May crypto platform attack losses may drop to $68.3M, 90% lower than April

ChainCatcher report, according to Cointelegraph, CertiK data shows that crypto platform attack losses in May dropped to $68.3 million, a nearly 90% decline from $650 million in April. May became the third month in 2026 with losses under $100 million. Approximately $2.6 million stemmed from phishing attacks, and around $9.4 million in stolen funds have been recovered or returned. The largest single loss in May came from the Verus Protocol cross-chain bridge attack, with $11.5 million stolen; THORChain ranked second, with $10.1 million stolen. Code vulnerabilities were the highest-loss attack type, accounting for approximately $45 million, or 66%; wallet or private key compromises resulted in $13.7 million in losses. Cross-chain bridges were the primary target, suffering $28.6 million in losses, or 42%. Data from DeFiLlama shows that 29 incidents occurred in May, seven of which involved private key compromises.