August crypto hacks steal $136M total

TLDR

In August 2026, crypto hacks stole about $136 million across 50 incidents, showing more frequent attacks but smaller average hauls.

1. Blockchain security firm PeckShield recorded 50 major hacks and estimated total losses at $136.3 million, a 67% jump in incidents but a 49.5% drop in value versus July.
2. The largest hit was Tectonic on Cronos at roughly $74 million, with validators halting and rolling back the chain to keep most assets from leaving the ecosystem.
3. Longer term data shows over $3.63 billion lost since 2025 and that audited protocols still account for most stolen funds, so users should focus on custody, approvals, and governance risk rather than audit labels alone.

Confidence: high because multiple independent security reports align on the figures and trends.

Deep Dive

1. Augusts Hacks By The Numbers

PeckShields monthly summary found 50 significant crypto hacks in August and estimated total losses of about $136.3 million, up from 30 incidents and roughly $270 million in July, meaning more attacks but smaller average thefts per case according to this report.

A separate write up noted that the average loss per hack fell to around $2.7 million from about $9 million in July, and that the top ten incidents accounted for about $123.34 million of the total, leaving only around $12.9 million spread across the other 40 attacks in PeckShields breakdown.

The pattern is clear: attackers are still very active, but many August exploits were mid-sized or contained before becoming catastrophic.

2. Tectonic And How Losses Were Contained

The months largest exploit involved Tectonic, a lending protocol on Cronos, with security firms estimating about $7475 million in value affected and ranking it among 2026s biggest crypto thefts as detailed in this incident report.

Onchain analysis shows the attacker manipulated Tectonics TONIC governance token price, then used the inflated collateral to borrow other assets; Cronos validators halted block production and later restored the chain to its state before the exploit, leaving only about $6 million successfully bridged to Ethereum, as described in this Cronos coverage.

That response reduced realized outflows but also highlighted that some networks can intervene at the chain level, which is positive for containment yet raises questions about decentralization and the reliability of final transactions.

3. Broader Security Trends And User Takeaways

CoinGeckos security study found crypto platforms lost over $3.63 billion across 245 incidents from January 2025 to July 2026, with the ten largest hacks making up more than 72.5% of losses and infrastructure or supply chain weaknesses causing over $1.8 billion in damage, as summarized in this analysis.

Strikingly, 147 of those attacked protocols had undergone independent security audits and still accounted for over 88% of stolen funds, while only about 11% of incidents were due to smart contract bugs within audit scope according to this deeper breakdown.

Researchers also highlight a rise in total hack counts over 2026, with AI and more automated tooling making it cheaper to run phishing, market manipulation, and governance attacks, as noted in this AI-cyber risk briefing.

Conclusion

Augusts $136 million in stolen crypto reflects a security landscape where attackers strike more often, especially against DeFi and lending protocols, but network interventions and fragmented targets keep some losses from becoming Bybit-scale disasters.

For crypto users and projects, the key shift is that audits and big brand names are not sufficient protection; real risk management now means watching how chains respond to exploits, how governance works, and how securely keys, oracles, and infrastructure are handled.