Finst

Crypto Platforms Lose $75.9 Million in 40 Hacks in June

PeckShield says bridges, smart contracts, and compromised keys remain the biggest weak spots. Humanity Protocol took the largest hit at more than $30 million, with funds moving across several networks.

By Zenz van der Wielen
• 2 min read
Crypto Platforms Lose $75.9 Million in 40 Hacks in June

Key Takeaways

  • Crypto platforms lost about $75.87 million in June across 40 hacks, according to PeckShield.
  • Humanity Protocol was the biggest attack, with more than $30 million stolen through compromised private keys.
  • Syscoin Bridge, JaredFromSubway.eth, and several other projects also saw millions in losses in June.

Crypto platforms lost roughly $75.87 million (€66.6 million) in June across 40 hacks, security firm PeckShield says. That was 7.13 percent below May’s total, but it still underscores how bridges, smart contracts, and compromised keys remain some of the crypto market’s most exposed points. The trend also fits a broader pattern: compromised private keys continue to account for a large share of stolen funds.

Humanity Protocol Biggest Attack

The largest loss came from Humanity Protocol, where attackers made off with more than $30 million (€26.3 million). PeckShield said the private keys were compromised after being backed up on a development machine that had been infected with malware. Quantstamp also said the attacker used tools and tactics commonly associated with North Korean hacking groups.

The stolen assets were then moved through several networks, including Bitcoin, Solana, Hyperliquid, and BNB Chain. PeckShield added that the proceeds were mixed with funds tied to the KelpDAO exploiter, suggesting there may be some overlap between the attackers.

Old Code Keeps Getting Targeted

Syscoin Bridge was next, with a $10 million (€8.8 million) loss after an attacker minted SYS tokens without authorization. The MEV bot JaredFromSubway.eth lost $7.5 million (€6.6 million), and Secret Network was drained of $4.67 million (€4.1 million).

Two Aztec-related products were also hit in the same month, which stood out because both had already been deprecated years ago. Aztec Payments Product lost $2.16 million (€1.9 million), while Aztec Connect lost $2.1 million (€1.8 million). Aztec Labs said it no longer controlled the affected systems.

Why This Still Matters

For European crypto investors, June is another reminder that security risks do not disappear just because a project becomes inactive or its code is phased out. Cross-chain transfers are still a major concern too, since stolen funds can be moved quickly across multiple networks. That makes incidents like these relevant for anyone using crypto through a wallet, a protocol, or a crypto exchange.

Other June incidents included Polymarket users who lost a combined $3 million (€2.6 million) in a phishing campaign, along with losses of $2.4 million (€2.1 million) at SecondFi and TESSERA. Taiko Bridge rounded out the top 10 with a exploit that cost $1.7 million (€1.5 million).

Disclaimer: This content is for informational purposes only and does not constitute financial, investment, legal, or tax advice. The information provided may be incomplete, inaccurate, or outdated and should not be relied upon as such. Nothing on this website should be considered a recommendation to buy, sell, or hold any cryptocurrency. Investing in crypto-assets involves risk of loss.