Over $400M Lost in January 2026 Crypto Hacks, Phishing Attack Accounts for 71%

According to ChainCatcher, data from blockchain security firm CertiK shows that the cryptocurrency industry suffered approximately 40 security incidents in January 2026, resulting in losses exceeding $400 million. The largest single loss occurred on January 16 due to a phishing attack: an investor fell victim to a scammer impersonating Trezor's official customer service and, under the scammer's guidance, disclosed the recovery seed phrase of their hardware wallet. This led to the theft of 1,459 Bitcoin and 2.05 million Litecoin, totaling $284 million, which accounted for 71% of the month's total losses. The stolen assets were quickly converted into the privacy coin Monero (XMR) to obscure the transaction trail, causing a sharp rise in the price of XMR and highlighting the challenges regulators face in combating money laundering through privacy coins. Other major breaches included: $30 million stolen from Solana-based Step Finance on January 31, $26.6 million lost by Truebit due to an overflow vulnerability, $13 million lost by Swapnet, and $6.2 million and $4.2 million lost by Saga and Makina Finance, respectively.