Crypto Sector Suffers $68.3M Losses from Scams in May 2026
Severity: Medium (Score: 51.9)
Sources: Kucoin, Chaincatcher, Cryptopolitan
Published: · Updated:
Keywords: million, total, losses, peckshield, cryptocurrency, hacking, decrease
Severity indicators: ot
Summary
In May 2026, the cryptocurrency industry experienced losses totaling approximately $68.3 million due to scams and exploits, marking a significant decline of nearly 90% from April's $650 million. The losses stemmed from 60 confirmed incidents, with phishing attacks accounting for about $2.6 million. Major incidents included the Verus Protocol attack, which resulted in $11.5 million lost, and THORChain, which lost $10.1 million. The report from CertiK indicates that while large-scale attacks have decreased, risks from phishing and credential leaks are on the rise. Funds recovered during this period amounted to $9.4 million, representing about 13.7% of the total losses. The data highlights a shift in attack vectors, with code vulnerabilities being the primary target. This trend reflects a broader concern about the security landscape in the crypto sector. Key Points: • Total losses in May 2026 reached $68.3 million, a 90% drop from April. • Phishing attacks accounted for approximately $2.6 million of the losses. • The Verus Protocol and THORChain attacks were the largest incidents, causing $11.5M and $10.1M losses, respectively.
Detailed Analysis
**Impact** In May 2026, the cryptocurrency sector experienced losses totaling approximately $68.3 million across 60 confirmed incidents, marking a significant decline from April’s $547.3 million to $650 million range. The attacks affected multiple platforms, with cross-chain bridges targeted heavily, accounting for $28.6 million (42%) of losses. Major incidents included Verus Protocol ($11.5 million), THORChain ($10.1 million), and SUPERFORTUNE AI ($15.18 million), impacting DeFi and cross-chain services globally. Approximately $9.4 million in stolen funds were recovered during the month, partially mitigating the financial impact. **Technical Details** The primary attack vectors were smart contract code vulnerabilities, responsible for about 66% ($45 million) of losses, followed by wallet or private key compromises totaling $13.7 million. Cross-chain bridge exploits remained a key target, with eight major attacks causing $33.28 million in losses. Phishing attacks accounted for $2.6 million, the second-lowest monthly figure in 2026. No specific CVEs or malware tools were detailed in the reports. Attackers leveraged code flaws and credential compromises, with social engineering and insider threats noted as ongoing risks. **Recommended Response** Defenders should prioritize patching smart contract vulnerabilities and hardening cross-chain bridge security configurations. Enhanced monitoring for phishing attempts and credential leaks is critical due to rising risks targeting individuals. Deploy detections focused on anomalous bridge transactions and private key usage. Continued tracking of fund recovery efforts and coordination with law enforcement is advised. No specific IOCs were provided in the available data.
Source articles (5)
- In the first quarter of 2026, there were over 80 cyber attacks in the cryptocurrency industry ... — Chaincatcher · 2026-05-31
AML / KYT provider Shard disclosed that the number of cyber attacks in the cryptocurrency industry doubled year-on-year in the first quarter of 2026, exceeding 80 incidents, but total losses decreased… - May crypto platform attack losses may drop to $68.3M, 90% lower than April — Kucoin · 2026-06-01
ChainCatcher report, according to Cointelegraph, CertiK data shows that crypto platform attack losses in May dropped to $68.3 million, a nearly 90% decline from $650 million in April. May became the t… - PeckShield: The total loss from cryptocurrency hacking in May was $81.7 million, a decrease ... — Chaincatcher · 2026-06-01
According to monitoring by PeckShield, there were a total of 40 major hacking incidents in the cryptocurrency sector in May, with total losses of approximately $81.7 million, a decrease of 87.4% compa… - Crypto industry loses $68.3M to scams in May: Report — Cryptopolitan · 2026-06-01
The crypto industry lost approximately $68.3 million to exploits and scams across 60 confirmed incidents in May 2026, according to the latest monthly report from blockchain security firm CertiK. The f… - CertiK: Crypto security losses drop 90% to $68.3M in May 2026 — Kucoin · 2026-06-01
Odaily Planet Daily reports that blockchain security firm CertiK released data showing that the total losses in the crypto sector due to hacks, vulnerabilities, and scams in May 2026 amounted to appro…
Timeline
- 2026-05-31 — CertiK reports $68.3M losses in May 2026: The report details 60 incidents leading to significant losses, with phishing contributing $2.6 million.
- 2026-05-31 — April losses reported at $650 million: April 2026 saw unprecedented losses primarily due to two major attacks on Drift Protocol and KelpDAO.
- 2026-05-31 — Major incidents detailed: The Verus Protocol attack caused losses of $11.5 million, while THORChain lost $10.1 million.
- 2026-05-31 — PeckShield reports $81.7M losses: PeckShield noted a total of 40 major hacking incidents with losses of approximately $81.7 million.
Related entities
- Data Breach (Attack Type)
- Phishing (Attack Type)
- Operation Atlantic (Campaign)
- Bybit (Company)
- Drift Protocol (Company)
- Gravity Bridge (Company)
- Haveno/RetoSwap (Company)
- KelpDAO (Company)
- New Market Trading (Company)
- Ossie (Company)
- Shard (Company)
- StablR (Company)
- Superfortune AI (Company)
- TAC (Company)
- TrustedVolumes (Company)
- Verus (Company)
- Verus-Ethereum Bridge (Company)
- Verus Protocol (Company)
- Arbitrum (Company)
- THORChain (Platform)
- cryptopolitan.com (Domain)
- T1566 - Phishing (Mitre Attack)