August crypto hacks hit $136M across DeFi

TLDR

August saw around $136 million in crypto losses across roughly 50 security incidents, mostly targeting DeFi protocols, according to blockchain security firm PeckShield.

1. Around 50 major hacks and security incidents in August resulted in roughly $136.3 million in losses, with incident count up sharply but total value stolen down versus July.
2. Losses were heavily concentrated in a few DeFi protocols, led by the Tectonic lending exploit on Cronos and other lending and yield platforms.
3. The mix of smart contract exploits and phishing reinforces that DeFi remains structurally risky, and that audits, chain halts, and market recoveries do not eliminate security exposure.

Deep Dive

1. What The $136 Million Figure Covers

Blockchain security firm PeckShield reported 50 major crypto hacks in August, with estimated losses of about $136.3 million, a 67 percent jump in incident count from July but a 49.5 percent drop in value stolen month on month. Reports from outlets summarizing PeckShield's data, including crypto.news and NewsBTC, converge on that ballpark figure.

These tallies group together protocol exploits, infrastructure attacks and user-level compromises such as phishing, so they are a broad "security losses" measure, not DeFi-only contract bugs.

Some sources using DefiLlama data put August hack losses slightly higher, around $139.7 million when including the More Markets exploit on Flow EVM, which shows estimates can vary slightly depending on methodology and cutoff date.

Confidence: high because multiple independent trackers report similar ranges and incident counts.

2. How DeFi Protocols Were Hit

The biggest single hit was the Tectonic lending protocol on Cronos, which lost about $74 million, more than half of August's total losses, before validators halted the chain and later rolled it back to a pre-exploit state, as detailed by crypto.news and Yahoo Finance.

Other notable DeFi related incidents included Moonwell on Base, Term Labs, Coinsbuy, TAC, mantra/">MANTRA, Injective ecosystem projects, BounceBit and Cosmos Labs, with individual losses in the low to mid single digit millions, showing attacks spread across multiple chains and lending or yield protocols.

Separately, Cointelegraph reported an exploit against the More Markets protocol on Flow EVM that drained roughly $9.3 million in Wrapped Flow, contributing to DefiLlama's higher August loss tally for DeFi specific hacks and underlining that lending markets and exotic collateral remain prime targets More Markets exploit.

3. Structural Risks And What To Watch

Security incidents are rising in count even as average loss per hack falls, which suggests better containment in some cases but also a broader attack surface as more DeFi protocols and chains go live.

NewsBTC emphasizes that August's incidents span both protocol level exploits and user targeting phishing, which require different defenses and show that smart contract audits and formal listings do not fully protect capital crypto security losses analysis.

A CoinGecko study cited by DailyHodl found that from early 2025 to mid 2026, platforms lost $3.63 billion to 245 incidents, with a large majority of capital drained from projects that had already been audited, highlighting that audits reduce but do not eliminate risk longer term loss data.

Conclusion

August's roughly $136 million in losses shows that even as individual exploits are better contained, DeFi and broader crypto infrastructure remain deeply exposed to security failures. A small set of lending and yield protocols account for most of the damage, while dozens of smaller incidents underline how wide the attack surface has become. Forward looking, the key signals are incident frequency, concentration in a few designs, and how quickly teams and validators can detect, pause and remediate attacks without undermining user trust.