Coldcard Exploit Drives July Crypto Thefts to $247M, Second-Worst Month of 2026
July 2026 saw $247.4M in crypto thefts, the year's second-worst month after April's $644M loss. The Coldcard exploit alone drained over $100M in Bitcoin from 7,300 wallets. Other major hacks hit Bonzo Lend, AFX, and verusETH bridge, underscoring persistent security risks.
Quick Take
July crypto losses hit $247.4M, triple June and May combined.
Coldcard exploit stole over $100M BTC from 7,300 wallets via multiple attack waves.
Additional hacks hit Bonzo Lend ($9M), AFX ($24M), and SecondFi ($2.6M).
Cold storage not immune to tech risks, says CryptoRank.
Market Impact Analysis
BearishMassive exploits erode trust in crypto security, potentially triggering short-term sell pressure and increased risk aversion.
Speculation Analysis
Key Takeaways
- July 2026 crypto thefts reached $247.4 million, the second-highest monthly figure of the year behind April’s $644 million.
- The Coldcard hardware wallet exploit accounted for at least $100 million in Bitcoin stolen across 7,300+ wallets in multiple attack waves.
- Hacks on Bonzo Lend ($9M), AFX ($24M), SecondFi ($2.6M), and the Verus Ethereum Bridge ($7.5M) added to the tally.
- CryptoRank warned that cold storage does not eliminate technological risks, which can endanger thousands of wallets simultaneously.
What Happened
July 2026 recorded $247.4 million in crypto thefts, making it the second-worst month of the year after April’s $644 million haul. The spike was primarily caused by a vulnerability in Coldcard hardware wallets, which allowed attackers to drain over $100 million in Bitcoin from thousands of users. The exploit unfolded in multiple waves, with a suspected fourth wave potentially pushing losses to $130 million. Separate hacks on DeFi protocols Bonzo Lend and AFX, along with the Verus Ethereum Bridge, pushed the month’s total even higher. The incidents reignite concerns over security across both hot and cold storage solutions.
The Numbers
July’s $247.4 million theft figure was more than triple the $75 million stolen in June and $60 million in May. The Coldcard exploit alone accounted for at least $100 million, though Galaxy Digital’s tally of 7,300 affected wallets and a potential fourth wave suggest the final toll could reach $130 million. DefiLlama’s tracker estimates Coldcard losses at $115 million. Other notable exploits included $24 million from Arbitrum-based AFX, $9 million from Bonzo Lend, $2.6 million from Cardano’s SecondFi, and $7.5 million from the Verus bridge. Combined, these smaller hacks added $43.1 million to the month’s damage.
Why It Happened
The Coldcard exploit stemmed from an undisclosed vulnerability that let attackers compromise thousands of wallets. Unlike hot wallet hacks, this breach targeted hardware devices often considered the gold standard for security. The incident proves that even cold storage carries technological risks, as one flaw can simultaneously expose many wallets. The prevalence of DeFi exploits—like those on Bonzo Lend and AFX—reflects ongoing smart contract risks and the challenge of auditing complex code. July’s losses highlight how both infrastructure and application layers remain vulnerable.
Broader Impact
The Coldcard breach may shake confidence in hardware wallets, potentially sparking a shift toward multi-signature setups or alternative custody models. Expect increased scrutiny from regulators on device manufacturers and their security practices. Short-term, the thefts could add selling pressure if stolen funds are liquidated on exchanges, contributing to bearish sentiment. For the industry, it’s a reminder that no solution is perfectly safe without constant vigilance and rigorous auditing.
What to Watch Next
- Coldcard’s official post-mortem and any patches for the exploited vulnerability.
- Movement of stolen funds—whether they are sent to mixers or exchanges could signal intent to cash out.
- Potential lawsuits or class actions against Coldcard’s manufacturer, setting a precedent for hardware wallet liability.
This article is for informational purposes only and does not constitute financial advice.
Always late to trends?
Join for the latest news, insights & more.
Disclaimer: Bytewit is an independent media outlet that delivers news, research, and data.
© 2026 Bytewit. All Rights Reserved. This article is for informational purposes only.
