Hack history / Monthly reports / 2026-05
Crypto hacks and thefts, May 2026
Thefts are hacks, exploits, phishing, scams and rug pulls, in dollars at the time. A single source for $500M or more waits for a second source before it counts.
Taken
$86.9M
53 thefts
vs the month before
−87%
−87% ($648.5M)
vs a year earlier
−66%
−66% ($252.3M)
Largest thefts
SUPERFORTUNE AI 27 · Improper Access Control$15.2MVerus-Ethereum Bridge 17 · Forged Proof$11.6MTHORChain DEX 15 · Bridge Logic Flaw$10.7MDxSale 28 · Liquidity Rug$7.3MTrustedVolumes 07 · Caller Impersonation$6.7MGravity Bridge 30 · Validator Key Compromised$5.4MNew Market Trading 25 · Improper Access Control$4MThird-party Gnosis Safe Module (SquidRouterModule) 25 · Smart Contract Vulnerability$3.2MSquidRouterModule 04 · Improper Access Control$3.2MTAC Protocol 11 · Proof Verifier Bug$2.9M
How attackers got in
Smart contract bug 29$41.6M
Bridge and cross-chain 6$26.8M
Keys, accounts and infrastructure 8$10.3M
Insiders: rug pulls, frauds, collapses 2$7.5M
Price, oracle and governance 7$800K
Other 1$20K
By chain
Ethereum 21$69.8M
BNB Chain 10$34.3M
Base 6$18.1M
Verus 1$11.6M
Bitcoin 2$11.2M
Cosmos 1$5.4M
Arbitrum 9$5.2M
TON 1$2.9M
By target
DeFi protocol 32$44.5M
Token 4$15.7M
Other 3$11.3M
Chain 2$10.8M
Wallet 1$3.2M
RWA 1$456K
not stated 7$382K
Liquidity Pool 1$200K
Cite this page
SwanBluechip, "Crypto hacks and thefts, May 2026", Crypto hack history, https://swan-hack-tracker.pages.dev/history/m/2026-05/ (data as of 2026-10-31).