Crypto Hacks Hit 2026 Record With 50 Attacks as Losses Fall 49% to $136M

Currencies38982
Market Cap$ 2.70T-0.93%
24h Spot Volume$ 32.82B-4.11%
DominanceBTC57.56%-0.35%ETH10.86%-0.37%
ETH Gas0.22 Gwei
Sep 1, 2026
3min read
byMaya Bennett
forCoinpaper

August recorded 50 major crypto hacks, a 67% increase from July’s 30, but total losses fell 49.5% month-over-month to about $136.3M and average loss dropped to roughly $2.7M from ~$9M. The losses were concentrated — Tectonic’s Cronos exploit accounted for about $74M (the attacker moved ~ $6M to Ethereum before Cronos validators froze and restored the chain) and the top ten incidents made up ~$123.34M — while attacks across DeFi lending, wallets and oracle/collateral manipulation (Moonwell ~$8.7M, Coinsbuy ~$7.9M) point to a broader, evolving security risk for protocols and exchanges.

See what traders are focused on

Crypto suffered its busiest hacking month of 2026 in August, but the explosion in attack frequency did not translate into record financial damage.

Blockchain security firm PeckShield counted 50 major crypto hacks during August, up 67% from 30 incidents in July and the highest monthly total this year. Yet combined losses fell 49.5% month over month to approximately $136.3 million, according to data published Sept. 1.

The contrast suggests attackers succeeded more often but generally walked away with smaller amounts. Average losses dropped to roughly $2.7 million per incident, compared with about $9 million during July.

That makes August unusual: it was the year’s worst month by number of major hacks, but nowhere near the costliest by dollars stolen.

Tectonic Accounts for More Than Half of August Losses

One exploit dominated the monthly total.

Tectonic, the largest lending protocol on Cronos, reportedly lost around $74 million, accounting for more than half of all crypto losses recorded during August. The incident ranks as the fourth-largest crypto theft of 2026 so far.

The attacker managed to move only around $6 million to Ethereum before Cronos validators froze the network. Cronos later restored the chain to a state before the attack and resumed block production, limiting the exploiter’s ability to move more of the stolen assets.

The concentration is striking. PeckShield’s ten largest incidents accounted for approximately $123.34 million of August’s $136.3 million total, leaving only about $12.9 million spread across the other 40 major hacks.

Coinpaper separately covered the $8.7 million Moonwell exploit, where manipulated MAMO collateral allowed an attacker to drain assets from lending markets on Base.

The $7.9 million Coinsbuy incident involved wallets on Ethereum and TRON, with portions of the stolen funds quickly routed through exchanges and toward Monero.

August Breaks the Hack-Count Record, Not the Loss Record

August’s 50 attacks surpassed every previous month of 2026.

PeckShield recorded 40 incidents in each of April, May and June, while January, February and March saw 16, 15 and 20 respectively.

The figures also underscore why “record hack month” can be misleading without context.

April remains the costliest month of 2026, with approximately $646.9 million lost, largely because the Drift and KelpDAO incidents alone accounted for around $577 million.

Coinpaper’s previous July hack report likewise showed how a smaller number of high-value incidents can produce a much larger monthly loss figure.

Smaller Attacks Are Becoming the Bigger Pattern

The August data therefore point to a changing security problem.

Rather than a month defined solely by one catastrophic protocol failure, attacks were spread across lending platforms, wallets, infrastructure and other crypto services.

Recent incidents have also exposed very different attack surfaces. Moonwell’s losses involved oracle and collateral-price manipulation, while Coinsbuy appeared to involve compromised wallets. Earlier attacks have exploited governance systems and hardware-wallet vulnerabilities.

That diversity makes raw loss totals only part of the picture.

August may have cost the industry less than July, but 50 successful major incidents in a single month suggest crypto security teams are confronting a wider and more persistent attack surface, even when hackers are extracting less money from each individual breach.

Source: cryptorank.io