Coldcard exploit drives July crypto thefts to $247M

July was the second-worst month of 2026 for cryptocurrency thefts, with losses reaching $247 million, largely due to the Coldcard exploit.

Coldcard exploit drives July crypto thefts to $247M

DOGE

$0.06939

0.78%

TRX

$0.3271

0.02%

LINK

$8.21

0.26%

ZEC

$505.37

0.17%

ADA

$0.2016

6.66%

XRP

$1.03

2.37%

ETH

$1,909.38

0.22%

BTC

$64,583.56

0.48%

XMR

$371.11

1.81%

BNB

$587.95

1.24%

XLM

$0.1620

0.03%

SOL

$73.16

1.06%

HYPE

$56.25

0.22%

Written by

Zoltan Vardai

staff writer

Reviewed by

Yohan Yun

staff editor

Written by

Zoltan Vardai

staff writer

Reviewed by

Yohan Yun

staff editor

Coldcard exploit pushes July losses to $247M as second-worst month of 2026

Latest News

Published

Aug 7, 2026

The Coldcard exploit, which caused more than $100 million in losses, helped push July crypto thefts to $247 million, making it the second-worst month of 2026.

July emerged as the second-worst month of 2026 for cryptocurrency thefts, largely due to the recent Coldcard exploit.

Hackers stole $247.4 million in crypto in July, the most this year after the $644 million stolen in April, according to DefiLlama

data

. The total was more than triple the $75 million stolen in June and the $60 million stolen in May.

The

Coldcard exploit

was the month’s biggest exploit, with at least $100 million in Bitcoin (BTC) stolen from 7,300 wallets across three confirmed attack waves, according to Galaxy Digital. The company also identified a

suspected fourth wave

that could bring total losses to about $130 million. DefiLlama’s hack tracker estimates losses tied to the Coldcard exploit at $115 million.

“July showed that even cold storage does not eliminate technological risks, which can put thousands of wallets at risk simultaneously,” research platform CryptoRank said in a Thursday X

post

.

Other notable July exploits included a

$9 million hack

against decentralized finance protocol Bonzo Lend,

$2.6 million stolen

from Cardano-based wallet SecondFi,

$24 million stolen

from Arbitrum-based perpetual exchange AFX and $7.5 million stolen through the Verus Ethereum Bridge.

Magazine:

Inside the ‘fake police raid’ that forced a $1M Bitcoin transfer

Subscribe to daily byte-sized crypto news from Cointelegraph

Subscribe

Cointelegraph is committed to independent, transparent journalism. This news article is produced in accordance with Cointelegraph’s

Editorial Policy

and aims to provide accurate and timely information. Readers are encouraged to verify information independently.

Hackers

Hacks

Scams

DeFi

Bitcoin Wallet

Hardware Wallet

Scams & Cybercrime

More on the subject

Crypto wrench attacks steal more than $30M so far in 2026: Chainalysis

20 hours ago

Ezra Reguerra

Coldcard hackers transfer 64 BTC and 200 ETH to cryptocurrency mixers

21 hours ago

Zoltan Vardai

EU watchdogs warn of impersonation scams amid MiCA licensing shakeout

Aug 6, 2026

Ezra Reguerra

News Brief

Crypto wrench attacks steal more than $30M so far in 2026: Chainalysis

20 hours ago

Ezra Reguerra

Coldcard hackers transfer 64 BTC and 200 ETH to cryptocurrency mixers

21 hours ago

Zoltan Vardai

EU watchdogs warn of impersonation scams amid MiCA licensing shakeout

Aug 6, 2026

Ezra Reguerra

News Brief