Coldcard Exploit Drives July Cryptocurrency Theft Losses to $247 Million
A critical Coldcard wallet vulnerability led to over $100 million in Bitcoin losses, making July the second-worst month of 2026 for cryptocurrency theft.
July’s Devastating Theft Surge
July 2026 proved to be an exceptionally challenging month for cryptocurrency security, with digital asset thefts reaching $247.4 million, establishing it as the second-most severe loss month in 2026. According to DefiLlama’s tracking data, only April surpassed this figure with $644 million in stolen cryptocurrencies. The monthly theft volume represents a significant escalation compared to the preceding months, with June experiencing $75 million in losses and May tallying $60 million—making July’s losses roughly three times higher than the previous two months combined.
The Coldcard Exploit’s Significant Impact
A substantial portion of July’s theft damage originated from a critical vulnerability affecting Coldcard wallets. Security researchers at Galaxy Digital documented that attackers compromised approximately 7,300 wallets across three distinct attack phases, resulting in over $100 million in Bitcoin losses. The firm’s analysis suggests a potential fourth assault wave that could bring total exposure to approximately $130 million. An independent assessment by DefiLlama quantifies losses from this particular exploit at $115 million, underscoring the breach’s magnitude within the broader cryptocurrency security landscape.
Broader Threats to Cryptocurrency Holders
Beyond the Coldcard incident, July witnessed numerous other security failures affecting cryptocurrency protocols and platforms. The Bonzo Lend protocol suffered a $9 million exploit, while the Cardano-based SecondFi wallet platform experienced a $2.6 million breach. The Arbitrum-based AFX perpetual trading platform lost $24 million to attackers, and the Verus Ethereum Bridge incurred $7.5 million in theft. Analysts from CryptoRank emphasized that the Coldcard situation illustrates how technological vulnerabilities can persist even within cold storage solutions, simultaneously endangering substantial numbers of wallet holders. The research firm stressed that cold storage alone does not eliminate technological risk exposure across the cryptocurrency ecosystem.
These recurring security incidents underscore why robust custody infrastructure and continuous blockchain security innovation remain essential for the cryptocurrency market’s institutional adoption and long-term maturation.
Source: DefiLlama, via Cointelegraph. Not financial advice.