Cryptocurrency security breaches jumped to 50 incidents in August, a 67% increase from July, with total losses climbing to $136.3 million, according to a security report by PeckShield.
The Tectonic exploit alone accounted for $74 million of the month's total, making it the largest single incident. Despite the surge in hack frequency, overall losses declined 49.5% from July's total, indicating that fewer but larger breaches earlier in the summer had driven the previous month's figures higher.
August's 50 incidents represent the highest monthly count tracked so far in 2026. The spike in frequency contrasts with the decline in dollar losses, as attackers targeted more protocols but with less catastrophic impact per breach. PeckShield's data tracks exploits, rug pulls, and flash loan attacks across decentralized finance, with the August tally spanning multiple protocol categories.
Tectonic, a lending protocol, became the month's focal point after the $74 million extraction. The incident drew attention from security researchers and protocol developers monitoring for similar vulnerabilities in comparable platforms. Other breaches in August were distributed across smaller protocols and platforms, each individually representing less capital at risk.
The 67% jump in incident count follows a period of relative stability in quarterly breach patterns. Platforms with formal audits and continuous monitoring reported fewer successful exploitations than unaudited or newly launched alternatives. Emerging protocols and experimental mechanisms remained targets for extraction.
Monthly breach data has become a key metric for protocol risk assessment among institutional investors and allocators. Well-capitalized, audited protocols faced lower attack success rates, while emerging protocols and experimental mechanisms remained targets for extraction.
The 49.5% decline in losses from July to August, despite the 67% rise in incidents, means the average loss per hack fell to approximately $2.73 million in August compared to roughly $5.24 million the prior month. If the pace of 50 incidents per month continues, 2026 would see over 600 documented breaches, a level that would force institutional deployment policies to weigh protocol maturity and audit status more heavily than before.
