CertiK said confirmed exploit and phishing incidents across the Web3 sector caused about $766.4 million in losses in September 2026, making it the costliest month of the year so far. The month also recorded the highest number of incidents seen in 2026, according to the security firm’s data. Among the largest individual cases, Bitget accounted for $387.5 million in losses, while Liquid Network saw about $318.6 million, ranking first and second for the month. By category, centralized exchanges, or CEXs, posted the largest losses, followed by mainnet-related incidents. CertiK also said about $270.6 million in funds had been recovered or frozen. The figures were published by CertiK and cited by Foresight.
Fresh data from CertiK says confirmed exploit and phishing incidents across the Web3 industry caused roughly $766.4 million in total losses in September 2026. That was the biggest monthly loss logged this year. And September also saw the highest incident count of 2026.
Looking at single cases, Bitget took losses of $387.5 million. Liquid Network came in at about $318.6 million. Those were the two biggest cases of the month.
On the category side, centralized exchanges (CEXs) were hit hardest, with mainnet-related incidents next. CertiK added that about $270.6 million in funds had been recovered or frozen.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
