Crypto Security in June: $75.87M Lost as Attacks Go Cross-Chain

Blockchain security firm PeckShield has released its monthly threat assessment, revealing that the crypto industry experienced 40 significant security incidents in June 2026. The total financial impact of these events is estimated at approximately $75.87 million. While this figure represents a 7.13% decrease from the $81.7 million lost in May, it underscores that substantial security risks persist across the ecosystem.

The Standout Incident: Humanity Protocol Loses $31 Million

The most damaging attack of the month targeted Humanity Protocol, resulting in a loss of around $31 million. This single incident accounted for nearly 40% of June's total losses. Post-attack forensic analysis revealed that the perpetrators employed sophisticated cross-chain laundering techniques, moving stolen funds across multiple networks including Bitcoin, Solana, Hyperliquid, and BNB Chain.

A critical finding from investigators is that some of the laundered funds were mixed with assets stolen in the earlier KelpDAO attack. This pattern provides strong evidence that the actors behind these two major breaches may be connected or are utilizing shared infrastructure for obfuscating their illicit gains.

Other Notable Security Breaches

Beyond the headline attack, June witnessed several other multi-million dollar incidents affecting various sectors of the crypto space:

  • Cross-Chain Bridges Under Fire: The Syscoin Bridge suffered a $10 million exploit, while the Taiko Bridge lost $1.7 million. Additionally, both the Aztec Bridge and Aztec Connect components were compromised within the same month, leading to a combined loss of roughly $4 million.
  • MEV Bots & Protocol Exploits: An MEV bot named "JaredFromSubway.eth" was exploited for $7.5 million. The Secret Network privacy protocol was drained of $4.67 million due to a vulnerability.
  • DeFi and NFT Projects Hit: Users of the prediction market Polymarket lost $3 million. The SecondFi and TESSERA projects each saw losses of about $2.4 million. Other affected entities included Token of Power ($1.58M), Raydium ($1.34M), and the LABUBU/OLPC project ($1.1M).

The diversity of targets highlights that security vulnerabilities exist at every layer of the crypto stack, from foundational infrastructure to end-user applications. The slight dip in total monthly losses does not equate to a reduction in attack frequency or sophistication, signaling an ongoing and evolving challenge for the industry's defense mechanisms.