Crypto hack losses jump 177% to $210M in July as Coldcard drain hits
Crypto hack losses jumped 177.2% in July to an estimated $210.3M across 30 incidents, with the biggest case tied to a Coldcard wallet drain. Researchers traced up to 1,082.59 BTC across two transaction clusters, with losses estimated near $70M. Coinkite warned users of Coldcard Mk3 firmware 4.0.1–5.0.3 to treat wallets as potentially exposed and migrate BTC due to weak seed randomness. PeckShield also ranked the Coldcard theft as the third-largest crypto hack of 2026.
Other major crypto hack losses included: AFX Trade’s Arbitrum bridge exploit (24.15M USDC) via hot-validator signature approvals, and Ostium’s oracle manipulation (raised to ~24M) using future-dated price reports to target a USDC liquidity vault. Governance and cross-chain also took hits, including BonkDAO treasury loss (~$21.2M) and the Wanchain Cardano–BNB Chain bridge incident (~$13M). For traders, this level of crypto hack losses usually increases near-term caution on custody and bridge exposure, potentially lifting volatility for affected ecosystems and liquidity, even if broader price impact depends on whether confidence and liquidity shocks persist.
Bearish
The latest update adds detailed mechanics behind the largest incidents (Coldcard seed randomness warnings, AFX validator-signature approvals on Arbitrum, and Ostium’s future-dated oracle reports). Together, these crypto hack losses reinforce a near-term risk-off trade: traders tend to reduce exposure to unproven custody setups, bridges, and oracle-heavy protocols. In the short term, affected ecosystems may see liquidity pullbacks and higher volatility as users reprice counterparty and protocol risks. Over the longer term, if migrations, fixes, and security reviews follow quickly, some capital may return, but the overall signal is still negative because the attack surface across bridges and newly launched DeFi remains active. Hence, the direct impact on the most relevant assets/venues is expected to lean bearish.