Significant Drop in Cryptocurrency Attack Losses in May 2026

Severity: Medium (Score: 51.9)

Sources: Kucoin, Chaincatcher

Published: 2026-06-01 · Updated: 2026-06-01

Keywords: million, total, losses, peckshield, cryptocurrency, hacking, decrease

Severity indicators: ot

Summary

In May 2026, cryptocurrency platform attack losses decreased to approximately $68.3 million, a 90% reduction from $650 million in April, according to CertiK data. PeckShield reported slightly higher losses of $81.7 million from 40 major hacking incidents. The largest single loss was from the Verus Protocol cross-chain bridge attack, totaling $11.5 million, while THORChain suffered $10.1 million in losses. Cross-chain bridges were the primary target, accounting for $28.6 million in losses. Phishing attacks contributed to $2.6 million in losses, with around $9.4 million in stolen funds being recovered. The data indicates that 29 incidents occurred in May, with seven involving private key compromises. This marks the third consecutive month in 2026 with losses under $100 million. Key Points: • Cryptocurrency attack losses fell to $68.3 million in May, a 90% decrease from April. • The Verus Protocol and THORChain were among the largest incidents, losing $11.5 million and $10.1 million, respectively. • Cross-chain bridges were the main target, suffering $28.6 million in losses.

Detailed Analysis

**Impact** Cryptocurrency platforms experienced a significant reduction in attack losses in May 2026, with total losses ranging between $68.3 million and $81.7 million, down approximately 87-90% from April’s $647-$650 million. The sector remains affected globally, with 29 to 40 major incidents reported, including cross-chain bridges as primary targets, accounting for 41-42% of losses (~$28.6-$33.3 million). Notable losses involved Verus Protocol ($11.5-$11.58 million), THORChain ($10-$10.1 million), and SUPERFORTUNE AI ($15.18 million). Approximately $9.4 million in stolen funds were recovered or returned. Phishing attacks caused around $2.6 million in losses, while code vulnerabilities led to $45 million in losses. **Technical Details** Attack vectors included code vulnerabilities (66% of losses), wallet or private key compromises ($13.7 million), and phishing attacks ($2.6 million). Cross-chain bridge protocols were the main target, with 7 to 8 major attacks exploiting these infrastructures. Specific TTPs, malware, CVEs, or IOCs were not detailed in the available reports. The kill chain stages primarily involved exploitation of code flaws and credential compromises. **Recommended Response** Prioritize patching and auditing of cross-chain bridge protocols and smart contract code to address vulnerabilities. Enhance private key security measures and implement multi-factor authentication to reduce wallet compromise risks. Deploy phishing detection and user awareness programs. Monitor for unusual cross-chain transaction activity and track known compromised addresses related to recent incidents. No specific IOCs were provided for direct blocking.

Source articles (2)

• May crypto platform attack losses may drop to $68.3M, 90% lower than April — Kucoin · 2026-06-01
  ChainCatcher report, according to Cointelegraph, CertiK data shows that crypto platform attack losses in May dropped to $68.3 million, a nearly 90% decline from $650 million in April. May became the t…
• PeckShield: The total loss from cryptocurrency hacking in May was $81.7 million, a decrease ... — Chaincatcher · 2026-06-01
  According to monitoring by PeckShield, there were a total of 40 major hacking incidents in the cryptocurrency sector in May, with total losses of approximately $81.7 million, a decrease of 87.4% compa…

Timeline

• 2026-05-01 — May attack losses reported: CertiK reported cryptocurrency attack losses of $68.3 million for May, a significant drop from April's $650 million.
• 2026-05-01 — PeckShield reports higher losses: PeckShield reported total losses of $81.7 million from 40 major hacking incidents in May, a decrease from April.
• 2026-05-01 — Major cross-chain attacks identified: Cross-chain protocols were targeted in 8 major attacks, resulting in $33.28 million in losses, according to PeckShield.

Related entities

• Data Breach (Attack Type)
• Phishing (Attack Type)
• Superfortune AI (Company)
• Verus-Ethereum Bridge (Company)
• Verus Protocol (Company)
• THORChain (Platform)
• T1566 - Phishing (Mitre Attack)