Old Code, New Woes: June's $75.87M Hack Tally Proves Crypto Attackers Love a Comeback Tour 🎯

Crypto platforms lost roughly $75.87 million across 40 hacks in June 2026, according to security firm PeckShield, down 7.13% from May's $81.7 million total. The Humanity Protocol breach led the month with over $30 million in losses, after attackers compromised private keys backed up to a malware-infected developer machine. Quantstamp said the attacker relied on tooling and techniques commonly associated with North Korean hacking groups, then laundered proceeds across multiple networks including Bitcoin (BTC), Solana (SOL), Hyperliquid (HYPE), and BNB Chain. "These funds have also been commingled with proceeds linked to the KelpDAO exploiter, suggesting a potential overlap between the threat actors behind both incidents," the security firm said.

Syscoin's bridge suffered a $10 million loss after an attacker minted unauthorized SYS tokens, while the JaredFromSubway.eth Maximal Extractable Value (MEV) bot lost $7.5 million and Secret Network was drained for $4.67 million. Two separate attacks targeted deprecated Aztec-linked products, with Aztec Payments Product losing $2.16 million and Aztec Connect losing $2.1 million, for a combined total near $4 million. Both products had been sunset years earlier, and Aztec Labs said in a June 18 post, "We are investigating a potential exploit affecting a deprecated Aztec payments product from 2021. ~$2m was transferred from the immutable smart contract in transaction: https://t.co/FS4JoNnfiJ The deprecated product is an immutable stage 2 rollup that was sunset in 2022."

Other June incidents included Polymarket users losing $3 million in a reported phishing campaign, $2.4 million in losses for SecondFi and TESSERA, and the Taiko Bridge exploit closing out the top 10 at $1.7 million. Bridges, smart contracts, and compromised keys remained the most common failure points across the month's incidents, reinforcing a familiar pattern for the sector. PeckShield's tally illustrates that deprecated code and cross-chain laundering continue to sit squarely in attackers' crosshairs long after the original teams have moved on.