Cold card exploits resulted in $247 million in cryptocurrency losses in July

In July 2026, the cryptocurrency security landscape saw the second-most significant month of the year. According to DefiLlama data, the total amount of cryptocurrency stolen in July reached $247.4 million, making it the second-largest monthly loss of the year, following April, which saw losses of $644 million. This figure represents a more than threefold increase compared to May ($60 million) and June ($75 million), clearly illustrating the rapid expansion of hacking incidents during July. The primary event driving these losses in July was the ColdCard exploit. ColdCard is a cryptocurrency hardware wallet product that, despite its cold storage nature and isolation from the internet, became a target for large-scale hacking. According to an analysis by Galaxy Digital, at least $100 million worth of Bitcoin (BTC) was stolen from 7,300 wallets through three confirmed attack waves. Galaxy Digital also suggested the possibility of a fourth suspected attack wave, which, if confirmed, could bring the total losses to approximately $130 million. DefiLlama's hacking tracker estimates the losses due to the ColdCard exploit at $115 million. The research platform CryptoRank, through an official post on X (formerly Twitter)