PeckShield did not identify the victims.
Attacks continue to persist
According to Nominis, crypto attackers stole approximately $242 million across 28 major security incidents in July. This makes it one of the heaviest months for crypto losses this year.
The largest contributor was a five-year-old firmware vulnerability affecting Coinkite’s Coldcard hardware wallets. It accounted for roughly $116 million, or nearly half of the month’s total losses. The remaining 27 attacks resulted in about $126 million in losses.
According to Nominis, major crypto security incidents resulted in approximately $1.65 billion in losses during the first seven months of 2026.
The monthly figures are approximately: January $385 million, February $49.3 million, March $178.1 million, April $606.7 million, May $124.9 million, June $62.2 million, and July $242 million.
April was by far the worst month due to the Kelp DAO and Drift attacks. July was the second-heaviest month at approximately $242 million. The Coldcard firmware exploit accounting for roughly $116 million.
The biggest crypto attack of 2026 so far is the aforementioned Kelp DAO exploit, which resulted in approximately $293 million in losses in April. It narrowly surpassed the $285 million Drift Protocol attack earlier that month.
The Kelp DAO and Drift attacks together accounted for roughly $578 million, or about 95% of all crypto losses recorded by Nominis in April.