The Web3 security firm’s stablecoin report flagged both technical and compliance risks, citing a $291 million Kelp DAO wallet leak and more than $110 billion in A7A5 on-chain volume.
Stablecoins are facing a dual set of risks spanning code vulnerabilities and regulatory compliance, CertiK said in its 2026 Stablecoin Threat Report. The Web3 security firm said cross-chain bridge incidents have caused more than $328 million in losses since 2026, including the April Kelp DAO wallet leak of $291 million. The report also highlighted ruble-backed stablecoin A7A5, saying its on-chain volume since launch has exceeded $110 billion and that it is being used to build a sanctions-resistant settlement network, underscoring that stablecoin risk can extend beyond smart contract security to questions around how these tokens are used and monitored.