Crypto hacks are having their quietest year since 2017. Grayscale published a research note on August 3 revealing that projected cybersecurity losses across the cryptocurrency sector sit at roughly $1.7 billion for 2026, the lowest annual figure in nine years.
That $1.7 billion represents approximately 0.1% of the total crypto market capitalization. In English: for every $1,000 of value sitting in crypto, about a dollar got stolen.
The Coldcard exploit and what it actually means
A vulnerability in the random number generator of Coldcard hardware wallets, manufactured by Coinkite, led to the compromise of an estimated 1,367 to 1,400 BTC.
At current prices, that translates to roughly $88 to $90 million in losses. According to data from rekt.news, the Coldcard incident ranks as the third-largest cybersecurity exploit of 2026.
Bitcoin’s underlying blockchain and consensus rules were never touched. The protocol itself remained completely uncompromised. Every satoshi lost came from user-controlled self-custody wallets, not from any flaw in Bitcoin’s architecture.
Grayscale was careful to frame the Coldcard exploit as an isolated setback rather than evidence of systemic fragility.
Why the numbers keep dropping
Cybersecurity losses in crypto have been declining, and Grayscale attributes this to a handful of concrete improvements across the industry. Rigorous code audits have become standard practice rather than optional extras. Bug bounty programs now incentivize white-hat hackers to find vulnerabilities before malicious actors do.
The self-custody debate gets louder
Grayscale’s research note highlighted the growing availability of insured institutional custody solutions, particularly Bitcoin exchange-traded products. Bitcoin ETPs and ETFs now offer what Grayscale describes as institutional-grade custody featuring insurance coverage, asset segregation, and multisignature security measures.
Grayscale, as a firm that manages billions in crypto investment products, obviously has a financial interest in steering capital toward institutional custody solutions.