Hackers were busier in August, with 50 significant incidents compared with 30 in July. Even so, the money lost dropped sharply: PeckShield tallied $136.3 million in August losses, nearly half the $270 million drained in July.
One attack drove the month's narrative. The lending protocol at Tectonic.cro accounted for about $74 million, more than 54% of August's total losses. Before the Cronos network halted the entire chain and locked the rest of the stolen assets, the attacker had already moved roughly $6 million onto Ethereum. PeckShield later observed the exploiter starting to wash funds, including about $200,000 shifted to Bitcoin at the time of its report. The scale places Tectonic.cro as 2026's fourth-biggest crypto theft so far, behind the exploits at Drift, KelpDAO/LayerZero, and Coldcard.
PeckShield's top ten for August by loss were led by TectonicFi at $74 million. Rounding out the list were Moonwell at $8.7 million, Termlabs at $8.5 million, Coinsbuy at $7.9 million, TAC at $7.5 million, Injective at $4.8 million, MANTRA at $3.6 million, BounceBit at $3 million, Cosmos Labs at $2.87 million, and Aquifer at $2.47 million. In aggregate, those ten incidents came to about $123.34 million, close to 90.5% of everything stolen in August.
The money story behind the headlines is usually the part that matters. Join Market Briefs free and get it every morning.
Zooming out, TRM Labs counted 207 crypto hacks in the first half of 2026 with a combined $972 million lost. August's pattern is a reminder that a single protocol failure can overwhelm a month's totals even when overall losses fall. If you dabble in crypto, the risk doesn't just come from market swings - it also comes from how well the platforms you use are built and secured.
