Crypto Theft Reaches $370M in January, Social Engineering Leads the Way

TLDR

• Crypto theft in January 2026 reached $370.3 million, marking a significant increase compared to previous months.
• The majority of the stolen funds came from a single victim who lost $284 million due to a social engineering scam.
• Phishing scams were responsible for $311.3 million of the total stolen amount, reflecting a major attack vector in the crypto space.
• The total stolen amount is the highest since February 2025, when a major hack led to the loss of $1.5 billion.
• In addition to social engineering and phishing scams, other major exploits included attacks on Step Finance, Truebit, and SwapNet.

In January 2026, the total value of cryptocurrency stolen through scams and exploits reached $370.3 million, marking a dramatic increase. This figure represents the highest monthly total in almost a year, with the stolen amount nearly quadrupling compared to January 2025. According to CertiK, a leading crypto security company, most of the stolen funds came from a single victim who lost $284 million due to a social engineering scam.

Massive Loss from Social Engineering Scam

CertiK reported that of the 40 exploit and scam incidents throughout January, a social engineering scam was the primary cause behind the largest theft. This attack alone led to the loss of $284 million, significantly driving up the overall theft amount for the month. The scam targeted an individual or organization with sophisticated tactics to gain access to sensitive crypto assets, resulting in a massive financial loss.

The incident highlights the growing threat of social engineering in the crypto space. Attackers have become increasingly skilled at manipulating their targets into divulging private keys or login credentials, allowing them to steal funds. Such scams have become a common attack vector, and the increase in such incidents reflects a broader trend in crypto theft.

Phishing Scams Dominate Crypto Theft

A large portion of the stolen funds in January came from phishing scams, which alone accounted for $311.3 million. Phishing remains one of the most prevalent tactics used by attackers to steal crypto assets. These scams typically involve tricking users into revealing sensitive information through fake websites or deceptive emails that appear legitimate.

With the rise of phishing schemes, crypto users are urged to remain vigilant and cautious when interacting with unsolicited messages or websites. CertiK’s report suggests that phishing remains a serious issue, as attackers continue to refine their techniques to increase their success rate. The growing scale of these attacks signals a critical need for enhanced security measures within the crypto ecosystem.

January’s Losses Mark a Record High

The total amount of stolen cryptocurrency in January 2026 is the largest since February 2025, when a major hack resulted in a loss of $1.5 billion. However, this year’s January losses are still concerning, as they represent a nearly fourfold increase compared to the previous year. CertiK’s data emphasizes that the crypto market is facing heightened security risks as attackers become more sophisticated in their tactics.

PeckShield, another crypto security company, also reported notable incidents in January, including the hack of Step Finance, which resulted in the loss of $28.9 million. This attack targeted the decentralized finance platform and compromised several of its wallets. Other significant exploits during the month include the $26.4 million attack on Truebit and a $13.3 million hack on SwapNet.

The number of crypto hacks in January 2026 showed a slight decrease compared to the same period last year. However, the total value lost still marked a significant rise from December 2025, with a more than 13% increase in losses. These figures highlight the persistent risk faced by users and platforms in the crypto space.

The post Crypto Theft Reaches $370M in January, Social Engineering Leads the Way appeared first on CoinCentral.