The figure brings the month in as the third in 2026, where monthly losses were under $100 million. Phishing alone accounts for around $2.6 million of the total. Funds returned across the same period reached $9.38 million, partially offsetting the gross loss figure. The May numbers come in well below the numbers recorded in April. The CertiK report counted 60 separate incidents through the month, the highest monthly count of 2026 so far.

CertiK releases detailed report on crypto scams in May

According to the CertiK report, the figure runs above the 50 incidents seen in February, the 55 logged in March, and the 58 recorded in April. The January count had been 48 incidents. Total May losses came in at the $68.3 million figure, lower than April’s $547.3 million and below the $97 million logged in January. February and March had also recorded losses under $100 million, and March posted the lowest dollar figure of the year so far at $38 million.

Phishing losses moderated through the month at $2.6 million, the second-lowest figure of 2026 to date. January had posted $331.3 million in phishing losses, with February at $86.1 million and March at $21.6 million. The April phishing figure had fallen to $7.5 million before the May reading. The Verus attack was rated first in terms of monthly losses at $11.52 million, while the Thorchain attack was second at $10.12 million, and both attacks comprised almost one-third of the monthly total.

Third, fourth, and fifth spots in the list of greatest loss incidents went to TrustedVolumes at $6.58 million, Victim 0x2cFED at $5.94 million, and Gravity Bridge at $5.40 million. All five biggest incidents in the period under analysis brought total losses amounting to $39.55 million, almost half of the total loss figure. Several less significant incidents made up the rest of the top ten by losses

Stablr incurred monthly losses of $3.50 million, while New Market Trading suffered losses totaling $3.10 million. TAC, Ossie, and Haveno/RetoSwap all had losses of $2.80 million and $2.70 million. In terms of category, code vulnerabilities accounted for $45.13 million of the monthly losses, equal to around 66 percent of the total. Wallet compromises followed at $13.77 million, with validator compromises at $5.40 million and phishing at $2.66 million. Backend incidents posted the smallest category figure at $0.82 million in losses.

The May report also tracked recoveries across the month. Funds returned came to $9.38 million against the $68.3 million in gross losses, equal to around a 13.7 percent recovery rate. This is in line with a trend emerging across 2026 where certain compromised projects have succeeded in recovering some amounts of funds that were stolen. From the KelpDAO bridge hack in April, where Arbitrum froze about $75 million out of the $292 million stolen, along with law enforcement efforts, to Operation Atlantic that disrupted the flow of about $45 million from cryptocurrency scams.

The post Crypto industry lost $68.3M to scammers in May 2026 first appeared on Coinfea.

He posted the alert on Telegram and said the attacker wallet was first funded through CCTP on Noble, and the main address he named was 0xea480c23d7b29a515856aafe0dc86f7519965a04.

He also listed seven more addresses tied to the same incident: 0x09BE1A36c2d7f9909eb3D6F9184c6e46A12B0ACA, 0xD4677B5A8B1b97EA213Fdb876b0FcBAB3f9F6CD1, 0x6283558eB6948CA50A2bE942D98A41ca4d1Def40, 0xf1f70d7461356f32b97ddc2cd54a490d4363340e, 0x74b4621b82eb31c5fd9fbad5729bef1813e26dcf, 0x8aaa93d06bf8de94c282f66a16effe6d9d94d038, and 0x5D2184d84b82B67c1818Bbec8ce81E7Df14F6bAb.

ZachXBT reveals details about the exploit

In his first post, ZachXBT said, “Two contracts related to European stablecoin issuer StablR appear to have been potentially exploited for ~$10M (EURR & USDR).” About two hours later, ZachXBT posted another update, saying “I have helped freeze 6 figures,” then added that the StablR team seemed to be asleep while the attack was still active after three hours. He noted that both EURR and USDR have dropped by more than 20% against their pegs.

This is what matters most to traders. No matter how a stablecoin may market itself with its collateral, licenses, reserves, and technology, it is the breakdown of its peg that makes people turn to wallets. USDR is the dollar-pegged stablecoin of StablR. It is an ERC-20 token on the Ethereum blockchain that allows using USDR as wallets, on exchanges, and in various DeFi protocols supporting Ethereum-based tokens.

StablR claims that USDR is issued 1:1 based on the assets kept separately, including cash and short-term government bonds. StablR Ltd. has a license issued by the Malta Financial Services Authority as a Financial Institution. According to the company, USDR is a MiCA-compliant Electronic Money Token operating in the European Union. Thus, the idea was to make it accessible to users and corporations needing a regulated dollar-pegged token amid restrictions imposed on large stablecoins in the EU.

The main purpose of this token is to use it in payments, foreign exchange transactions, and on-chain treasury management. It is supposed to work globally at any time without higher fees compared to the old payment system. Now that the exploit is made public, all the focus turns to the frozen funds, hacker wallets, and recovery of EURR and USDR pegs.

The post ZachXBT says StablR-linked contracts drained of $3 million first appeared on Coinfea.