
Eight cross-chain bridge exploits in May 2026 drained $328.6M. April set a record with 30 incidents. Users face persistent security risk when moving assets between networks.
PeckShield recorded 8 exploits on cross-chain bridges during May 2026. Cumulative losses across all protocols reached approximately $328.6 million. The prior month set a record: April 2026 saw 30 incidents, the highest monthly count on record. The most severe April cases hit KelpDAO and Drift.
Bridge attacks represent a persistent structural vulnerability in crypto infrastructure. These protocols lock assets on one chain and mint wrapped representations on another, creating a honeypot for attackers. May's $328.6 million in losses suggests that security improvements have not kept pace with the value flowing through bridges. Users and liquidity providers face ongoing execution risk.
The April data provides context. With 30 incidents, the month set a frequency record. KelpDAO and Drift suffered the largest individual losses, though PeckShield did not disclose exact figures for those two protocols. The pattern suggests that attackers are targeting both new and established bridges, exploiting code flaws rather than private key compromises.
The mechanism is straightforward. A bridge holds a pool of locked collateral – often Ethereum (ETH) or stablecoins – and issues equivalent tokens on a destination chain. A successful exploit drains that pool, leaving wrapped tokens unbacked. Liquidity on the destination chain evaporates immediately, and users holding the wrapped version face de-pegging or frozen withdrawals.
PeckShield's data shows that bridge attacks are not slowing. May's eight incidents hit a range of protocols, though the report does not name the affected bridges. Without that transparency, users must rely on audit history, insurance fund size, and withdrawal delay mechanisms. The safest approach may be to limit bridge usage to established, battle-tested protocols with a track record of no major exploits.
For traders moving assets between networks, the immediate question is which bridges remain trustworthy. The broader market implication is that cross-chain activity carries a premium for security risk. As long as bridges remain the primary method for moving assets between networks, the attack surface will stay large. Native swaps and centralized exchange cross-chain transfers offer alternatives, each with trade-offs in speed, cost, or custody.
The next decision point is whether the frequency of bridge attacks accelerates adoption of alternative interoperability solutions, such as atomic swaps or layer-zero protocols. If May's losses trigger a shift in user behavior, the bridge ecosystem may consolidate around fewer, more secure protocols. If not, the industry will continue to absorb hundreds of millions in losses per month.
For ongoing coverage of crypto security trends and market impact, see AlphaScala's crypto market analysis and the Ethereum (ETH) profile.
Prepared with AlphaScala research tooling and grounded in primary market data: live prices, fundamentals, SEC filings, hedge-fund holdings, and insider activity. Each story is checked against AlphaScala publishing rules before release. Educational coverage, not personalized advice.