Crypto hack theft falls 7% in June to $76 million as Humanity Protocol tops list: PeckShield

Crypto hackers stole around $75.9 million across 40 major incidents in June, a 7.1% drop from May's $81.7 million, according to blockchain security firm PeckShield.

The Humanity Protocol exploit accounted for the largest share at $31 million, per PeckShield's tally. Onchain analyst Specter first reported that wallets connected to the project had drained over $31 million on June 9, before Humanity Protocol's own investigation later put the total closer to $36 million, The Block reported. Founder Terence Kwok attributed the breach to a compromised private key.

Syscoin Bridge lost $10 million to a validation flaw that let an attacker mint billions of unbacked SYS tokens without a corresponding burn, PeckShield said.

A bot tied to the address JaredFromSubway.eth, known for running MEV sandwich attacks, was itself exploited for $7.5 million, according to the tally. Secret Network, Polymarket users, SecondFi, and TESSERA rounded out the rest of June's larger incidents, with losses ranging from $2.4 million to $4.67 million.

Notably, Aztec's deprecated infrastructure was hit twice in June. PeckShield tracked $2.16 million in losses from what it labeled the Aztec Bridge and another $2.1 million from Aztec Connect, both immutable contracts the Aztec Foundation says it no longer controls or can pause, The Block reported. Combined, the two attacks cost the project roughly $4 million.

Rounding out June's top 10 were Taiko Bridge ($1.7 million), Token of Power ($1.58 million), Raydium ($1.34 million), and LABUBU/OLPC ($1.1 million), per PeckShield.

PeckShield said the Humanity Protocol exploiter has laundered stolen funds across Bitcoin, Solana, Hyperliquid, and BNB Chain, with some proceeds commingled with funds tied to the separate Kelp DAO exploiter, a pattern the firm said raises the possibility the same threat actor is behind both attacks.

Crypto hacks and exploits have cost the industry well over $750 million so far in 2026, driven almost entirely by two North Korea-linked attacks in April, according to blockchain intelligence firm TRM Labs.

Drift Protocol lost $285 million on April 1 after attackers spent months socially engineering their way into the Solana protocol's governance signers. Kelp DAO's LayerZero bridge was drained of $292 million on April 18 through a compromised verifier network.