July: A Costly Month for Crypto Security
According to cybersecurity company Nominis, July alone saw approximately $242 million lost in 28 major crypto hacks and exploits. This makes July one of the most financially damaging months for the sector this year.
The most significant single incident stemmed from a five-year-old firmware vulnerability impacting Coldcard hardware wallets produced by Coinkite. This flaw led to roughly $116 million in losses, nearly half of the total for the month. The remaining 27 attacks together caused an estimated $126 million in damages.
2026 Crypto Losses Surpass $1.6 Billion
Nominis also reported that, in the first seven months of 2026, high-profile security incidents have resulted in $1.65 billion in total losses. The month-by-month data illustrates the ongoing threats facing digital asset holders and service providers:
January recorded approximately $385 million in losses, followed by $49.3 million in February. March brought about $178.1 million, April saw a staggering $606.7 million, with May tallying $124.9 million, June $62.2 million, and July $242 million.
April stands out as the most damaging month to date, primarily due to major attacks targeting Kelp DAO and Drift Protocol. These two security breaches alone accounted for roughly $578 million, representing about 95% of all losses in April, according to Nominis.
April’s heavy losses were driven by the $293 million Kelp DAO exploit and a $285 million attack on Drift Protocol, which together comprised almost all of the month’s total hacks and breaches.
Adoption of Web3 Market Solutions
As cryptocurrency security incidents continue to mount, investors and institutions are increasingly looking for safer and more direct ways to manage digital and real-world assets. While technical breaches and rapid asset movements pose ongoing risks, a significant trend is emerging outside of hacker activity. Wall Street has begun embracing Web3 solutions, enabling investors to hold shares of leading US companies, gold, and silver in their crypto wallets. By tokenizing real-world assets and using platforms like 1stepSwap to automatically secure the most competitive market prices, investors can bypass traditional intermediaries and potentially reduce exposure to centralized vulnerabilities.