Losses from exploits of crypto platforms fell to $68.3 million in May, down almost 90% from the $650 million lost in April, says crypto security company CertiK.

“After a particularly bad April, May is now the third month of 2026 to record losses under [$100 million],” CertiK posted to X on Sunday.

Around $2.6 million of the total crypto stolen in May was due to phishing attacks, while roughly $9.4 million was recovered or returned, it added.

Excluding the $1.5 billion hack on Bybit in February 2025, April saw the highest losses recorded in a month since March 2022, with the largest loss that month coming from a $291 million exploit of Kelp DAO.

An exploit of Verus Protocol’s cross-chain bridge on May 18 was the largest in terms…