July Sees $110 Million in Crypto Hack Losses Amid Rising Bug Reports

July Sees $110 Million in Crypto Hack Losses

In July 2026, crypto projects suffered significant financial losses due to hacking incidents, amounting to approximately $110 million. This alarming trend coincided with an increase in reported bugs as tracked by security platform Immunefi.

Report Highlights and Trends

Immunefi reported that a total of $2.32 million was paid out to researchers for confirmed vulnerabilities during July. Furthermore, the number of confirmed bug bounty reports increased by 18% compared to the previous month. These initiatives have successfully prevented 374 threats, reflecting a growing emphasis on enhancing security.

Major Incidents Contributing to Losses

Several notable hacking incidents during this month contributed heavily to the total losses. For instance, the crypto platform Ostium faced a loss of $23.75 million in USDC after an attacker compromised its off-chain infrastructure. Additionally, $24.15 million was lost due to a separate bridge exploit affecting AFX. Together, these attacks represented over $47 million in total losses for July.

Projected Trends for 2026

Immunefi’s data indicates that 2026 is on track to become a record-breaking year for hacking incidents. As of August 3, a total of 164 crypto hacks had already been recorded, including 67 incidents where each hack resulted in losses exceeding $1 million. Projections suggest that 114 major hacks could occur by the year’s end, surpassing the previous annual record of 72 major incidents set in 2024.

Bug Bounty Reports and Audit Findings

Immunefi noted that serious vulnerabilities were more effectively identified through audit competitions than through traditional audits. The competitive audits highlighted an average of 6.2 serious bugs per engagement, in stark contrast to an average of just 1.5 vulnerabilities found in private tier-1 audits. This disparity suggests that continuous evaluations through bug bounty programs and competitive reviews might be necessary to improve overall security.

The Role of AI and Institutional Interest

The increased frequency of bug bounty reports also aligns with advancements in artificial intelligence, which has made vulnerability reporting easier for researchers. Institutional investment in security ventures, like the recent investment by Anchorage Digital in Immunefi, further emphasizes the growing recognition of the need for robust security infrastructure in the crypto space.

In light of these developments, the crypto industry must prioritize security measures to mitigate the risk of losses associated with hacking. As the landscape continues to evolve, ongoing vigilance and proactive strategies will be essential in safeguarding assets against emerging threats.