payment URL first can stop part of them.
38
$254.4M
2
Largest incidents
| Date | Incident | Technique | Loss |
|---|---|---|---|
| 2026-07-31 | COLDCARD | Key Compromise | $116.0M |
| 2026-07-22 | AFX Bridge | Key Compromise | $24.1M |
| 2026-07-15 | Ostium | Key Compromise | $23.8M |
| 2026-07-06 | BonkDAO | Governance | $20.0M |
| 2026-07-21 | Wanchain | Input Validation | $10.0M |
By technique
| Key Compromise | 7 | $176.6M |
| Governance | 2 | $20.8M |
| Oracle Manipulation | 4 | $12.2M |
| Bridge & Cross-Chain | 2 | $12.0M |
| Input Validation | 5 | $11.5M |
| Access Control | 4 | $10.2M |
| Token & Share Accounting | 7 | $7.2M |
| Protocol Logic | 4 | $3.1M |
| Social Engineering | 1 | $480K |
| Frontend & Infrastructure | 1 | $450K |
| Reentrancy | 1 | $10K |
By chain
| Bitcoin | 2 | $116.7M |
| Arbitrum | 6 | $59.7M |
| Solana | 5 | $26.8M |
| Ethereum | 11 | $19.6M |
| BSC | 10 | $12.0M |
| Cardano | 1 | $10.0M |