Crypto exploit loss don drop to $68M for May, bridges still na di biggest risk
Crypto exploit losses drop well down to about $68M for May, from around $650M in April, CertiK data show. Most loss waka because code get vulnerabilities, wey make up about 66% (roughly $45M) of the month total.
By sector, cross-chain bridges carry the biggest share: 42%, or $28.6M. The biggest single hit na happen May 18 for Verus Protocol cross-chain bridge exploit, wey thieves comot $11.5M. THORChain follow with about $10.1M after mid-May attack wey make the protocol halt trading.
Wallet and private-key compromise na the next big driver, $13.7M na waka comot like that. CertiK/DeFiLlama signal almost 30 incidents for May, including seven wey involve private-key exposure. Two later cases on May 30 na Alephium Bridge (~$815K) and Gravity Bridge (~$5.4M).
Phishing small part: $2.6M na attributed to phishing, while about $9.4M dem recover or return. CertiK also talk say May be the third straight month for 2026 wey total losses under $100M.
Separate, the report show new threat: AI-assisted malware development, where attackers dey target code repositories and dey try manipulate AI coding assistants make dem do bad actions—this one fit widen risk beyond normal smart-contract exploits.
For traders, market sign mixed: crypto exploit losses better than April, but bridge risk and key-compromise still dey, and AI-enabled tooling fit raise tail risk later.
Neutral
Crypto exploit losses don improve compared to April (headline losses don sharply drop), we fit support sentiment for the wider DeFi and exchange ecosystem short-term. But the make-up of losses still dey concentrated for bridge infrastructure (42%) and key/private-key compromises (US$13.7M), meaning the main failure ways for on-chain interoperability and custody security still dey. The additional risk flag—AI-assisted malware wey dey target code repositories—add uncertainty to the longer-term threat landscape. Overall, this one more like risk-monitoring signal than direct driver for sustained price repricing for any single listed coin.