
Immunefi said crypto hacks cost $110M in July even as bug bounties blocked 374 threats. Audit competitions found 6.2 serious bugs per engagement vs 1.5 in private audits.
Crypto losses from hacks reached roughly $110 million in July, Immunefi said. Bug bounty programs blocked 374 threats during the month, up from 317 in June and 339 in May.
Researchers received $2.32 million for valid findings, according to the cybersecurity platform. Confirmed and paid bounty reports increased 18%.
Immunefi said the July figures show a persistent gap between vulnerabilities discovered by researchers and those exploited first by attackers. While bounty programs can reduce losses by rewarding responsible disclosure, the $110 million stolen during the month makes clear that exploitable flaws remain a major cost for crypto protocols and their users.
Audit competitions found an average of 6.2 serious bugs per engagement. Private tier-1 audits found 1.5 per engagement, Immunefi said.
Identifying a critical vulnerability through an audit competition cost an average of $6,548, Immunefi estimated. A private tier-1 audit cost about $66,000. When attackers found the vulnerability first, the average cost hit $24.5 million.
The cost difference gives projects a financial reason to spend more on competitive security reviews and bug bounties, according to Immunefi.
Immunefi's cumulative researcher payouts reached $143.1 million in July, up from $140.8 million in June. The increase shows that protocols continue to spend heavily on external researchers who identify vulnerabilities before they are exploited.
The volume of confirmed bounty reports continues to grow, converting more vulnerabilities into researcher payouts rather than exploit losses. Immunefi said 374 threats were prevented in July, compared with 317 in June and 339 in May.
Drafted by a large language model from the source reporting linked above, then screened by automated publishing checks. It is not read by a journalist before publication. Some articles cite our Alpha Score. Verify prices and figures against the original source. Educational coverage, not personalized advice.