Start now →

Crypto exploit losses in May fall 90% over month to $68M: CertiK

By Cointelegraph by Martin Young · Published June 1, 2026 · 3 min read · Source: CoinTelegraph
RegulationSecurity
Crypto exploit losses in May fall 90% over month to $68M: CertiK
Written by Martin Young ⁠, Staff Writer.Reviewed by Jesse Coghlan ⁠, Staff Editor.Written by Martin Young ⁠, Staff Writer.Reviewed by Jesse Coghlan ⁠, Staff Editor.

Crypto exploit losses in May fall 90% over month to $68M: CertiK

Latest NewsPublishedJun 1, 2026

CertiK says May is the third month so far in 2026 to record crypto losses under $100 million.

Losses from exploits of crypto platforms fell to $68.3 million in May, down almost 90% from the $650 million lost in April, says crypto security company CertiK.

“After a particularly bad April, May is now the third month of 2026 to record losses under [$100 million],” CertiK posted to X on Sunday. 

Around $2.6 million of the total crypto stolen in May was due to phishing attacks, while roughly $9.4 million was recovered or returned, it added.

Excluding the $1.5 billion hack on Bybit in February 2025, April saw the highest losses recorded in a month since March 2022, with the largest loss that month coming from a $291 million exploit of Kelp DAO.

An exploit of Verus Protocol’s cross-chain bridge on May 18 was the largest in terms of losses last month, with $11.5 million stolen. THORChain was second after an exploit in mid-May saw $10.1 million stolen from the protocol.

Code vulnerabilities were the category with the highest value of losses over the month, with about 66% of the total, or around $45 million lost. Wallet or private key compromises were the second-most costly, with $13.7 million stolen.

Cross-chain bridges were the most targeted, with $28.6 million, or 42% of the total monthly losses, followed by decentralized finance protocols. 

Crypto exploit losses in May reached $68.3 million. Source: CertiK

Related: Scammers make $400K through fake Uniswap ads on Google

DeFiLlama data shows that there were 29 incidents in May, seven of which involved compromised private keys.

The latest two incidents, reported on May 30, were the Alephium Bridge and Gravity Bridge, which were respectively exploited for $815,000 and $5.4 million due to compromised private keys.

Malware developed with artificial intelligence assistance has also been on the rise as malicious actors targeted crypto and AI developers in May by compromising code repos and tricking AI coding assistants.

Magazine: HYPE chases $100 target, ETH could dump below $1800: Market Moves

Cointelegraph is committed to independent, transparent journalism. This news article is produced in accordance with Cointelegraph’s Editorial Policy and aims to provide accurate and timely information. Readers are encouraged to verify information independently.

More on the subject

Cosmos-based Gravity Bridge halts bridge after reported $5.4M exploitMay 31, 2026Amin HaqshanasCircle freezes $12.6M of USDC linked to privacy protocol ZamaMay 30, 2026Vince QuillSEC charges Texas man with $12.3M crypto fraud using fake AI trading botsMay 30, 2026Amin HaqshanasCosmos-based Gravity Bridge halts bridge after reported $5.4M exploitMay 31, 2026Amin HaqshanasCircle freezes $12.6M of USDC linked to privacy protocol ZamaMay 30, 2026Vince QuillSEC charges Texas man with $12.3M crypto fraud using fake AI trading botsMay 30, 2026Amin Haqshanas

US, UK central bankers offer contrary views on stablecoins

Bitcoin price targets $78K as BTC holders defend 'strongest near-term support'

Crypto lobby spending on Republicans far outpaces Democratic support

Strategy's Michael Saylor teases BTC buy with 'working better' tweet

Kraken ‘plans’ regulated perp contracts as rivals are quick off blocks

This article was originally published on CoinTelegraph and is republished here under RSS syndication for informational purposes. All rights and intellectual property remain with the original author. If you are the author and wish to have this article removed, please contact us at [email protected].

NexaPay — Accept Card Payments, Receive Crypto

No KYC · Instant Settlement · Visa, Mastercard, Apple Pay, Google Pay

Get Started →