← Editorial Bitcoin

Coldcard Exploit Pushes July Crypto Theft Losses to $247.4 Million

The Coldcard hardware wallet exploit, which resulted in over $100 million in stolen Bitcoin, helped make July 2026 the second-worst month of the year for cryptocurrency theft.

· -7

Cryptocurrency theft in July 2026 totalled $247.4 million, making it the second-worst month of the year after April's $644 million in stolen assets, according to DefiLlama data. The July figure more than tripled the amounts stolen in the preceding months, with $75 million lost in June and $60 million in May.

The Coldcard exploit dominated July's theft landscape. Galaxy Digital identified at least $100 million in Bitcoin stolen across 7,300 wallets in three confirmed attack waves, with a suspected fourth wave potentially bringing total losses to approximately $130 million. DefiLlama's tracker estimates Coldcard-related losses at $115 million.

Other significant July breaches included a $24 million theft from the Arbitrum-based perpetual exchange AFX, a $9 million exploit against the DeFi protocol Bonzo Lend, $7.5 million stolen via the Verus Ethereum Bridge, and $2.6 million taken from the Cardano-based SecondFi wallet. Research platform CryptoRank noted that the Coldcard incident demonstrated that cold storage does not eliminate technological risks that can simultaneously affect thousands of wallets.

How this piece reads Sell tone -7
Site call on Bitcoin Buy score 37.2

These two are not the same thing, and one does not produce the other. The left is how this single article reads, from its tone alone. The right is the site’s own call on the asset, from indicators and analysis. Press tone feeds no score and no signal: on the only corpus this site has measured, daily tone tracked the move that had already happened and showed no measurable link with what followed.

More on Bitcoin All pieces →

Rewritten from the headline, the teaser and the one-line summary the qualification step produced — that is all the material there is, and nothing is added to it. The source link is kept on file so any item can be checked, and is not published here.