📉 Crypto Exploit Losses Drop 90% in May Amid Fewer Major Hacks Losses from exploits and vulnerabilities in crypto platforms fell sharply in May 2026, totaling $68.3 million, according to CertiK’s latest report. This represents a nearly 90% decline from the $650 million reported in April, making May the third month of the year with losses under $100 million. The largest incident targeted the Verus Protocol cross-chain bridge, with attackers stealing approximately $11.5 million. The second-largest exploit impacted THORChain, resulting in $10.1 million in losses. Cross-chain bridges accounted for 42% of the total stolen, or about $28.6 million. Smart contract vulnerabilities remained the costliest risk vector, representing roughly 66% of all reported losses—around $45 million. CertiK confirmed a total of 29 security incidents during the month, highlighting that risks persist despite the significant reduction in stolen funds. The report also flagged emerging threats from AI-assisted malware targeting developers and technical teams within the blockchain ecosystem. Additionally, about $9.4 million of stolen funds were successfully recovered in May. While attacks on administrative wallets and private keys continue to pose risks, the lack of large-scale hacks significantly eased pressure on the crypto market compared to previous months. Disclaimer: This content is for informational purposes only and does not constitute financial or investment advice.

JUST IN: Crypto Fraud Losses Hit $11B

Well today is the day, first time in 9 years that my funds were drained. Only 4 figures gone, and I might have been lucky to have been swept by whitehat recovery - to be confirmed. Waiting for further details and updates from @gnosispay, apparently all users will be made whole.

Gnosis Pay had a feature that delayed every transaction so users could cancel hacks in real time. Today someone used that feature to hack everyone using it. Every Gnosis Pay wallet runs a Zodiac Delay Module. It queues outgoing transactions and forces a wait before they execute. The whole point is to give users a window to cancel anything they didn't approve. Someone figured out how to initiate transactions through that exact module. The core Safe contracts are fine. The wallet itself is fine. The thing wrapped around the wallet to protect it is what's getting drained. The Gnosis team's first move was to tell users to withdraw. They deleted that tweet minutes later. The same exploit applied to user withdrawals. Most people can't get their funds out even if they want to. This is the second Safe module exploit in eight days. The first drained $3 MILLION from 86 wallets through a different module. Same pattern. Different attacker. Safe's core contracts have been audited dozens of times. They've never been the problem. The modules built on top of them are not part of those audits. Every exploit this year keeps happening in the same layer. The contracts hold. The extra layers built to make them safer don't.

Lately, even though we see multi-million dollar exploits on a daily basis, it seems whitehats still get mistreated constantly I wish projects learn once and for all that security truly is worth it. Budget smartly, make sure to buy security, not just hours of work. Stay safe🫡

May wrapped up with a 90% drop in crypto exploit losses, down to $68M, according to CertiK. A white hat hacker also recovered $2M from a faulty 2016 ICO. Security improvements are evident, but vigilance remains key. #Crypto #NFTs #Cybersecurity