In June, crypto hackers stole approximately $75.9 million across 40 major incidents, marking a 7.1% decrease from May’s $81.7 million, according to PeckShield.
The largest incident of the month was the hack of Humanity Protocol, resulting in a $31 million loss. Following an investigation, the protocol’s team estimated the damage closer to $36 million, as reported by The Block. Project founder Terence Kwok attributed the hack to a compromised private key. Experts from Quantstamp suggested North Korean hackers might be involved, citing several characteristic indicators.
The second-largest incident was an attack on Syscoin Bridge, with losses of $10 million. According to the company, a validation mechanism error allowed the attacker to issue billions of unbacked SYS tokens without the corresponding burn.
PeckShield also noted the hack of an MEV bot associated with the address JaredFromSubway.eth, resulting in $7.5 million in losses.
The list of major incidents in June also included Secret Network, users of Polymarket, SecondFi, and TESSERA, with losses ranging from $2.4 million to $4.67 million.
PeckShield highlighted two attacks on outdated Aztec infrastructure. The damage to Aztec Bridge was estimated at $2.16 million, and Aztec Connect at another $2.1 million, totaling around $4 million. These involved immutable contracts that developers can no longer control or pause.
The top 10 incidents in June also included Taiko Bridge ($1.7 million), Token of Power ($1.58 million), Raydium ($1.34 million), and the LABUBU/OLPC pool on PancakeSwap ($1.1 million).
According to PeckShield, the funds stolen from Humanity Protocol were laundered through Bitcoin, Solana, Hyperliquid, and BNB Chain. Some assets were mixed with funds linked to the April KelpDAO exploit. The company suggested that the same actor might be behind both attacks.
Earlier, in the second quarter of 2026, the industry set a record for the number of hacks, with 83 incidents. The total damage amounted to $755.3 million, according to Unfolded.
