Coldcard exploit pushes July losses to $247M as second-worst month of 2026

cointelegraphPublicado em 2026-08-07Última atualização em 2026-08-07

Resumo

July 2026 was the second-worst month of the year for cryptocurrency thefts, with hackers stealing $247.4 million. This surge was primarily driven by the Coldcard exploit, which involved multiple attack waves resulting in losses estimated between $100 million and $130 million in Bitcoin from thousands of wallets. This incident highlighted that even cold storage carries significant technological risks. Other major July hacks included attacks on Bonzo Lend ($9M), SecondFi ($2.6M), AFX ($24M), and the Verus Ethereum Bridge ($7.5M).

July emerged as the second-worst month of 2026 for cryptocurrency thefts, largely due to the recent Coldcard exploit.

Hackers stole $247.4 million in crypto in July, the most this year after the $644 million stolen in April, according to DefiLlama data. The total was more than triple the $75 million stolen in June and the $60 million stolen in May.

The Coldcard exploit was the month’s biggest exploit, with at least $100 million in Bitcoin (BTC) stolen from 7,300 wallets across three confirmed attack waves, according to Galaxy Digital. The company also identified a suspected fourth wave that could bring total losses to about $130 million. DefiLlama’s hack tracker estimates losses tied to the Coldcard exploit at $115 million.

“July showed that even cold storage does not eliminate technological risks, which can put thousands of wallets at risk simultaneously,” research platform CryptoRank said in a Thursday X post.

Other notable July exploits included a $9 million hack against decentralized finance protocol Bonzo Lend, $2.6 million stolen from Cardano-based wallet SecondFi, $24 million stolen from Arbitrum-based perpetual exchange AFX and $7.5 million stolen through the Verus Ethereum Bridge.

Magazine: Inside the ‘fake police raid’ that forced a $1M Bitcoin transfer

Perguntas relacionadas

QAccording to the article, what made July 2026 the second-worst month for cryptocurrency thefts?

AJuly 2026 became the second-worst month for cryptocurrency thefts largely due to the recent Coldcard exploit, which was the month's biggest exploit.

QHow much cryptocurrency was stolen in July 2026, and how does this compare to the thefts in May and June of the same year?

AHackers stole $247.4 million in crypto in July 2026. This total was more than triple the $75 million stolen in June and the $60 million stolen in May.

QWhat was the estimated loss range from the Coldcard exploit according to the information provided by Galaxy Digital?

AAccording to Galaxy Digital, the Coldcard exploit resulted in at least $100 million stolen from 7,300 wallets across three confirmed attack waves, with a suspected fourth wave potentially bringing total losses to about $130 million.

QWhat point did research platform CryptoRank make about the Coldcard exploit in their statement?

ACryptoRank stated that the July exploits showed that even cold storage does not eliminate technological risks, which can put thousands of wallets at risk simultaneously.

QBesides the Coldcard exploit, name two other significant hacks that occurred in July 2026 as mentioned in the article.

ATwo other significant July 2026 exploits mentioned are: a $9 million hack against decentralized finance protocol Bonzo Lend, and a $24 million theft from Arbitrum-based perpetual exchange AFX.

Leituras Relacionadas

Footage of the detention of employees of fraudulent crypto exchanges in Moscow published

Russian security services (FSB) have detained over 20 employees of cryptocurrency exchange offices in Moscow City. These offices were allegedly used by Ukrainian call centers to launder money stolen from Russian citizens. The detainees were forced to work as freelance employees after being deceived. In one case, a victim was falsely informed by fraudsters posing as Russian authorities that a power of attorney was issued in his name. To cancel it, he was told to withdraw all his money and then work as an "external employee" to help detain other fraudsters. The man admitted to acting on instructions from individuals claiming to be from Rosfinmonitoring and the FSB. Other detainees described meeting clients, accepting and counting cash, converting it to cryptocurrency, and transferring it to specified crypto wallets. One claimed the exchange handled about 30 clients daily with a turnover reaching $1-2 million, while another estimated the average money turnover could reach $30 million. The FSB reported shutting down nine channels for transferring funds abroad via cryptocurrency. The victims, including pensioners, were constantly in contact with the call center, followed step-by-step instructions, and were unaware of the illicit nature of their actions. Young people from Russian regions with low financial literacy, seeking easy money, were recruited remotely to work in these crypto exchanges.

cryptonews.ruHá 24m

Footage of the detention of employees of fraudulent crypto exchanges in Moscow published

cryptonews.ruHá 24m

Trading

Spot
活动图片