DeFi exploits drive crypto losses to $215 million in August 2026

Aug 30, 2026

Cryptocurrency losses reached $215 million in August 2026, driven by $144.6 million in DeFi exploits. The month was dominated by price-manipulation attacks on lending protocols, notably a $75 million exploit of Tectonic on Cronos and a $9 million exploit of Moonwell on Base. Attackers manipulated illiquid tokens to borrow deeper asset pools. Cronos halted its blockchain to freeze $69 million of the stolen Tectonic funds on-chain, while phishing scams remained a major secondary drain at $41.5 million.

August 2026 crypto exploit losses

▪Approximately $110.7 million of the cryptocurrency funds stolen or exploited in August 2026 were later classified as returned or frozen.
▪Confirmed cryptocurrency security incidents in August 2026 resulted in approximately $215 million in total losses, according to blockchain security firm CertiK.
▪Decentralized finance protocols accounted for $144.6 million of the $215 million in cryptocurrency losses recorded in August 2026.

DeFi price manipulation attacks

▪The August 2026 price manipulation attacks mirror the October 2022 Mango Markets exploit, where Avraham Eisenberg used inflated MNGO collateral to withdraw $110 million.
▪Price manipulation attacks drove $131.6 million of the cryptocurrency losses in August 2026, while code vulnerabilities caused $20.6 million in losses.
▪DeFi price manipulation attacks target lending protocols by artificially inflating the price of thinly traded, illiquid tokens to borrow deeper pools of liquid assets.

Tectonic exploit on Cronos

▪The Tectonic attacker manipulated the thinly traded TONIC token, pushing its price up 100-fold in 20 minutes to borrow liquid assets against the inflated collateral.
▪Prior to the August 30, 2026 exploit, Tectonic held approximately $121.7 million in total value locked and $82.7 million in active loans.
▪The Cronos-based lending protocol Tectonic was hit by a price-manipulation exploit on August 30, 2026, resulting in estimated losses of $75 million.

Cronos blockchain emergency halt

▪Only about $6 million of the estimated $75 million in stolen Tectonic assets was bridged to Ethereum before Cronos validators halted the network.
▪Cronos suspended block production on August 30, 2026, to contain the Tectonic exploit, trapping the majority of the attacker's assets on-chain.
▪Crypto.com Chief Executive Officer Kris Marszalek stated that the company's centralized exchange and application were unaffected by the Cronos network halt.

Moonwell MAMO market attack

▪The Moonwell attacker inflated the MAMO token price from $0.0106 to $0.4313 and transferred 53 million tokens to the mMAMO collateral contract to borrow $11 million.
▪The Moonwell lending protocol on Base lost between $8.7 million and $9.1 million on August 27, 2026, due to price manipulation of the illiquid MAMO token.

Phishing scam victim losses

▪Phishing scams cost cryptocurrency victims approximately $41.5 million in August 2026, representing the second-largest loss category of the month.
▪CertiK's H1 2026 data showed that phishing scams caused $366 million in losses, trailing wallet compromises but far exceeding losses from code vulnerabilities.