Coldcard Exploit Drives July Crypto Theft Total to $247M

Cryptocurrency thefts surged in July, making it the second-worst month of 2026. According to DefiLlama data, hackers stole $247.4 million in crypto, more than triple the amount stolen in June and May. The Coldcard exploit was the largest contributor to these losses, with at least $100 million in Bitcoin (BTC) stolen from 7,300 wallets across three confirmed attack waves.

Galaxy Digital identified a suspected fourth wave that could bring total losses to around $130 million. DefiLlama's hack tracker estimates losses tied to the Coldcard exploit at $115 million. Other notable July exploits included a $9 million hack against Bonzo Lend, a Cardano-based wallet SecondFi had $2.6 million stolen from it, and AFX, an Arbitrum-based perpetual exchange, lost $24 million.