<h3 id="summary">Summary</h3>
<ul>
 <li>Crypto hackers stole roughly $110 million in July, highlighting persistent security vulnerabilities affecting blockchain projects despite widespread use of audits.</li>
 <li>Immunefi found audit competitions uncovered 6.2 serious bugs per engagement, compared with only 1.5 vulnerabilities found through traditional tier-one audits.</li>
 <li>Bug bounty programs prevented 374 threats, while researcher payouts reached $143.1 million as projects invested further in identifying vulnerabilities before exploitation.</li>
</ul>
&nbsp; 
Crypto hackers stole roughly $110 million in July, while Immunefi identified major weaknesses in traditional security audits used across blockchain projects. The cybersecurity platform found that competitive audit reviews uncovered substantially more serious vulnerabilities than conventional tier-1 audits. 
<a href="https://www.odaily.news/zh-CN/newsflash/508372" rel="noopener noreferrer nofollow">According to Immunefi</a>, its review of 1,178 tier-1 audits found a median of zero critical or high-severity vulnerabilities, while 58 audit competitions revealed significantly more serious security weaknesses. Those competitions uncovered an average of 6.2 serious bugs per engagement, compared with only 1.5 during traditional tier-1 audits. The findings highlight a substantial gap between both security approaches as cryptocurrency platforms remain attractive targets for sophisticated attackers. 
Moreover, Immunefi reported stronger activity among independent researchers working through its bug bounty programs to identify potentially costly security weaknesses. Researchers received $2.32 million for confirmed vulnerabilities during July, while confirmed and paid bug bounty reports increased by 18%. 
Immunefi also recorded 374 prevented threats through its bug bounty programs, compared with 317 in June and 339 in May. Cumulative researcher payouts reached $143.1 million, rising from the $140.8 million recorded at the end of June. 
Also Read: <a href="https://36crypto.com/binance-bitcoin-traders-outpace-hyperliquid-by-4753-as-buying-pressure-surges/" rel="noopener noreferrer nofollow">Binance Bitcoin Traders Outpace Hyperliquid by 4,753% as Buying Pressure Surges</a> 
<h2 id="audit-competitions-find-more-serious-vulnerabilities">Audit Competitions Find More Serious Vulnerabilities</h2>
Immunefi’s comparison showed that competitive audits<a href="https://36crypto.com/immunefi-and-ripple-announce-200000-attackathon-to-secure-xrpl-lending-protocol/" rel="noopener noreferrer nofollow"> uncovered</a> more serious vulnerabilities per engagement than conventional private security assessments. Audit competitions allow multiple independent researchers to examine the same project and search for vulnerabilities across different potential attack paths. 
Consequently, projects can receive broader security scrutiny instead of depending entirely on findings produced through a traditional private audit. The cost difference between both approaches also formed a significant part of Immunefi’s findings on cryptocurrency security practices. 
Finding one critical vulnerability through an audit competition cost an average of $6,548, based on Immunefi’s analysis. By comparison, identifying a critical bug through a private tier-1 audit carried an average cost of approximately $66,000. That difference becomes considerably larger when malicious actors discover vulnerabilities before legitimate researchers can identify and report them. 
<h2 id="undetected-bugs-carry-much-higher-costs">Undetected Bugs Carry Much Higher Costs</h2>
Immunefi estimated that attacker-first discovery of a critical vulnerability generated an average cost of approximately $24.5 million. Therefore, vulnerabilities missed during security reviews can become considerably more expensive once attackers successfully exploit weaknesses within blockchain applications. 
The $110 million stolen during July demonstrates the financial consequences that security failures can create across cryptocurrency platforms. Additionally, the 374 prevented threats show how bug bounty researchers can identify weaknesses before attackers turn vulnerabilities into damaging exploits. 
Immunefi’s figures also suggest that <a href="https://36crypto.com/crypto-hack-incidents-hit-record-in-h1-despite-lower-losses-than-last-year/" rel="noopener noreferrer nofollow">relying on traditional audits</a> alone may leave some serious vulnerabilities undiscovered despite substantial security spending. Competitive audits provide another layer of scrutiny by bringing several researchers into the vulnerability discovery process for individual blockchain projects. 
Immunefi’s findings reveal a notable difference between traditional audits and competitive reviews in detecting serious vulnerabilities across cryptocurrency projects. With hackers stealing roughly $110 million in July, effective vulnerability discovery remains critical for limiting costly exploits across the crypto industry. 
Also Read: <a href="https://36crypto.com/vitalik-buterin-reveals-major-ethereum-shift-toward-privacy-and-quantum-security/" rel="noopener noreferrer nofollow">Vitalik Buterin Reveals Major Ethereum Shift Toward Privacy and Quantum Security</a> 
The post <a href="https://36crypto.com/crypto-hacks-drain-110m-as-immunefi-exposes-major-flaws-in-traditional-audits/" rel="noopener noreferrer nofollow">Crypto Hacks Drain $110M as Immunefi Exposes Major Flaws in Traditional Audits</a> appeared first on <a href="https://36crypto.com" rel="noopener noreferrer nofollow">36Crypto</a>.

Crypto Hacks Drain $110M as Immunefi Exposes Major Flaws in Traditional Audits

Table of Contents

36crypto

Other articles published on Aug 10, 2026

Join our free newsletter for daily crypto updates!