- January 2026 recorded 25 publicly reported crypto security incidents.
- 19 incidents resulted in confirmed on-chain financial losses.
- 6 incidents involved no quantified financial loss.
- Total confirmed losses amounted to $350.7 million.
- Single largest incident caused $282.0 million in losses.
- The largest incident represented ~80.4% of total monthly losses.
- 18 remaining incidents combined accounted for < $70 million in losses.
- Smart-contract exploits caused ~ $53.0 million in losses across 6 incidents.
- Oracle and execution logic failures caused ~ $7.9 million in losses.
- Flash-loan attacks caused ~ $5.0 million in losses across 3 incidents.
- Access-control failures caused ~ $2.2 million in losses across 4 incidents.
- Other or unknown vectors caused ~ $0.1 million in losses.
- Approximately $2.7 million (<1%) of losses were recovered.
- Most unrecovered assets moved through cross-chain bridges or privacy tools.
Data Source: https://cryip.co/crypto-hacks-and-scams-january-2026/
