Crypto hacking and exploitation led to an estimated loss of $37.7 million in February 2026 and was the lowest monthly amount since March 2025 according to Certik data.
Summary
- Crypto hacks hit $37.7M in February, the lowest since March 2025.
- Wallet compromises resulted in $16.6M in losses, before phishing and exploits.
- About 30% of the stolen funds were stopped or recovered in February.
Phishing attacks accounted for $8.6 million of the total, while wallet compromises led to incidents with a loss of $16.6 million.
YieldBlox led the way in individual exploits with a steal of 10.6 million, followed by IoTeX with $8.9 million and Foom with $2.3 million.
DeFi deals lost the most in the form of $14.4 million, while AI-related projects recorded $8.9 million in theft.
Refunds or suspensions totaled $11.3 million, representing approximately 30% of total losses.
Wallet corruption and price manipulation drive February’s losses
Wallet hacks totaled $16.6 million in February and were the largest category of crypto hack losses.
Price manipulation attacks followed with $11.4 million in stolen funds, while phishing schemes cost victims $8.6 million.
Exploitation of code vulnerabilities accounted for $5.1 million, with exit scams adding $2.1 million.
Instadapp posted the largest event at $10.5 million, followed by EFX at $8.9 million. Kasm recorded $2.2 million in losses, while Initia saw $2.1 million stolen.
CryptoFarm experienced two separate incidents totaling $2.7 million combined.
Minor events include UCC and Hedgehog at $400,000 each, while Loan and SEI Token both post $200,000 in losses.
DeFi protocols continued to see the highest exploit activity with $14.4 million in losses across multiple incidents.
AI-related projects emerged as the second largest target for theft at $8.9 million. Gambling platforms lost $2.3 million, while address poisoning and wallet drainer programs combined for $2.7 million.
February shows a 60% decline in crypto from January
February’s total of $37.7 million was well below the typical monthly figures seen in 2025.
Certik data shows January and February 2026 both posted lower losses than most months of 2025.
Total events remain stable from month to month based on the chart. The reduction in total loss comes from fewer high-value subsidies rather than a reduction in attack frequency.
Phishing incidents showed similar patterns in both months, with February’s $8.6 million toll matching January’s levels.
Total operating losses also fell from January’s highs to $37.7 million in February.
