July Crypto Theft Spike Hits $247M Amid Coldcard Exploit

Cryptocurrency thefts in July reached $247.4 million, making it the second-worst month of 2026 after April's losses of $644 million, according to DefiLlama data.

The Coldcard exploit was the biggest contributor to these losses, with at least $100 million in Bitcoin (BTC) stolen from 7,300 wallets across three confirmed attack waves, as reported by Galaxy Digital. The company also identified a suspected fourth wave that could bring total losses to about $130 million.

DefiLlama's hack tracker estimates losses tied to the Coldcard exploit at $115 million. Other notable July exploits included a $9 million hack against decentralized finance protocol Bonzo Lend, $2.6 million stolen from Cardano-based wallet SecondFi, $24 million stolen from Arbitrum-based perpetual exchange AFX and $7.5 million stolen through the Verus Ethereum Bridge.