Crypto Hackers Stole $68 Million In May — But The Attacks Getting No Headlines Are Far More Terrifying

Blockchain safety agency CertiK recorded $68.3 million in whole crypto losses throughout May 2026 — making it the third month of the yr to fall under the $100 million threshold — however the headline quantity obscures a darker and extra private dimension to the sector’s safety disaster, as bodily assaults on crypto holders concurrently reached a tempo that no firewall can cease.

In a publish on X, CertiK noted that May’s losses represented a dramatic contraction from April’s $650 million — a month dominated by two catastrophic North Korea-linked exploits. The $68.3 million determine consists of roughly $2.6 million misplaced to phishing assaults, whereas roughly $9.4 million was recovered or returned to affected treasuries, per CertiK’s knowledge.

The month’s largest single exploit was the $11.5 million Verus-Ethereum Bridge assault on May 18, adopted by $10.1 million stolen from THORChain by means of a vault mechanism exploit. Cross-chain bridges accounted for almost 42% of whole May losses — roughly $28.6 million — whereas code vulnerabilities drove roughly $45 million, or about 66% of the overall, per CertiK.

The On-Chain Losses Are Only Part Of The Picture

The extra unsettling dimension of May’s safety atmosphere sits totally off-chain. A report revealed May 21 by Insurance Journal, written by Suvashree Ghosh and Isabelle Lee and drawing immediately on CertiK knowledge, paperwork a yr of kidnappings, assaults, and armed house invasions focusing on cryptocurrency holders that has basically reshaped how the business approaches private safety.

Physical assaults on cryptocurrency holders rose 75% in 2025, reaching 72 confirmed incidents and $41 million in recognized losses, in keeping with CertiK knowledge cited within the Insurance Journal report. The agency’s separate Skynet intelligence report recorded 34 verified bodily assaults — recognized in safety circles as “wrench assaults,” the place victims are coerced into surrendering non-public keys or pockets entry by means of drive or intimidation — inside simply the primary 4 months of 2026 alone, with estimated losses already surpassing $100 million globally, per MEXC’s reporting of the CertiK findings.

Jameson Lopp, co-founder of Bitcoin custody agency Casa, maintains a public database of such incidents that has tracked a roughly threefold enhance in recognized wrench assaults between 2023 and 2025, per the Insurance Journal report. The determine is extensively thought of understated — kidnappings and ransom calls for are continuously resolved privately and by no means publicly disclosed.

The Threat Environment Is Evolving

The business’s defensive response displays the size of the shift. According to Insurance Journal’s reporting, the Bitcoin 2026 convention in Las Vegas noticed the highest-profile audio system transfer by means of the venue with private bodyguards.

A standing-room-only workshop taught attendees find out how to shield their holdings throughout a house invasion. At Paris Blockchain Week, company have been escorted by police motorcade to a VIP dinner and organizers doubled safety across the two-day occasion.

CertiK senior blockchain investigator Natalie Newson warned that AI is accelerating the risk atmosphere — not solely by means of AI-assisted social engineering campaigns already documented in April’s North Korea-linked assaults, however by means of the broader weaponization of generative instruments in opposition to crypto builders and infrastructure suppliers. Her rapid steerage to customers: confirm each URL and good contract earlier than interacting, and transfer idle property totally off exchanges into chilly storage.

Year-to-date by means of May, the nascent sector has recorded $1.1 billion in whole losses throughout 185 tracked incidents, with North Korea-linked actors accountable for roughly $620.9 million — or 55% of all stolen worth regardless of finishing up solely 12% of incidents, per CertiK’s mid-month Skynet report. The on-chain losses are important. The bodily ones are more durable to quantify and more durable nonetheless to defend in opposition to — and the hole between the 2 risk vectors is narrowing sooner than many of the business has acknowledged.

Cover picture from Grok, BTCUSD chart from Tradingview