Incidents by month
Crypto hacks and exploits in June 2026
19 incidents. Each links to a full write-up: timeline, OAK Techniques, attacker addresses and fund flow, with sources.
Incidents (19)
- Polymarket hack (Jun 2026): $3.0–3.1M — 2026-06-25 · loss $3.0–3.1M · OAK-T15.002 Supply-Chain / Vendor-Pipeline Compromise
- SecondFi hack (Jun 2026): $2.4M — 2026-06-23 · loss $2.4M · OAK-T11.004 Insufficient-Entropy Key Generation
- Taiko bridge exploit (Jun 2026): $1.7M — 2026-06-21 · loss $1.7M · OAK-T10.002 Message-Verification Bypass
- jaredfromsubway.eth hack (Jun 2026): $7.5M — 2026-06-20 · loss $7.5M · OAK-T4.004 Allowance / Approve-Pattern Drainer
- Namada exploit (Jun 2026): $600,000 — 2026-06-19 · loss $600,000 · OAK-T10.002 Message-Verification Bypass
- mySwap CL (Jun 2026): $300K — 2026-06-19 · loss $300K · OAK-T7.001 Mixer-Routed Hop
- Rust crypto-clipper hack (Jun 2026) — 2026-06-17 · OAK-T4.012 Clipboard-Hijacker (Clipper) Address Substitution
- CryptoBandits hack (Jun 2026) — 2026-06-17 · OAK-T4.012 Clipboard-Hijacker (Clipper) Address Substitution
- Steam Workshop / Wallpaper Engine malicious wallpapers — Lumma + Vidar infostealers harvesting Steam sessions and crypto wallets — Windows / cross-chain — disclosed 2026-06-16 — 2026-06-16 · OAK-T4.010 Fake Security-Tool / Browser-Extension Phishing
- Secret Network exploit (Jun 2026): $4.67M — 2026-06-10 · loss $4.67M · OAK-T10.002 Message-Verification Bypass
- Token of Power exploit (Jun 2026): $1.58M — 2026-06-09 · loss $1.58M · OAK-T16.002 Hostile-Vote Treasury Drain
- OpenMonero hack (Jun 2026): $25K — 2026-06-08 · loss $25K · OAK-T15.003 Operator-Endpoint Compromise (Developer Workstation / Signing Machine)
- Humanity Protocol hack (Jun 2026): $32M — 2026-06-08 · loss $32M · OAK-T11.011 Multi-chain Key-store Co-location
- Flooring Protocol (Jun 2026): $900K — 2026-06-08 · loss $900K · OAK-T12.008 Hybrid Fungible / Non-Fungible Standard Accounting Divergence
- Syscoin bridge exploit (Jun 2026): $8.56M — 2026-06-07 · loss $8.56M · OAK-T10.002 Message-Verification Bypass
- Zcash Orchard counterfeiting vulnerability — under-constrained halo2 scalar-mul gadget (AI-discovered responsible disclosure) — 2026-05-29 / 2026-06-02 — 2026-06-02 · OAK-T9
- TesseraDAO hack (Jun 2026): $2.4M — 2026-06-01 · loss $2.4M · OAK-T11.014 Operator Privileged-Key Compromise
- Gnosis Pay (Jun 2026) — 2026-06-01 · OAK-T11
- Joe Agent (Jun 2026): $45K — loss $45K · OAK-T9