Crypto Scams and Hacks Surge to $370M in January: CertiK

TheNewsCryptoPublished on 2026-02-02Last updated on 2026-02-02

Abstract

In January, cryptocurrency scams and hacks surged to $370.3 million, marking the highest monthly loss in 11 months and a fourfold increase from January of the previous year. The majority of the stolen funds came from a single social engineering scam that resulted in a $284 million loss. Phishing attacks accounted for over $311.3 million of the total. The month's largest incidents included a $28.9 million hack on Step Finance, a $26.4 million exploit of the Truebit protocol due to a smart contract bug, and a $13.3 million attack on SwapNet. Overall, 16 major hacks were recorded, causing $86.01 million in losses—a slight decrease from the previous year but a 13% rise from December. The figures represent a 214% increase from December's losses and highlight a significant escalation in crypto security breaches.

The total value of stolen cryptocurrencies via exploits and scams extended to $370.3 million last month, the biggest monthly figure hit in 11 months and around a fourfold increase from January of last year.

CertiK, the biggest Web3 security service provider, stated on January 31 that out of 40 scam incidents that happened in January, the major portion of the total value stolen came from one victim that lost about $284 million because of a social engineering scam.

Around over $370 million stolen was accounted for by phishing scams, which stole over $311.3 million over the month. This month’s figure is the biggest loss, followed by the Bybit hack in February 2025.

In February 2025, the hackers swept off around $1.5 billion overall over the month, a major portion of which came from the $1.4 billion hack on crypto exchange Bybit. The recent amount marks over a 277% surge from January 2025, when attackers swept in and stole $98 million.

The Biggest Surge

CertiK also mentioned that it is also a 214% surge from December, witnessing $117.8 million lost to crypto theft. The blockchain security and data analytics company, PeckShield, revealed on February 1 that the hack of Step Finance in the last month of January was the biggest for the month.

Attackers swept $28.9 million in the attack on the decentralised finance portfolio tracker, where a lot of its treasury wallets were risked, having over 261,000 Solana (SOL) taken. After this, the biggest exploit for the month was the $26.4 million attack on the Truebit protocol on January 8, when a bug in a smart contract permitted an attacker to mint tokens almost for free. This also banged the price of the Truebit (TRU) token.

PeckShield also highlighted the $13.3 million hack on liquidity provider SwapNet on January 26 and the $7 million hack against the blockchain protocol Saga on January 21. The firm mentioned that there were around 16 hacks overall in January, equating to $86.01 million in losses, a 1.42% fall from a year ago, but over a 13% rise from December.

Highlighted Crypto News Today:

CrossCurve Bridge Exploit Exposes $3 Million Loss in Cross-Chain Security Breach

TagsCertiKHackScam

Related Questions

QWhat was the total value of stolen cryptocurrencies in January according to CertiK?

A$370.3 million

QWhich single incident accounted for the majority of the stolen funds in January?

AA social engineering scam that resulted in a loss of about $284 million to one victim.

QWhat was the most significant hack prior to January's surge, as mentioned in the article?

AThe Bybit hack in February 2025, where approximately $1.4 billion was stolen.

QAccording to PeckShield, which was the largest individual hack incident in January?

AThe $28.9 million hack of Step Finance.

QWhat type of attack was responsible for the majority of the stolen funds in January?

APhishing scams, which stole over $311.3 million.

Related Reads

Three Consecutive Quarters of Decline: The Crypto Market is Experiencing Its Longest Ebb Since 2022

The cryptocurrency market experienced its third consecutive quarterly decline in Q2 2026, marking its longest downturn since 2022, according to a CoinGecko report. The total market capitalization fell 12.6% to $2.1 trillion, a retreat of roughly 52% from its October 2025 peak. Multiple indicators signal an orderly capital exit from the sector. For the first time since Q3 2023, the total stablecoin market cap shrank (-1.6% to $305.1B), indicating funds are leaving the ecosystem entirely, not just rotating to safer crypto assets. Trading volumes on centralized exchanges dropped 27.9%, while DeFi's Total Value Locked (TVL) plummeted 23.4%. Both Bitcoin (-14.2%) and Ethereum (-25.4%) underperformed traditional risk assets like equities in Q2, breaking from previous correlative narratives. Ethereum saw its first-ever three-quarter losing streak, with its market share falling to around 10%. A few areas saw growth. Prediction market volumes surged 48.7%, largely driven by sports betting. Hyperliquid's HYPE token entered the top 10 by market cap, and tokenized collectibles platforms grew, though primarily via gamified mechanics. Despite a ~9.8% Bitcoin rebound in July, historical trends suggest caution for August. The market, now ~49% below its 2025 high, is undergoing a measured retreat. Its recovery hinges on future Federal Reserve policy and the industry's ability to develop sustainable revenue streams beyond speculation.

marsbit9m ago

Three Consecutive Quarters of Decline: The Crypto Market is Experiencing Its Longest Ebb Since 2022

marsbit9m ago

Insurance Agent in Hong Kong Loses Over $3.3 Million Due to 'Romantic' Crypto Scam

An experienced Hong Kong insurance agent fell victim to a "romance scam" involving fake crypto investments, losing over HK$26 million (approximately US$3.3 million), according to local police. Authorities reported 25 similar cases of online romance-linked investment fraud in just one week in late July, with total losses nearing HK$70 million. The scam began when an acquaintance introduced the victim to a woman seeking insurance advice. The woman later connected him via WhatsApp to a man nicknamed "Uncle," who claimed to sell cars. Over time, "Uncle" built trust and an online romantic relationship with the victim. He then claimed to have successful investment experience and persuaded the victim to invest in cryptocurrencies, directing him to install a fake crypto investment platform app and introducing a person posing as the platform's owner to "help" manage a crypto wallet. Over roughly six months, the victim personally handed over more than HK$4 million in cash across various Hong Kong locations and transferred nearly HK$22 million to bank accounts provided by the scammers. Suspicion only arose when the fake app showed returns exceeding 800% and withdrawal attempts were blocked. Subsequently, both the "romantic partner" and the supposed expert cut off all contact. Police emphasized that even financially experienced individuals can be defrauded when scammers use emotional pressure and gradually build trust.

cryptonews.ru41m ago

Insurance Agent in Hong Kong Loses Over $3.3 Million Due to 'Romantic' Crypto Scam

cryptonews.ru41m ago

Trading

Spot
活动图片