DeFi exploits drive crypto losses to $215 million in August 2026

Aug 30, 2026

Cryptocurrency losses reached up to $215 million in August 2026, driven by a surge in DeFi price-manipulation exploits. The largest incident hit the Tectonic protocol on Cronos, where an attacker manipulated the TONIC token to borrow $75 million. Cronos validators halted block production and rolled back the chain state, trapping most funds on-chain after only $6 million escaped to Ethereum. Other protocols like Moonwell and More Markets suffered similar illiquidity-based exploits.

August 2026 crypto hack statistics

▪Blockchain security firm CertiK reported that confirmed cryptocurrency security incidents in August 2026 resulted in approximately $215 million in losses.
▪PeckShield estimated total cryptocurrency losses from major hacks in August 2026 at $136.3 million, representing a 49.5% month-over-month decrease from July 2026 losses of approximately $270 million.
▪Blockchain security firm PeckShield reported that the cryptocurrency industry experienced 50 major hacks in August 2026, representing a 67% increase from the 30 hacks recorded in July 2026.

Tectonic price manipulation exploit

▪An attacker exploited the Cronos-based lending protocol Tectonic on August 30, 2026, resulting in estimated losses of $74 million to $75 million.
▪The Tectonic attacker manipulated the price of the thinly traded TONIC token, inflating its value approximately 100-fold in 20 minutes to borrow deeper assets against the inflated collateral.
▪Tectonic's total value locked fell from approximately $121.7 million to near $3 million following the August 30, 2026 price-manipulation exploit.

Cronos network emergency halt

▪Cronos validators resumed block production after restoring the network state to a snapshot taken before the Tectonic exploit occurred, effectively rolling back transactions.
▪Cronos validators suspended block production on August 30, 2026, to contain the Tectonic exploit, trapping most of the attacker's assets on-chain.
▪Crypto.com Chief Executive Officer Kris Marszalek confirmed that Crypto.com's centralized exchange and application were unaffected by the Tectonic exploit.
▪The Tectonic attacker successfully bridged approximately $6 million to Ethereum before Cronos validators halted the network.

DeFi lending protocol vulnerabilities

▪The lending protocol More Markets on Flow EVM was drained of approximately $9.3 million in a WFLOW lending reserve exploit involving Ankr bonded LST collateral.
▪The governance protocol Term Finance suffered an exploit on August 23, 2026, resulting in an estimated loss of $8.5 million.
▪The decentralized lending protocol Moonwell on the Base network lost an estimated $8.7 million to $9.1 million on August 27, 2026, due to price manipulation of the illiquid MAMO token.

Phishing attack losses

▪CertiK reported that phishing scams cost cryptocurrency victims approximately $41.5 million in August 2026.
▪CertiK's Hack3D H1 2026 report recorded $1.32 billion lost across 344 incidents in the first half of 2026, with phishing accounting for $366 million of that total.

Attack vector breakdown

▪CertiK reported that $110.7 million of the funds lost in August 2026 were later classified as returned or frozen, leaving a large share of the monthly total locked on-chain.
▪CertiK's August 2026 breakdown attributed $131.6 million in losses to price manipulation, $41.5 million to phishing, $20.6 million to code vulnerabilities, and $11.8 million to wallet compromises.