$247 million in crypto was stolen in July 2026, the second-worst monthly total recorded so far this year. The Coldcard exploit, which produced more than $100 million in losses on its own, is the single event that defines the month's ranking on the 2026 loss table.
The exploit's share of July's total
More than $100 million from one incident. That puts the Coldcard exploit above 40% of July's $247 million aggregate. The balance, under $147 million, accounts for every other theft reported during the month; the source does not itemize those incidents by name or size.
| Component | Reported amount |
|---|---|
| Coldcard exploit | More than $100M |
| Other July incidents | Under $147M |
| July 2026 total | $247M |
The components sum to the headline. The Coldcard event is the only named line item in the month.
What the source does and does not say
Second-worst means at least one earlier month in 2026 exceeded $247 million in reported crypto theft. The source does not name that month or supply a running year-to-date figure.
The source also provides no technical account of how the Coldcard exploit worked. No vulnerability class is named. No attack vector is described. No on-chain trace is cited. The mechanism that moved more than $100 million is not on the record here. For anyone trying to assess exposure, that information is absent.
July 2026 closes at $247 million in reported crypto theft. The Coldcard exploit alone accounted for more than nine figures of it.