In May 2026, the crypto space recorded 40 major hacking attacks, with total damages reaching $81.7 M. Analytics firm PeckShield published the data. Compared to April, when losses hit $647 M, the May figure came in 87.4% lower.
Crosschain protocols continue to be the main target for threat actors. Eight significant attacks involving bridges and interoperability solutions caused $33.28 M in losses — that's 41% of the entire monthly total.
The Biggest Hacks of May
The platform SUPERFORTUNE888 lost the most — $15.18 M. Next comes the Verus-Ethereum bridge, which lost $11.58 M, funds that were later returned. THORChain lost $10 M, DxSale lost $7.3 M, and trusted volumes lost $5.9 M.
Rounding out the top ten are gravity_bridge with $5.4 M in losses, SquidRouterModule ($3 M), StablREuro ($2.8 M), the TAC Cross-Chain Layer on the TON side ($2.8 M), and RetoSwap ($2.7 M).
Bridges in the Crosshairs for Months on End
PeckShield also tallied the damage to crosschain protocols over a longer stretch of time. As of June 1, 2026, the firm counted 14 major bridge hacks, through which attackers drained a combined $340.7 M. This sum accumulated from February through May and spans several months rather than May's statistics alone.
The list includes attacks on the Verus-Ethereum Bridge ($11.4 M), THORChain ($10 M), IoTeX.io Bridge ($8.8 M), gravity_bridge ($5.4 M), CrossCurve ($3 M), TAC Cross-Chain Layer ($2.8 M), Hyperbridge ($2.5 M), TransitFinance ($1.88 M), and a number of smaller incidents as little as $180 K.
Read also: