Crypto Hacks Surge: $370 Million Stolen in January Alone

The beginning of this year brought an alarming reminder: the human element remains the most vulnerable aspect of security. Recent reports indicate that approximately $370 million in cryptocurrency was stolen in January, marking a significant increase compared to previous months.

Key Takeaways

In January 2026, around $370 million in cryptocurrency was stolen, much of it from social engineering scams.
Phishing scams accounted for approximately $311 million of the losses.
Total thefts in January were nearly four times higher than the same month last year.
The volume of hacking incidents does not always correlate with total losses; a single incident can significantly impact statistics.
Enhanced security measures and user education are essential to combat these rising threats.

crypto

This sharp rise was primarily driven by a significant social engineering scam that resulted in one individual losing around $284 million. Clever deception and expertly crafted messages outsmarted technological defenses this time.

Phishing Scams Largely Responsible for Losses

According to research by CertiK, phishing scams accounted for approximately $311 million of the total losses in January. This statistic highlights that the majority of losses were due to attackers deceiving users and insiders, rather than breaching cryptographic systems.

Scammers used tactics like social pressure, fake links, and impersonation to convince victims to transfer their funds. Consequently, individuals fell for these tricks, leading to drained accounts.

A Broader View on Monthly Loss Trends

The total losses in January nearly quadrupled compared to the $98 million stolen in January 2025 and were more than triple the nearly $118 million taken in December. This month stands as the largest loss since February 2025, which saw roughly $1.5 billion lost, largely due to the massive Bybit heist.

These significant events showcase how a singular breach or scam can dramatically affect an entire month's statistics. The numbers can appear stable in one month and then skyrocket in another, creating an unpredictable environment for wallets and treasuries.

#CertiKStatsAlert 🚨
In January, we confirmed a loss of approximately $370.3 million due to various exploits.
Of this total, around $311.3 million came from phishing, with one victim suffering a loss of approximately $284 million due to a social engineering scam.
More details below 👇 pic.twitter.com/uXhi0P6dl5
— CertiK Alert (@CertiKAlert) January 31, 2026

PeckShield identified several major protocol attacks. Step Finance lost nearly $29 million due to compromised treasury wallets, and over 261,000 SOL tokens disappeared as a result. Truebit faced a $26.4 million loss when a flaw in a smart contract allowed for nearly free token minting, which also led to a decline in its token price.

Other victims included SwapNet and Saga, with losses estimated at around $13.3 million and $7 million, respectively. These hacks were characterized by their aggressive and swift nature.

#PeckShieldAlert 🚨
In January 2026, the crypto industry experienced 16 hacking incidents resulting in a total loss of $86.01 million. This indicates a slight 1.42% year-over-year decrease compared to January 2025, but a notable 13.25% increase month-over-month from December 2025.
Phishing losses, meanwhile, remain alarmingly high… pic.twitter.com/pxugbsPcZ7
— PeckShieldAlert (@PeckShieldAlert) February 1, 2026

Reports highlighted around 40 different exploit and scam incidents throughout January, but the bulk of the financial losses were tied up in a few significant cases. This suggests that the raw number of incidents does not fully capture the overall picture; a single, skillfully executed deception can far exceed the losses from many smaller breaches. Some months might experience numerous small thefts, while others could be marked by a single massive fraud.

Total crypto market cap currently at $2.59 trillion

To combat these challenges, security teams and project treasuries must strengthen both human and technical safeguards. Implementing more stringent wallet controls, tiered approval processes, and enhanced identity verification could help mitigate social engineering attacks.

Simultaneously, conducting independent code audits and developing faster response strategies can reduce the damages caused by smart contract vulnerabilities. Establishing educational programs for both staff and users is a cost-effective measure compared to the consequences of a significant loss.

The recent increase in thefts serves as a stark warning: attackers are blending social skills with technical expertise. Their approach often starts with a message in a chat application or email, transitioning into theft at the code level.

Updating software is important, but educating individuals on recognizing scams can prevent many attacks before they escalate.

Featured image from Shutterstock, chart from TradingView