Cryptocurrency security continues to deteriorate into 2026’s second quarter, with incident counts already marking the period as the most-hacked quarter on record. Unfolded’s analysis—based on DefiLlama hack data—tracks 83 exploits targeting crypto protocols so far in Q2 2026.

Even with the spike in attacks, the quarter’s total losses of $755.3 million are still far below the record loss quarter of Q4 2020, when hacks totaled $3.56 billion. The contrast between rising exploit frequency and comparatively lower aggregate damage is becoming a defining feature of the current cycle.

Key takeaways

• Q2 2026 has logged 83 protocol exploits already, the highest incident count for any quarter in the dataset cited by Unfolded.
• Total stolen value so far stands at $755.3 million—materially lower than Q4 2020’s $3.56 billion, which remains the costliest quarter on record.
• Bridge attacks drove the quarter’s losses, with $351 million stolen via cross-chain bridges—led by the LayerZero OFT-related KelpDAO incident.
• Industry risk experts point to a mismatch between faster protocol redesign and the complexity of robust risk controls.
• Some security stakeholders argue attacker capabilities are improving amid a broader shift in the cyber landscape, while DeFi value appears to be smaller than in prior peaks.

More hacks, less value stolen than the 2020 high

The numbers underscore a persistent problem: crypto remains an attractive target, but the payoff per exploit may be changing. Unfolded’s incident-based tally shows the quarter is already number one by frequency, while the $755.3 million in stolen funds so far remains below the all-time high-water mark from Q4 2020.

At the top end of Q2’s damage, two single incidents dominate the current quarter’s storyline. KelpDAO’s $293 million hack and Drift Protocol’s $280 million exploit were the largest attacks reported so far, together accounting for a substantial portion of the quarter’s total losses.

Exploit activity appearing “more frequent” with lower total losses has also been attributed to the size of the available target pool. Dmytro Tarasiuk, product director at risk intelligence platform CORE3 and crypto security rating platform CER.live, suggested to Cointelegraph that total value locked (TVL) in DeFi appears to have fallen sharply—citing a drop from $164 billion before the Oct. 10 liquidation event to about $73 billion at the time of reporting. If less value is deployed, attackers can still run exploits, but the maximum extractable value may be constrained.

Tarasiuk also pointed to a structural vulnerability in how protocols are built. In his view, the industry’s most urgent weakness is that teams often re-engineer systems faster than they can properly align them with the underlying complexity of risk management. He described operational practices that can multiply exposure, including setups where a three-of-six multisig exists alongside key storage arrangements that concentrate risk—such as keeping multiple keys on the same device—creating additional attack surface beyond pure smart-contract logic.

Bridge exploits take the lead as the primary attack vector

Cross-chain bridges were the dominant technique in Q2 2026. According to the DefiLlama hack breakdown used in Unfolded’s analysis, $351 million in value was hacked through bridges during the quarter.

Within that category, the LayerZero OFT bridge exploit tied to the KelpDAO incident accounts for more than 38% of all value stolen in Q2. The same DefiLlama-based breakdown attributes 37% of losses to compromised admin attacks and fake token price manipulation, while private key compromises represented 5.66%.

This allocation is important for investors and protocol operators because it helps narrow where defenses must be strengthened first. If bridges remain the largest source of stolen value, then monitoring and hardening of cross-chain verification, administrative pathways, and token integrity mechanisms becomes a priority—not just after an exploit, but as part of ongoing control design.

The quarter also shows that bridge risk is not confined to a single ecosystem. Earlier coverage noted that Ethereum layer-2 network Taiko was the latest to experience a bridge-related incident, where hackers stole $1.7 million after compromising Taiko’s chain state verification mechanism.

Notable incidents highlight recurring weaknesses across ecosystems

Beyond bridges, the quarter included several high-profile thefts that point to the breadth of attack methods across DeFi. Cointelegraph reports that Humanity Protocol lost $36 million on June 8, while THORChain suffered an exploit of $10.7 million on May 15. The pattern suggests attackers are willing to probe different protocol architectures—from liquidity networks to cross-chain integrations—rather than concentrating exclusively on one style of vulnerability.

More examples from the same period also reinforce how adversaries can monetize weaknesses that extend beyond active code paths. Cointelegraph noted two exploits targeting Aztec Connect’s abandoned smart contracts, with $2.1 million stolen in one incident and $1.3 million stolen in another tied to decentralized exchange Raydium earlier in June. These cases matter because they indicate that “abandoned” or legacy components still have security implications, particularly when they remain discoverable or externally reachable.

Security debate turns to AI-enabled attacker advantage

As exploit frequency rises, the industry is continuing to debate whether recent advances in artificial intelligence have changed how attacks are conducted. Cointelegraph reports that Mitchell Amador, CEO of bug bounty platform Immunefi, told the outlet in a recent interview that the proliferation of new AI models shifted the cybersecurity playing field in favor of attackers.

Amador described this as a “vulnerability apocalypse,” linking the resurgence in exploits to the increased ability to identify and exploit weaknesses more efficiently. While that framing is not quantified in the figures cited here, it provides context for why Q2 2026’s incident count can rise even if total stolen value does not track proportionally with frequency.

For participants in crypto markets—whether traders managing exposure to risky venues, users choosing custody and on-chain interactions, or builders deciding where to spend engineering time—the takeaway is that risk is evolving on multiple fronts. DeFi’s shrinking TVL may reduce the size of the loot in aggregate, but attacker persistence and rapid exploitation cycles can still produce outsized disruption, especially where bridge infrastructure or operational controls are fragile.

Going forward, readers should watch whether bridge-related losses remain dominant in subsequent quarters, and whether any recovery in DeFi TVL leads to both higher incident counts and larger absolute losses—or if the current “more frequent, less total value” pattern persists as protocols adapt and security budgets shift.

TLDR

• Shares of Micron jumped 5.58% following announcement of comprehensive Anthropic collaboration.
• Partnership encompasses memory engineering, supply contracts, and enterprise Claude implementation.
• Agreement positions Micron to back Anthropic’s expanding data center needs.
• Joint research will focus on efficiency, performance metrics, and AI workload optimization.
• The memory chipmaker participated as strategic investor in Anthropic’s Series H financing.

Shares of Micron Technology climbed 5.58% to reach 1,197.26 following disclosure of an extensive strategic collaboration with Anthropic. The stock added 63.27 points as investors responded to the multifaceted agreement that reinforces Micron’s foothold in the rapidly growing AI infrastructure sector. The comprehensive deal encompasses collaborative product engineering, hardware supply arrangements, enterprise AI adoption, and Micron’s participation in Anthropic’s recent financing.

Micron Technology, Inc., MU

Partnership Focuses on Next-Generation AI Memory Solutions

The collaboration will see both organizations cooperate on engineering memory and storage architectures optimized for intensive artificial intelligence applications. Joint research efforts will analyze component performance across Anthropic’s computational environment. This work encompasses model training, inference operations, massive data handling, and distributed computing scenarios.

Micron will deliver high-bandwidth memory modules, DRAM technology, and advanced solid-state storage for Anthropic’s expanding computational demands. These solutions enable accelerated data throughput while minimizing energy consumption throughout expansive server farms. Consequently, the alliance directly aligns Anthropic’s infrastructure roadmap with Micron’s product innovation strategy.

Joint research will additionally explore how memory, storage, computing processors, and supporting infrastructure interact within AI systems. Such investigations may yield improvements in overall system efficiency, power consumption profiles, and inference cost economics. Simultaneously, Micron obtains valuable insights into the practical requirements of cutting-edge AI computing platforms.

Multi-Year Supply Deal Addresses Growing Infrastructure Needs

The partnership includes a supply arrangement providing Anthropic with Micron’s data center memory and storage portfolio. This agreement ensures Anthropic secures critical components necessary for its ambitious infrastructure buildout. The deal simultaneously establishes a sustained revenue stream for Micron connected to Anthropic’s long-term capacity expansion.

Memory component demand has surged as technology enterprises construct massive computing facilities dedicated to artificial intelligence applications. High-bandwidth memory has emerged as particularly critical since next-generation accelerators depend on rapid access to enormous data volumes. Memory manufacturers increasingly influence the architecture of modern AI computing infrastructure.

Micron participates across DRAM, NAND flash, high-bandwidth memory, and enterprise storage segments. The corporation delivers products serving data centers, smartphones, personal computers, automotive systems, and industrial applications. Nevertheless, AI infrastructure has emerged as a primary growth driver within its data center business unit.

Micron Implements Claude Throughout Global Operations

Micron has integrated Anthropic’s Claude AI assistant throughout its engineering divisions, manufacturing facilities, software development, and various business functions. The technology supports application development efforts and enables greater automation of internal workflows. The company applies these models to diverse technical and operational challenges across its worldwide operations.

This implementation extends the relationship beyond hardware collaboration and component procurement. Micron anticipates productivity gains while accelerating development cycles and manufacturing workflows. Moreover, the arrangement provides Anthropic with a significant enterprise client within the semiconductor sector.

Under the strategic framework, Micron participated in Anthropic’s Series H financing round. Specific investment amounts and financial details were not publicly disclosed. Regardless, this equity stake connects Micron’s strategic interests with Anthropic’s infrastructure scaling trajectory.

Stock Advances Before Quarterly Results Release

MU shares climbed consistently after the partnership disclosure and neared the 1,200 price level during trading. The equity advanced 63.27 points, marking a 5.58% gain from prior levels. This upward movement occurred just days ahead of Micron’s June 24 quarterly earnings report.

The market reaction highlighted the deal’s multiple dimensions spanning component demand, collaborative engineering, and enterprise software deployment. Micron has established a direct position in supplying and enhancing infrastructure powering Anthropic’s AI systems. The supply component may generate substantial data center revenues as Anthropic scales its computational capacity.

Micron manufactures memory and storage technologies marketed under its Micron and Crucial brand names. Product lines span DRAM, NAND flash, NOR memory, solid-state drives, and high-bandwidth memory offerings. The Anthropic collaboration now positions these products within one of the fastest-growing markets for advanced AI computing infrastructure.

Multiple XRP (XRP) indicators have hinted at a potential 25% relief rally in the coming weeks.

Key takeaways:

• XRP price looks poised to print a rare death cross with a rebound setup toward $1.40.
• XRP may also be forming a broader bottom, eyeing a larger rally toward $8 in the coming months.

XRP’s mean-reversion setup may send price toward $1.40

As of Monday, XRP’s 20-week exponential moving average (20-week EMA, green) near $1.40 was on the verge of crossing below its 200-week EMA (blue) near $1.39.

A confirmed weekly close below the longer-term average would mark a rare death cross between the two trend gauges.

XRP/USD weekly chart. Source: TradingView

In the past, XRP’s previous 20-week/200-week EMA crosses were followed by relief rebounds back toward the 200-week EMA. That includes a roughly 20% recovery in 2019 and a larger 82.7% rebound in 2022.

A similar mean-reversion move this time would put the $1.39–$1.40 area in focus, implying roughly 23%–25% upside by July from XRP’s current price near $1.13.

XRP’s weekly relative strength index, or RSI, was also hovering just above the oversold threshold of 30 on Monday.

The RSI measures whether an asset is becoming overheated or overly sold. Readings near 30 typically suggest that sellers may be running out of momentum, raising the odds of a short-term rebound even if the broader trend remains weak.

XRP shorts create $1.40 price magnet

Binance XRP/USDT liquidation heatmap data further supports the relief-rally setup.

The chart shows a heavier concentration of short liquidation liquidity above the current price than long liquidation liquidity below it. The largest upside cluster, of around $236.5 million, appears around the $1.37–$1.40 zone, according to CoinGlass data.

XRP/USDT one-month liquidation heatmap. Source: CoinGlass

Liquidation heatmaps often highlight where prices may move to flush out crowded leveraged positions.

Short sellers positioned above the spot price could be forced to buy back their exposure if XRP starts rebounding from the current $1.13 price levels, adding fuel to a move toward the $1.39–$1.40 area.

XRP may rebound toward $8: Analyst

A separate long-term chart from analyst Cryptollica suggests that XRP’s next rebound could be part of a broader bottoming setup.

The chart shows XRP’s 10-day RSI hovering near the low-30s, close to the level that has historically appeared around major accumulation phases.

XRP/USD 10-day chart. Source: TradingView

“In 13 years, XRP has only been this washed out 3 times,” Cryptollica said in a Sunday post, adding:

“The first 2 times, the crowd laughed, ignored it, and only understood the setup after price had already left.”

Cryptollica’s chart also shows XRP trading above the lower boundary of a giant ascending channel, a long-term support line that has connected multiple macro lows since 2017.

Related: XRP whale wallet withdrawals top 720M as risk-adjusted return data points to opportunity

That trend line currently sits near $0.75, meaning XRP could still see one more downside sweep before a larger recovery begins. In previous cycles, tests of this support area preceded major upside expansions.

XRP could first retest the channel support before entering a broader bull-market phase, with the channel’s upper boundary putting a long-term target near $8 in focus if the pattern plays out again.

Key Highlights

• ORCL shares declined 4.61% even as Baystate Health expanded its technology partnership.

• Baystate Health will deploy Oracle Health solutions across its Massachusetts care facilities.

• The partnership includes Oracle Health EHR and Clinical AI Agent technology.

• A unified digital platform will connect patients, providers, and administrative systems.

• The expanded agreement will facilitate Baystate’s upcoming Mercy Medical Center affiliation.

Shares of Oracle Corporation (ORCL) declined 4.61% to close at $175.79 on Wednesday, even after announcing a significant healthcare technology partnership with Baystate Health. The stock retreated from an early session peak near $184 before attempting a modest recovery late in trading. Baystate Health revealed intentions to broaden its use of Oracle technology throughout its extensive care delivery network.

Oracle Corporation, ORCL

ORCL Shares Experience Session-Long Pressure

Oracle stock encountered persistent selling pressure throughout Wednesday’s trading session, finishing $8.48 lower than the prior day’s close. The shares began the day near $182 but couldn’t sustain early gains. Downward momentum intensified during the afternoon, pushing the stock toward $175.

A brief rally materialized in the final trading hour, yet proved insufficient to reverse the day’s losses. Oracle concluded the session close to its intraday low despite announcing the expanded Baystate Health agreement. The price action indicated that positive healthcare news couldn’t offset broader selling interest in the stock.

Oracle delivers cloud-based software solutions, database management systems, infrastructure services, and healthcare technologies to a global customer base. The technology giant entered the healthcare sector significantly after completing its approximately $28.3 billion acquisition of Cerner in 2022. Oracle now integrates electronic health records, cloud computing infrastructure, data analytics, and workflow automation throughout its healthcare division.

Baystate Health Broadens Oracle Health Deployment

Baystate Health announced plans to significantly expand its Oracle Health technology implementation across hospitals, ambulatory clinics, and insurance operations. The Massachusetts-based integrated health system provides care to more than 800,000 individuals through five hospital facilities and over 80 outpatient medical practices. The organization also manages Health New England insurance, home healthcare services, and hospice care programs.

The healthcare system will implement Oracle Health EHR to centralize clinical documentation and enhance patient information accessibility. Additionally, Baystate will integrate Oracle Health Clinical AI Agent to automate documentation workflows and minimize administrative burden. The organization anticipates these systems will facilitate better data exchange among clinicians, hospital systems, outpatient practices, and insurance plan administrators.

Baystate will implement Oracle Health Patient Accounting to modernize billing operations and enhance financial process management. The solution leverages automation technology to streamline operational tasks and deliver improved visibility into financial performance across the health system. Oracle Health AI Data Platform will integrate clinical, financial, and insurance information within a unified data infrastructure.

Integrated System Facilitates Care Network Growth

Baystate Health will also launch Oracle Health Patient Portal as its centralized digital engagement platform. The portal will enable patients to access medical records, schedule appointments, and interact directly with healthcare providers. Patients will gain improved visibility into treatment protocols and additional healthcare services.

The broadened technology agreement will facilitate Baystate’s anticipated affiliation with Mercy Medical Center located in Springfield, Massachusetts. Baystate projects the corporate merger will become effective November 1, 2026, pending regulatory clearance. A consolidated Oracle platform will integrate Mercy Medical Center into Baystate’s broader healthcare delivery network.

Baystate employs approximately 13,000 healthcare professionals across its hospital facilities, medical practices, insurance division, and community health programs. The organization anticipates Oracle systems will decrease administrative burden for staff members and accelerate training processes in outpatient environments. Nevertheless, Oracle shares concluded Wednesday’s session with substantial losses despite the expanded healthcare technology collaboration.

Strategy, the best-known corporate Bitcoin holder, has continued adding to its Treasury and bolstering its liquidity at the same time. According to a Monday 8‑K filing with the U.S. Securities and Exchange Commission, the company purchased an additional 520 Bitcoin for $34.9 million between June 15 and Sunday, bringing its total holdings to 847,363 BTC.

The same filing also points to a larger funding goal beyond the Bitcoin purchase: Strategy said it added $300 million to its U.S. dollar reserve, bringing that buffer to $1.4 billion. Investors have been watching both moves closely because Strategy’s capital-raising approach—especially its use of equity sales—has become a reference point for other Bitcoin treasury companies.

Key takeaways

• Strategy bought 520 BTC for $34.9 million at an average price of $67,068 per Bitcoin, lifting total holdings to 847,363 BTC.
• Cumulative Bitcoin purchases now total $64.1 billion, implying an average acquisition cost of $75,651 per BTC.
• The company increased its U.S. dollar reserve by $300 million to $1.4 billion, with the balance including expected proceeds from unsettled ATM share sales.
• Strategy’s latest funding came from sales of its Class A common stock via its at-the-market (ATM) program, with $335.5 million raised during the reporting period.
• Strategy’s perpetual preferred stock (STRC), designed to trade around $100, slipped below $90 last week and remained volatile alongside MSTR shares.

New Bitcoin buy and updated treasury math

Strategy’s latest disclosed purchase appears as part of its ongoing Bitcoin accumulation program. In the 8‑K filing, the company states that it bought 520 BTC for $34.9 million during the period from June 15 through Sunday. The average price works out to $67,068 per Bitcoin.

That addition expands Strategy’s Bitcoin treasury to 847,363 BTC. Strategy also provided updated aggregate figures: its cumulative purchases total $64.1 billion, resulting in an average acquisition cost of $75,651 per Bitcoin. Those averages matter because they shape how investors think about the downside resilience of the company’s balance sheet and how efficiently Strategy is acquiring Bitcoin relative to prevailing market levels.

Beyond the immediate purchase, the filing underscores that Strategy continues to pair accumulation with liquidity management—an approach that can be as important as the Bitcoin number itself when corporate financing conditions or market volatility change.

Liquidity build: $300 million to the USD reserve

Alongside the Bitcoin purchase, Strategy said it added $300 million to its U.S. dollar reserve, raising the total to $1.4 billion. The company’s statement on X aligns with the 8‑K details, which specify that the USD reserve figure includes expected cash proceeds from its at-the-market (ATM) share sales that had not yet settled.

Strategy characterizes the reserve as a tool to support credit-related obligations, including dividend payments and debt coverage. In the 8‑K, the company said it plans to keep replenishing the USD reserve over time based on market conditions, with the objective of supporting the credit quality of its Digital Credit securities.

For holders and traders, this matters because reserve levels can influence how comfortable markets feel about Strategy’s ability to meet obligations during periods when equity funding becomes more expensive or when crypto prices swing sharply.

ATM share sales supply the cash for both goals

Strategy’s latest funding mechanics, as described in the filing, rely on its Class A common stock sales through an ATM equity program. The company raised $335.5 million during the reporting period, and the proceeds were split between the Bitcoin purchase and reserve build.

Of the $335.5 million, Strategy used $34.9 million to buy 520 BTC and allocated $300 million to the USD reserve. This structure keeps Strategy’s treasury growth closely tied to equity-market access, rather than depending solely on direct crypto-related financing.

Strategy’s financing decisions tend to draw attention precisely because it is one of the most active corporate buyers of Bitcoin and the largest listed corporate Bitcoin holder. As the firm has scaled its approach, it has effectively created a playbook for other Bitcoin treasury companies that want to combine crypto exposure with a tradable equity base.

STRC and MSTR volatility returns to focus

While Strategy’s filings provide the fundamentals, market pricing has also been part of the narrative. Ongoing volatility in Strategy’s share complex has remained in focus, particularly after the company’s perpetual preferred stock STRC—intended to trade near $100—fell below $90 last week.

Market data cited in the report shows MSTR shares down 3.46% to $112.53 at Thursday’s close, ahead of Friday’s market holiday, based on Yahoo Finance data. STRC declined 0.46% to $88.59 at Thursday’s close, and it traded at $90.59 during Monday’s premarket session.

Bitcoin advocate Samson Mow commented on X that STRC has a “self-repairing mechanism” that activates when the security trades below its $100 reference level. He said the process includes a stop in issuing new shares through the ATM program when the price falls under that threshold, effectively limiting new supply. Mow also argued that lower prices can increase the relative yield for buyers versus their entry price, which may encourage demand and help move STRC back toward $100.

The substance investors are likely watching is whether the structure’s incentives translate into sustained stabilization as market conditions evolve. If STRC pricing continues to deviate materially from the intended reference zone, traders may focus less on the theoretical mechanism and more on how quickly the market absorbs limited supply and whether equity-market conditions remain supportive.

Why this funding package matters to Bitcoin markets

Strategy’s combination of new Bitcoin purchases and reserve replenishment is more than an internal balance-sheet update. For the wider market, it signals ongoing corporate appetite for Bitcoin, even as equity prices and preferred-share pricing swing. At the same time, the company’s reliance on ATM equity sales highlights a key dependency: continued BTC accumulation is increasingly tied to how quickly and cheaply Strategy can access public markets.

That linkage becomes especially relevant when the company’s own share-linked instruments—like MSTR and STRC—show volatility. The latest disclosures and market moves together reinforce a central theme for corporate Bitcoin: treasury strategies can be durable, but their execution depends on liquidity and funding channels that may fluctuate with sentiment and broader market conditions.

Next, readers should watch whether Strategy’s reserve build translates into steadier market confidence around its Digital Credit-related objectives, and whether STRC’s “self-repairing” incentives prove effective as its trading price interacts with the $100 reference level.

Main Street Finance’s stablecoin msUSD has depegged to $0.27, sparked by a post addressing the “shutdown of [its] third-party proof-of-reserves dashboard.”

The following day, the firm behind the dashboard in question, Accountable, announced it was terminating its asset verification services with msUSD’s issuer.

In classic DeFi fashion, the fallout appears to have led to a bank run on Altura’s USDT vault, leading to the firm deciding to close down the vault.

At least $8.5 million was withdrawn ahead of the announcement and before a sell-off of the AVLT vault token led to an 11% depeg.

The weekend’s depegs come on the back of ongoing troubles for DeFi stablecoins apxUSD and sUSDat, which are backed by Strategy’s struggling STRC.

Read more: Saylor distances himself from STRC-backed DeFi after stablecoin wobble

Main Street Finance: ‘Institutional-grade yield’

Late on Saturday, Main Street Finance published a long post to X reassuring users that it “remains fully backed,” calling the loss of its dashboard a “reporting issue, not a solvency issue.”

By the time of the post, the price of msUSD had already collapsed. It sat at around $0.12 after losing its $1 peg around six hours previously but has since rebounded to around $0.27 from a low of $0.06 in the early hours of Sunday morning (UTC).

The advance reaction led some to believe that “insiders… got the memo that they should take the available liquidity to get out.”

Then, on Sunday, RWA accounting firm Accountable announced that, following Main Street Finance’s failure to provide adequate proof of reserves, it was terminating its contract with the firm.

Others questioned Accountable’s lack of prior action, given that doubts over Main Street’s transparency were publicly raised back in April.

Accountable’s post positions it as “neutral verification infrastructure,” however it also claims it “did not retain an ongoing, source-level view of [Main Street’s] reserves,” raising concerns over the reliability of its data on other clients.