Weekly and monthly reports
Weekly reports come out every Monday and monthly reports on the 1st. Figures are computed from public data, and each issue states its cut-off.
Crypto security incidents · Weekly · Issue 10
Crypto security incidents · weekly · 2026-W40
From 2026-09-28 to 2026-10-04, 4 crypto security incidents were publicly reported, with about $4.4M lost; the previous week had 10 and $409.1M, a change of -99% in losses. The largest was NEAR Intents (2026-10-01, about $3.8M). By technique, "Bridge & Cross-Chain" accounted for the most losses: 1 incidents, $3.8M. There were no phishing, frontend-hijack or rugpull incidents; the rest happened inside wallets and contracts and call for key management and code audits.
Crypto security incidents · Weekly · Issue 9
Crypto security incidents · weekly · 2026-W39
From 2026-09-21 to 2026-09-27, 10 crypto security incidents were publicly reported, with about $409.1M lost; the previous week had 8 and $6.2M, a change of +6510% in losses. The largest was Bitget (2026-09-24, about $387.0M). By technique, "Key Compromise" accounted for the most losses: 2 incidents, $394.0M. 1 incidents ($2.1M) were phishing, frontend hijacks or rugpulls, which happen at the moment of payment; checking the payee address and payment URL first can stop part of them.
Crypto security incidents · Weekly · Issue 8
Crypto security incidents · weekly · 2026-W38
From 2026-09-14 to 2026-09-20, 8 crypto security incidents were publicly reported, with about $6.2M lost; the previous week had 9 and $4.7M, a change of +32% in losses. The largest was Nostra Money Market (2026-09-17, about $3.5M). By technique, "Oracle Manipulation" accounted for the most losses: 2 incidents, $4.1M. There were no phishing, frontend-hijack or rugpull incidents; the rest happened inside wallets and contracts and call for key management and code audits.
Crypto security incidents · Weekly · Issue 7
Crypto security incidents · weekly · 2026-W37
From 2026-09-07 to 2026-09-13, 9 crypto security incidents were publicly reported, with about $4.7M lost; the previous week had 9 and $326.1M, a change of -99% in losses. The largest was Nomic (2026-09-09, about $3.1M). By technique, "Bridge & Cross-Chain" accounted for the most losses: 3 incidents, $4.2M. There were no phishing, frontend-hijack or rugpull incidents; the rest happened inside wallets and contracts and call for key management and code audits.
Crypto security incidents · Monthly · Issue 3
Crypto security incidents · monthly · 2026-09
From 2026-09-01 to 2026-09-30, 33 crypto security incidents were publicly reported, with about $742.0M lost; the previous month had 48 and $255.5M, a change of +190% in losses. The largest was Bitget (2026-09-24, about $387.0M). By technique, "Key Compromise" accounted for the most losses: 6 incidents, $396.0M. 1 incidents ($2.1M) were phishing, frontend hijacks or rugpulls, which happen at the moment of payment; checking the payee address and payment URL first can stop part of them.
Crypto security incidents · Weekly · Issue 6
Crypto security incidents · weekly · 2026-W36
From 2026-08-31 to 2026-09-06, 9 crypto security incidents were publicly reported, with about $326.1M lost; the previous week had 16 and $189.7M, a change of +72% in losses. The largest was Liquid Network (2026-09-06, about $320.0M). By technique, "Bridge & Cross-Chain" accounted for the most losses: 1 incidents, $320.0M. There were no phishing, frontend-hijack or rugpull incidents; the rest happened inside wallets and contracts and call for key management and code audits.
Crypto security incidents · Weekly · Issue 5
Crypto security incidents · weekly · 2026-W35
From 2026-08-24 to 2026-08-30, 16 crypto security incidents were publicly reported, with about $189.7M lost; the previous week had 11 and $31.4M, a change of +505% in losses. The largest was Tectonic (2026-08-30, about $124.5M). By technique, "Token & Share Accounting" accounted for the most losses: 5 incidents, $175.5M. There were no phishing, frontend-hijack or rugpull incidents; the rest happened inside wallets and contracts and call for key management and code audits.
Crypto security incidents · Weekly · Issue 4
Crypto security incidents · weekly · 2026-W34
From 2026-08-17 to 2026-08-23, 11 crypto security incidents were publicly reported, with about $31.4M lost; the previous week had 3 and $3.3M, a change of +844% in losses. The largest was KiiChain (2026-08-22, about $9.7M). By technique, "Token & Share Accounting" accounted for the most losses: 1 incidents, $9.7M. There were no phishing, frontend-hijack or rugpull incidents; the rest happened inside wallets and contracts and call for key management and code audits.
Crypto security incidents · Weekly · Issue 3
Crypto security incidents · weekly · 2026-W33
From 2026-08-10 to 2026-08-16, 3 crypto security incidents were publicly reported, with about $3.3M lost; the previous week had 12 and $25.3M, a change of -87% in losses. The largest was Harmony Bridge (2026-08-11, about $3.2M). By technique, "Bridge & Cross-Chain" accounted for the most losses: 1 incidents, $3.2M. There were no phishing, frontend-hijack or rugpull incidents; the rest happened inside wallets and contracts and call for key management and code audits.
Crypto security incidents · Weekly · Issue 2
Crypto security incidents · weekly · 2026-W32
From 2026-08-03 to 2026-08-09, 12 crypto security incidents were publicly reported, with about $25.3M lost; the previous week had 7 and $127.0M, a change of -80% in losses. The largest was KITE Foundation (2026-08-05, about $13.3M). By technique, "Key Compromise" accounted for the most losses: 3 incidents, $15.3M. There were no phishing, frontend-hijack or rugpull incidents; the rest happened inside wallets and contracts and call for key management and code audits.
Crypto security incidents · Monthly · Issue 2
Crypto security incidents · monthly · 2026-08
From 2026-08-01 to 2026-08-31, 48 crypto security incidents were publicly reported, with about $255.5M lost; the previous month had 38 and $254.4M, a change of +0% in losses. The largest was Tectonic (2026-08-30, about $124.5M). By technique, "Token & Share Accounting" accounted for the most losses: 8 incidents, $185.8M. There were no phishing, frontend-hijack or rugpull incidents; the rest happened inside wallets and contracts and call for key management and code audits.
Crypto security incidents · Weekly · Issue 1
Crypto security incidents · weekly · 2026-W31
From 2026-07-27 to 2026-08-02, 7 crypto security incidents were publicly reported, with about $127.0M lost; the previous week had 14 and $58.3M, a change of +118% in losses. The largest was COLDCARD (2026-07-31, about $116.0M). By technique, "Key Compromise" accounted for the most losses: 2 incidents, $116.6M. There were no phishing, frontend-hijack or rugpull incidents; the rest happened inside wallets and contracts and call for key management and code audits.
Crypto security incidents · Monthly · Issue 1
Crypto security incidents · monthly · 2026-07
From 2026-07-01 to 2026-07-31, 38 crypto security incidents were publicly reported, with about $254.4M lost; the previous month had 36 and $86.9M, a change of +193% in losses. The largest was COLDCARD (2026-07-31, about $116.0M). By technique, "Key Compromise" accounted for the most losses: 7 incidents, $176.6M. 2 incidents ($930K) were phishing, frontend hijacks or rugpulls, which happen at the moment of payment; checking the payee address and payment URL first can stop part of them.