#security 📉 Cryptocurrency losses fell by 87%, but it’s too early to relax!
The Nominis report for February 2026 brought mixed news. On the one hand, the amount of stolen funds decreased sharply to $49.3 million (versus $385 million in January). On the other hand, hackers have changed their strategy: now they are not hunting for code errors, but for you.
🔍 Key figures and events of February:
• Step Finance ($40 million): The biggest loss of the month. Hackers hacked the project management devices, gaining access to private keys. The result was the closure of the platform and related services (SolanaFloor, Remora).
• CrossCurve ($3 million) and YieldBlox ($10.2 million): Rare cases of technical exploits in the logic of smart contracts.
• The Legacy of Pig Butchering: The US Department of Justice Seizes Over $61 Million in Investment Fraudulent Schemes
⚠️ Top Trend: “Hacking the Human”
The report clearly shows that blockchains are getting more secure, but humans are not. The main methods used by attackers today are:
1. Phishing 2.0: Creating fake token vesting tools that target project admins.
2. Address Poisoning: Changing addresses in your transaction history so that you accidentally copy a scammer’s wallet.
3. Malicious Approvals: Signing transactions that give attackers full permission to withdraw your tokens.
4. Offline Security: $5 million stolen in South Korea just because a seed phrase accidentally got in a photo.
💡 How to avoid becoming a statistic?
• Verify every signature: Don't sign Approve unless you're 101% sure of the source.
• Device hygiene: Use separate devices for crypto transactions.
• No photo seed phrases: Even if it's "just for yourself" in a private album.