Incidents by month
Crypto hacks and exploits in July 2026
20 incidents. Each links to a full write-up: timeline, OAK Techniques, attacker addresses and fund flow, with sources.
Incidents (20)
- Coldcard hack (Jul 2026) — 2026-07-30 · OAK-T11.002 Wallet-Software Distribution Compromise
- WEMIX hack (Jul 2026): $6.25M — 2026-07-26 · loss $6.25M · OAK-T11.014 Operator Privileged-Key Compromise
- DPRK state banks breached from the inside — former military operators are reported arrested for diverting state funds into overseas crypto wallets and structuring them out through Chinese border brokers — Central Bank of the DPRK / Foreign Trade Bank — 2026-07-12 (reported 2026-07-25) — 2026-07-25 · OAK-T7.010 Travel Rule Evasion
- Triple-A hack (Jul 2026): $11.8M — 2026-07-24 · loss $11.8M · OAK-T15.004 Operator-Side Credential Compromise (SSO / Cloud / Registrar / DNS / Package Registry)
- Lien Finance exploit (Jul 2026): $542,144 — 2026-07-24 · loss $542,144 · OAK-T9.001 Oracle Price Manipulation
- Verus ⇄ Ethereum Bridge, second time (Jul 2026): $7.54M — 2026-07-23 · loss $7.54M · OAK-T10
- Solido Cash (Jul 2026): $900,000 — 2026-07-23 · loss $900,000 · OAK-T7.002 CEX Deposit-Address Layering
- B² Network hack (Jul 2026): $3.86M — 2026-07-23 · loss $3.86M · OAK-T11.014 Operator Privileged-Key Compromise
- AFX Trade exploit (Jul 2026): $24.15M — 2026-07-22 · loss $24.15M · OAK-T10.001 Validator / Signer Key Compromise
- Wanchain Cardano bridge (Jul 2026) — 2026-07-20 · OAK-T10
- Allbridge Core (Jul 2026): $1.65M — 2026-07-19 · loss $1.65M · OAK-T7.001 Mixer-Routed Hop
- Across Protocol (Jul 2026): $4.5M — 2026-07-17 · loss $4.5M · OAK-T10
- DeFiTuna exploit (Jul 2026): $580K — 2026-07-16 · loss $580K · OAK-T9.002 Flash-Loan-Enabled Exploit
- Cascade (Jul 2026): $1.34M — 2026-07-16 · loss $1.34M · OAK-T7.003 Cross-Chain Bridge Laundering
- Ostium exploit (Jul 2026): $11.86M — 2026-07-15 · loss $11.86M · OAK-T9.001 Oracle Price Manipulation
- LayerZero Executor hack (Jul 2026): $2.4M — 2026-07-15 · loss $2.4M · OAK-T11.011 Multi-chain Key-store Co-location
- Bonzo Lend (Jul 2026): $9.05M — 2026-07-12 · loss $9.05M · OAK-T7.001 Mixer-Routed Hop
- Injective Labs SDK hack (Jul 2026) — 2026-07-08 · OAK-T11.009 Trader-Tooling Supply-Chain Compromise targeting `.env` Private Keys
- Summer.fi (Jul 2026): $6.04M — 2026-07-06 · loss $6.04M · OAK-T7.001 Mixer-Routed Hop
- BonkDAO exploit (Jul 2026): $20M — 2026-07-06 · loss $20M · OAK-T16.002 Hostile-Vote Treasury Drain