Cryptocurrency Hack Losses Fall 87% in February as Scammers Shift to Phishing

[ad_1] As crypto traders caught their breath after a bruising begin to the 12 months, the tide of digital heists appeared to ease in February. In keeping with new information from Nominis, hackers and scammers stole roughly $49.3 million throughout main incidents, down sharply from $385 million the month earlier than.

But behind the seeming reprieve, consultants warn of a extra insidious menace: the rise of scams that don’t exploit code, however individuals. Nominis’ February 2026 report reveals a transparent pivot in attacker conduct.

Somewhat than exploiting sensible contract flaws or blockchain infrastructure, many incidents relied on phishing, malicious approvals, and deal with poisoning.

Decline Follows January’s Heavy Losses

Victims typically signed fraudulent transactions or unknowingly granted permission for attackers to entry their wallets,a type of “authorization abuse” that accounted for many losses in the course of the month.

Non-public customers have been hit hardest, whereas massive platforms escaped main compromises. The most important exception was a breach at Step Finance, a Solana-based analytics platform, which misplaced roughly $30 million after attackers infiltrated its infrastructure. That single assault made up greater than 60% of all crypto losses in February.

The steep drop from January’s $385 million has sparked cautious optimism amongst analysts. Blockchain safety agency PeckShield reported related findings, estimating $26.5 million in February exploits, its lowest determine since March 2025. The agency attributed the decline to stricter operational controls and improved monitoring techniques throughout centralized exchanges and DeFi initiatives.

However the trade’s relative calm could also be fragile. “Social engineering assaults precipitated extra cumulative harm than sensible contract exploits,” Nominis famous, emphasizing a continued shift towards techniques that exploit human belief and interface confusion.

Higher Defenses, however Not Immunity

Crypto platforms have been tightening fraud prevention measures. Bybit, as an example, revealed that its anti-fraud techniques blocked greater than $300 million in unauthorized withdrawals throughout late 2025, stopping hundreds of potential scams.

Regardless of these advances, complete losses throughout the sector stay staggering. Chainalysis estimated $3.4 billion in crypto stolen final 12 months, underscoring persistent vulnerabilities whilst defenses enhance.

February’s information means that stronger code alone isn’t sufficient. The most important dangers now lie the place expertise meets conduct, permissions, signatures, and the on a regular basis habits of pockets customers. As hackers shift methods, the subsequent stage of crypto safety could rely much less on smarter contracts, and extra on smarter customers.