Crypto hacks and exploits totaled $75.9 million across 40 major incidents in June, down 7.1% from $81.7 million in May, according to blockchain security firm PeckShield. The largest June incident involved Humanity Protocol, with losses estimated between $31 million and $36 million due to a compromised private key. The decline from May offered limited relief as losses remained spread across bridges, private-key compromises, bots, and deprecated infrastructure, part of a year-to-date 2026 total exceeding $750 million driven largely by two major North Korea-linked attacks in April.
Humanity Protocol Lost $31-36 Million Through Compromised Private Key
The Humanity Protocol exploit accounted for the largest share of June's losses. Onchain analyst Specter first reported that wallets connected to the project had drained more than $31 million on June 9. PeckShield put the exploit at $31 million, while the project's own investigation later placed losses closer to $36 million. Founder Terence Kwok attributed the breach to a compromised private key.
Syscoin Bridge and JaredFromSubway.eth Bot Recorded Second and Third Largest Losses
Syscoin Bridge recorded the second-largest June loss, with $10 million stolen through a validation flaw. PeckShield said the weakness allowed an attacker to mint billions of unbacked SYS tokens without a corresponding burn. A bot tied to the address JaredFromSubway.eth was also exploited for $7.5 million. The address is known for running MEV sandwich attacks.
Other larger June incidents included Secret Network, Polymarket users, SecondFi, and TESSERA, with losses ranging from $2.4 million to $4.67 million. Rounding out the top 10 were Taiko Bridge at $1.7 million, Token of Power at $1.58 million, Raydium at $1.34 million, and LABUBU/OLPC at $1.1 million.
Aztec Deprecated Infrastructure Hit Twice for Combined $4 Million
Aztec's deprecated infrastructure was hit twice in June. PeckShield tracked $2.16 million in losses from what it labeled the Aztec Bridge and another $2.1 million from Aztec Connect. Both were immutable contracts that the Aztec Foundation says it no longer controls or can pause. Combined, the 2 attacks cost roughly $4 million.
Exploiter Laundered Humanity Protocol Funds Across Four Blockchains
PeckShield said the Humanity Protocol exploiter laundered stolen funds across Bitcoin, Solana, Hyperliquid, and BNB Chain. Some proceeds were also commingled with funds tied to the separate Kelp DAO exploiter, a pattern the firm said raises the possibility that the same threat actor may be behind both attacks.
The broader 2026 backdrop remains severe. Crypto hacks and exploits have cost the industry well over $750 million so far this year, driven largely by 2 major North Korea-linked attacks in April, according to blockchain intelligence firm TRM Labs. Drift Protocol lost $285 million on April 1 after attackers spent months socially engineering their way into the Solana protocol's governance signers. Kelp DAO's LayerZero bridge was drained of $292 million on April 18 through a compromised verifier network.
FAQ
What caused the largest crypto hack in June?
The Humanity Protocol exploit was the largest June incident, with losses between $31 million and $36 million. Founder Terence Kwok attributed the breach to a compromised private key. Onchain analyst Specter first reported the wallet drains on June 9.
How much did crypto hacks cost the industry in June?
Crypto hacks and exploits totaled $75.9 million across 40 major incidents in June, down 7.1% from $81.7 million in May, according to blockchain security firm PeckShield. The year-to-date 2026 total exceeds $750 million.
What happened to Aztec's deprecated infrastructure in June?
Aztec's deprecated infrastructure was hit twice in June. PeckShield tracked $2.16 million in losses from the Aztec Bridge and another $2.1 million from Aztec Connect. Both were immutable contracts that the Aztec Foundation says it no longer controls or can pause.
