Crypto hack losses drop 90% to $68.3M in May, CertiK says

Code vulnerabilities were responsible for the bulk of the damage in May — roughly 66% of the month’s total losses, or about $45 million. That breakdown, drawn from data released by blockchain security firm CertiK, came alongside broader figures showing that overall crypto exploit losses fell to $68 million last month, down sharply from $650 […]

On-chain traces show the DPRK-linked attacker behind April's $292 million bridge exploit has pushed the unfrozen ~$220 million through THORChain, Wasabi, Tornado Cash, and Umbra, leaving roughly $1.7 million still sitting in the original wallet.

A security startup says it disclosed a fund-draining vulnerability to the cross-chain protocol weeks before a $10.7M exploit hit a near-identical flaw. Now it plans to publish exploit code for more.

The post Crypto Hack Losses Drop 90% in May After Brutal April appeared on BitcoinEthereumNews.com. The largest incidents involved Verus Protocol and THORChain, which lost $11.5 million and $10.1 million, respectively. Code vulnerabilities accounted for roughly two-thirds of all losses, while compromised wallets and private keys were the second-largest cause. Cross-chain bridges were the most targeted sector, responsible for 42% of total losses. Crypto Exploit Losses Drop Losses from crypto-related exploits and security breaches dropped quite a bit in May 2026. According to blockchain security firm CertiK, total losses from crypto platform exploits reached approximately $68.3 million during the month, which was an almost 90% drop compared to the $650 million that was lost in April. The sharp decrease makes May the third month of 2026 in which crypto-related losses stayed below the $100 million mark. CertiK also reported that around $9.4 million of the stolen funds were eventually recov

CertiK says May is the third month so far in 2026 to record crypto losses under $100 million.

The post Crypto hack losses drop 90% to $68.3M in May, CertiK says appeared on BitcoinEthereumNews.com. CertiK has reported that crypto losses from hacks and exploits have fallen to $68.3 million in May, nearly 90% lower than the roughly $650 million stolen in April. Summary Crypto losses fell to $68.3 million in May, nearly 90% lower than the roughly $650 million recorded in April, according to CertiK. Verus Protocol and THORChain suffered the two largest exploits of the month, with combined losses exceeding $21 million. CertiK reported a rise in AI-assisted malware activity as attackers targeted code repositories and AI coding tools. According to blockchain security firm CertiK, May became the third month of 2026 to record less than $100 million in crypto-related losses after attackers stole $68.3 million through exploits, scams, and security breaches. #CertiKStatsAlert 🚨 Combining all the incidents in May we’ve confirmed ~$68.3M lost to exploits with~$2.6M of the total attributed t

The post XRP Ledger’s Architecture Makes Flash Loan Exploits Impossible as DeFi Bleeds Millions appeared on BitcoinEthereumNews.com. Key Takeaways XRP Ledger’s newly drafted amendment confirms flash loan exploits cannot occur due to its atomic transaction architecture Recent flash loan attacks hit Thorchain, Drift Protocol, and KelpDAO, resulting in losses exceeding hundreds of millions Unlike Ethereum’s composable contracts, XRPL transactions prevent chaining multiple operations within a single block Real-world asset tokenization on XRPL has surpassed $3 billion, featuring partnerships with Ripple, JPMorgan, Mastercard, and Ondo Finance An extensive $200,000 bug bounty initiative in late 2025 uncovered zero vulnerabilities related to flash loans or oracle attacks While decentralized finance protocols continue bleeding funds through flash loan exploits, the XRP Ledger maintains these attacks cannot penetrate its fundamental architecture. NEW: XRP Ledger Eliminates Flash Loan Vulnerabil

The post XRP Ledger’s design blocks the flash loan attacks costing DeFi hundreds of millions appeared on BitcoinEthereumNews.com. The two biggest DeFi exploits of the past two months have one thing in common. They used a tool that does not exist on the XRP Ledger. Thorchain lost roughly $10.8 million on May 15 to a cross-chain attack that drained funds across Bitcoin, Ethereum, BSC, and Base. Drift Protocol, a Solana-based decentralized perpetual exchange, and KelpDAO, a liquid restaking protocol on Ethereum, together accounted for more than $600 million in losses through April alone. Cross-chain bridges have lost over $2.8 billion to attacks since 2021, per Chainalysis. And a significant share of these exploits used some variant of the same mechanic: flash loans. A flash loan is a smart contract feature that lets a trader borrow millions of dollars with no collateral, on the condition that the loan is repaid inside the same transaction. The legitimate use cases include arbitrage betwe