Crypto Fraud Watch: A $76 Million Month for Hackers, a Fugitive Kingpin’s 20-Year Sentence, and the AI Scam Surge

The numbers for June are in, and they tell a familiar story: hackers walked away with nearly $76 million last month, deprecated bridge contracts kept bleeding user funds, and a fugitive pig-butchering kingpin learned that fleeing the country doesn’t stop a federal sentence. Here’s a look at the biggest crypto fraud developments and what they mean for investors and businesses.

June Closes With $75.87 Million Lost Across 40 Hacks

Blockchain security firm PeckShield reports that the crypto industry lost approximately $75.87 million across 40 major security incidents in June 2026 — by some counts, the highest number of individual incidents in any month this year. The largest single attack hit Humanity Protocol, which lost roughly $31 million, more than 40% of the month’s total losses.

The Humanity Protocol breach is a cautionary tale about operational security rather than smart contract code. Attackers compromised private keys that had been backed up to a malware-infected developer machine, and security firm Quantstamp says the attacker’s tooling was consistent with techniques commonly associated with North Korean state-backed hacking groups.

Bridge Exploits Keep Draining Funds — Even From “Retired” Contracts

Cross-chain bridges remained a favorite target in June. Syscoin Bridge lost approximately $10 million after an attacker minted unauthorized SYS tokens, while attackers exploited both Aztec Connect and the Aztec Private Rollup Bridge within days of each other, draining just over $4 million from deprecated contracts that still held user funds.

The Aztec incidents highlight an underappreciated risk: “sunset” protocols don’t stop being attack surfaces just because development has moved on. If you still have assets sitting in a deprecated protocol or an old bridge contract, those funds may be protected by code that no one is actively maintaining or monitoring.

Pig-Butchering Kingpin Sentenced to 20 Years — In Absentia

Daren Li, a 42-year-old who played a central role in laundering more than $73 million in proceeds from “pig-butchering” investment scams run out of Cambodia, was sentenced to 20 years in federal prison plus three years of supervised release. Li pleaded guilty in November 2024 after his arrest at Atlanta’s Hartsfield-Jackson airport — but he cut off his ankle monitor and fled federal supervision in late 2025, before sentencing. The California federal court imposed the sentence anyway.

The case is a reminder that the money-laundering networks behind romance-investment scams are industrial in scale, and that federal courts will not let a defendant’s flight delay accountability. For victims, forfeiture and restitution mechanisms in cases like this can be one of the few realistic paths to partial recovery.

Impersonation Scams Up 1,400% as AI Supercharges Fraud

New data from Chainalysis puts the broader scam economy in perspective: an estimated $17 billion was stolen through crypto scams and fraud in 2025, with impersonation scams surging more than 1,400% year over year and AI-enabled fraud growing roughly 450%. Fraudsters are increasingly using phishing-as-a-service kits to pose as government agencies or exchange support staff, and generative AI to clone the voices and faces of executives — campaigns that reportedly extract nearly 4.5 times more revenue than traditional fraud.

How to Protect Yourself

The common thread in these stories is that attackers go after access, not just code. Never move funds or share credentials at the direction of anyone who contacts you first — real exchange support and government agencies do not call, text, or DM asking you to “secure” your assets. Verify any urgent request through official channels you find yourself, keep meaningful holdings in hardware wallets, treat every device that touches your keys as security-critical, and pull remaining funds out of deprecated protocols and old bridge contracts. Be deeply skeptical of investment groups, “AI trading” clubs, and new online relationships that steer conversations toward crypto.

If you’ve already been victimized, act quickly. Report the fraud to the FBI’s IC3 and relevant regulators, preserve all records and transaction hashes, and consult counsel about blockchain tracing, exchange freeze requests, and civil recovery options. In criminal cases like Li’s, victims can also pursue restitution through the forfeiture process — but deadlines and asset dissipation make timing critical.

At Coin Counsel, we work with individuals and businesses navigating the legal fallout of crypto fraud — whether you’re a victim seeking recovery, a company facing regulatory scrutiny, or a project working to stay compliant in an increasingly complex legal landscape. The rules are evolving fast, and the cost of getting it wrong has never been higher. Contact us at coin-counsel.com to speak with a crypto-focused attorney today.

Disclaimer

This blog post is for informational purposes only and does not constitute legal advice. Reading this content does not create an attorney-client relationship between you and Coin Counsel or Franco Law PLLC. The legal landscape surrounding cryptocurrency is rapidly evolving and varies by jurisdiction. Do not act or refrain from acting based on information in this post without first consulting a qualified attorney. If you believe you have been the victim of crypto fraud, contact us at coin-counsel.com for a consultation.