Legacy Frax Dollar

ZachXBT

USDC

<p>Crypto hacks and security threats are escalating again, with hackers stealing over $140 million across multiple platforms in July alone.&nbsp;<br></p>
<div id="cn-block-summary-block_5a2132539be363f8cbfcee414d1e1797" class="cn-block-summary">
 <div class="cn-block-summary__nav tabs"><span>Summary</span>
 </div>
 <div class="cn-block-summary__content">
  <ul>
   <li>Crypto platforms lost over $142M in July across 17 confirmed hacks.</li>
   <li>Attackers are laundering funds faster, often within minutes.</li>
   <li>CoinDCX and GMX were among the month’s largest exploit targets.</li>
  </ul>
 </div>
</div>
<p>According to <a href="https://x.com/peckshieldalert/status/1951098755589218526?s=46&amp;t=nznXkss3debX8JIhNzHmzw" target="_blank" rel="noopener noreferrer nofollow">data</a> shared by blockchain security firm PeckShield on Aug. 1, total losses hit $142 million last month, up 27% from $111.6 million in June. Seventeen major hacks were reported in July, most of the damage concentrated in just five incidents.</p>
<p>The sharp rise highlights how quickly attack methods are evolving, leaving little time for platforms to react or recover stolen funds.</p>
<h2 class="wp-block-heading" id="coindcx-gmx-among-the-hardest-hit-platforms">CoinDCX, GMX among the hardest-hit platforms</h2>
<p>CoinDCX, a leading Indian exchange, was the target of the single largest exploit, which caused it to lose $44.2 million on July 19. While initial reports blamed a server <a href="https://crypto.news/coindcx-blames-server-breach-44-million-exploit-2025/" target="_blank" rel="noopener noreferrer nofollow">breach</a>, local police later revealed the attack was triggered by malware sent via a fake job offer to a company employee.</p>
<p>This breach exposed weaknesses in internal security practices, even at well-established firms.</p>
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
  <blockquote class="twitter-tweet">
   <p><a href="https://twitter.com/hashtag/PeckShieldAlert?src=hash&amp;ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">#PeckShieldAlert</a> In July 2025, ~17 major crypto hacks were recorded, resulting in total losses of $142M—a 27.2% increase (from $111.6M in June). Notably, the <a href="https://twitter.com/hashtag/GMX?src=hash&amp;ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">#GMX</a> exploiter has returned ~$40.5M worth of cryptos, including 10K ETH and 10.5M <a href="https://twitter.com/search?q=%24FRAX&amp;src=ctag&amp;ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">$FRAX</a>.<a href="https://twitter.com/hashtag/Top5?src=hash&amp;ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">#Top5</a> Hacks in July 2025:… <a href="https://t.co/Y5VLUILq5Z" target="_blank" rel="noopener noreferrer nofollow">pic.twitter.com/Y5VLUILq5Z</a></p>— PeckShieldAlert (@PeckShieldAlert) <a href="https://twitter.com/PeckShieldAlert/status/1951098755589218526?ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">August 1, 2025</a>
  </blockquote>
 </div>
</figure>
<p>GMX (<a href="https://crypto.news/price/gmx/" target="_blank" rel="noopener noreferrer nofollow">GMX</a>), a decentralized derivatives protocol, was the second-largest victim. It lost $42 million earlier in the month due to a contract vulnerability. Roughly $40.5 million in Ethereum (<a href="https://crypto.news/price/ethereum/" target="_blank" rel="noopener noreferrer nofollow">ETH</a>) and Legacy Frax Dollar (<a href="https://crypto.news/price/frax/" target="_blank" rel="noopener noreferrer nofollow">FRAX</a>) was later <a href="https://crypto.news/gmx-hacker-returns-stolen-funds-after-bounty-negotiation/" target="_blank" rel="noopener noreferrer nofollow">returned</a>, but the exploit still raised alarms about decentralized finance risk.</p>
<p>You might also like: <a href="https://crypto.news/circles-compliant-usdc-is-the-go-to-for-dprk-hackers-zachxbt/" rel="noopener noreferrer nofollow"> Circle’s ‘compliant’ USDC is the go-to for DPRK hackers: ZachXBT </a></p>
<p>Other major breaches in July included BigONE Exchange at $28M, WOO X at $12M, and Future Protocol at $4.2M. Even with the partial recovery from the GMX attacker, a net loss of over $100 million was reported in July. PeckShield’s insights show that malicious actors continue to stay one step ahead despite heightened awareness and on-chain surveillance.</p>
<h2 class="wp-block-heading" id="laundering-speed-leaves-little-time-to-respond">Laundering Speed Leaves Little Time to Respond</h2>
<p>A deeper layer of concern lies in how quickly attackers now move stolen funds. According to a new H1 2025 <a href="https://acrobat.adobe.com/id/urn:aaid:sc:va6c2:0cbbde35-9625-4dcd-8237-2a191d2032c0" target="_blank" rel="noopener noreferrer nofollow">report</a> by Global Ledger, a blockchain-focused anti-money laundering and forensics firm, attackers are not only striking more often,they’re laundering assets faster than ever before.</p>
<p>“The fastest attacker fund movement in H1’25 was just 4 seconds,” Global Ledger wrote in its summary. In one case, the entire laundering process, from the initial movement to the last destination, was completed in just under 3 minutes.</p>
<p>Global Ledger also found that in nearly 70% of cases, funds were already in motion before the incident was publicly disclosed. Effective responses from compliance teams, regulators, or centralized exchanges are hampered by this delay. Only 4.6% of stolen assets were recovered in the first half of 2025, even though technology to track transactions was available.</p>
<p>“Speed has become a dangerous new weapon,” the report stated, warning that traditional AML workflows are no longer sufficient on their own. Many of July’s exploits involved smart contract flaws, malicious approvals, or compromised keys, types of attacks that remain difficult to prevent with current tools.</p>
<p>&nbsp;The report concluded that without faster detection methods and tighter internal security, platforms may continue to fall behind as attackers get <a href="https://crypto.news/north-korean-hackers-target-macos-in-latest-malware-campaign-targeting-crypto-firms/" target="_blank" rel="noopener noreferrer nofollow">smarter</a> and quicker.</p>
<p>Read more: <a href="https://crypto.news/north-korean-hackers-may-hold-900-crypto-jobs-zachxbt-warns/" rel="noopener noreferrer nofollow"> North Korean hackers may hold 900+ crypto jobs, ZachXBT warns </a></p>

July crypto hacks top $140M among 17 major exploits: PeckShield

Table of Contents

crypto.news

Other articles published on Aug 1, 2025

Join our free newsletter for daily crypto updates!