Crypto Hacks Are Back, and They Are Getting Smarter

A weak price has not stopped the thieves. Attackers drained more than 20 million dollars in ADA and other tokens by compromising how a wallet generated seed phrases and processed signatures, while the THORChain network only just restarted after a five-week shutdown from a 10.7 million dollar exploit. The targets are shifting from apps to the plumbing itself.

The newer attacks hit the foundations, not the front door. The ADA-related theft did not guess passwords, it attacked the way keys themselves were created and signed, the core machinery that is supposed to keep funds safe. THORChain's exploit targeted a flaw in its signature scheme. When the cryptography underneath is the weak point, even careful users can be exposed.

The response is a sign of growing maturity. THORChain halted its entire network for five weeks rather than let the damage spread, then resumed once the flaw was addressed, a painful but disciplined choice. Crypto is slowly learning the security habits traditional finance took decades to build, pausing systems, auditing code, and treating a breach as a process to manage rather than a death sentence.

The numbers carry a quiet bit of good news. Total hack losses actually fell in May even as the number of incidents stayed near 2026 highs, which suggests defenses are catching more attacks before they turn into massive thefts. Bigger, more secure protocols are getting harder to drain, pushing attackers toward smaller targets and cleverer methods. The industry is hardening, unevenly.

The honest warning is that the threat is evolving fast. Security researchers caution that AI tools could soon let attackers find and exploit flaws at superhuman speed, raising the stakes for every protocol. Self-custody still means the user carries real responsibility, and a tightening market gives no protection from a stolen key. Better defenses do not make the risk go away.

So even in a bear market, crypto's security war is live, and it is moving to deeper layers of the stack. A 20 million dollar key-level theft, a network that shut down to protect itself, and falling losses against steady attacks. The plumbing is being tested and slowly reinforced. Watch protocol audits and how fast teams respond, not just the size of the next headline hack.