Crypto Security

crypto securi

2026-10-01 10:51:00

Crypto hack losses topped $766 million in September, the highest monthly total of 2026

Crypto losses from hacks and exploits exceeded $766 million in September 2026, making it the worst month of the year so far, according to Cointelegraph, which cited data from several blockchain security firms. PeckShield counted 55 major incidents with roughly $766.5 million in losses, while CertiK recorded 97 incidents totaling about $768.4 million. Both sets of figures showed a sharp increase from August. Two cases accounted for most of the monthly damage: the theft of about $388 million from Bitget and a roughly $320 million exploit involving Liquid Network. More than $270 million tied to the Liquid Network incident was later returned. Other notable cases included losses of about $7.8 million affecting Safe Wallet users, around $6 million at D’CENT, and roughly $5.9 million at Duelbits. CertiK also said its security leaderboard has logged 656 security incidents so far in 2026, with cumulative losses reaching about $2.68 billion.

70

Bitget

2026-10-01 13:35:47

Bitget’s $387.5M hack drove Q3 crypto security losses to $1.26 billion, CertiK says

Crypto security losses hit $1.26 billion in the third quarter of 2026 across 247 incidents, according to blockchain security firm CertiK, with September alone contributing about $769 million. The sharp rise was largely tied to Bitget’s $387.5 million hack, which represented roughly 31% of all losses recorded during the quarter and ranked as the largest incident in CertiK’s Q3 dataset. Q3 losses were up 53.9% from $819.4 million in Q2, while the number of incidents rose about 13%, from 219 to 247. CertiK also said around $273 million from September incidents was frozen or returned, bringing adjusted losses for the month to $495.3 million. During September, exploits accounted for $734 million in losses across 58 cases, or nearly 96% of the monthly total. Bitget said it detected unauthorized transfers from some hot wallets on Sept. 24 and suspended withdrawals. The exchange said attackers exploited a vulnerability in a third-party security product, obtained internal credentials and forged withdrawal commands.

60

CertiK

2026-10-01 11:46:56

CertiK says Q3 2026 saw 247 security incidents with roughly $1.26 billion in losses

CertiK’s security dashboard recorded 247 security incidents in the third quarter of 2026, according to a ChainCatcher news brief. That figure was up 12.8% from the previous quarter. Total losses for the quarter were about $1.26 billion. CertiK’s data also showed that the Q3 loss figure was 53.9% higher than the $819.4 million reported for the second quarter. The update provides a quarter-over-quarter snapshot of incident count and financial damage based on CertiK’s tracking data.

60

Bitcoin

2026-10-01 11:31:49

Crypto lost $1.26 billion to hacks in Q3 as bitcoin rose 40% and ETF inflows kept building

Crypto markets closed the third quarter with a split screen. On one side, bitcoin ended Q3 at $83,784.92, up 40% for the quarter and ahead of major asset classes even as Treasury yields climbed to their highest levels in more than two decades. Billions of dollars flowed into exchange-traded funds tied to BTC and other tokens, and several altcoins posted even stronger gains. On the other side, security losses kept piling up. According to data tracked by crypto security firm CertiK and cited by CoinDesk, the industry recorded 247 security incidents in the third quarter, with total losses of $1.26 billion. Year-to-date losses reached $2.68 billion. September was the worst month of 2026 so far, with 99 incidents, the highest monthly count since February 2025, and $768.5 million stolen. CoinDesk also pointed to a weak insurance backstop. CoinGecko’s State of Crypto Security Report 2026, released at the end of August, put on-chain crypto insurance coverage capacity at $130.2 million, down 20.2% from $163 million a year earlier. Security firm Blockaid, meanwhile, warned that AI agents could open a new attack path, especially through prompt injection. The quarter’s market strength, the report suggests, has not removed one of crypto’s oldest vulnerabilities.

60

crypto securi

2026-10-01 04:44:33

Crypto hacks topped $768 million in September, marking the worst month of 2026

September was the costliest month of 2026 for crypto hacks and exploits, with two blockchain security firms putting total losses above $766 million. PeckShield said 55 major incidents led to $766.5 million in stolen funds, while CertiK counted 97 incidents and estimated losses at $768.4 million. The biggest cases were the $388 million Bitget breach and the $320 million Liquid Network hack, although reports said more than $270 million from the Liquid Network incident was later returned. Other attacks during the month hit Safe Wallet, DCENT and Duelbits, with losses of $7.8 million, $6 million and $5.9 million. CertiK also said its security dashboard has logged 656 incidents so far in 2026, with cumulative losses reaching $2.68 billion. The firm said September showed how quickly the threat environment can change.

70

crypto securi

2026-10-01 04:51:20

Crypto losses topped $768 million in September, with Bitget and Liquid Network accounting for most of the damage

The crypto sector recorded its worst month of the year for hacks and exploit-related losses in September, according to figures cited by Odaily and sourced from Cointelegraph. Blockchain security firm PeckShield counted 55 major incidents during the month, with stolen funds totaling $767 million. CertiK, using a different methodology, logged 97 incidents and estimated total losses at $768 million. Both sets of figures were described as sharply higher than in August. Two incidents made up the bulk of the losses. Bitget suffered a hack that led to $388 million in losses, while Liquid Network was hit for $320 million. In Liquid Network’s case, more than $270 million has already been returned. Other named incidents included Safe Wallet, which lost $7.8 million, DCENT with $6 million in losses, and Duelbits with $5.9 million. CertiK’s security dashboard also shows that 656 security incidents have occurred so far in 2026, with cumulative losses reaching $2.68 billion. The report presents September as the most severe month this year for major crypto security breaches and exploit events.

70

Lazarus Group

2026-09-30 01:10:57

Lazarus and North Korea’s crypto theft network has now been tied to nearly $7.8 billion

The September 2026 Bitget hack has pushed North Korea-linked cyber activity back to the center of the crypto security debate. Bitget first disclosed losses of about $351.6 million, then revised the confirmed amount of transferred assets to $387.5 million. TRM Labs said parts of the laundering trail overlapped with earlier North Korea-linked attacks including Bybit and AFX Bridge, while Elliptic assessed a North Korea connection as “highly likely.” That latest case sits inside a much longer record. Over the past decade, investigators, law enforcement agencies, and security firms have used names such as Lazarus Group, BlueNoroff, APT38, TraderTraitor, Citrine Sleet, Andariel, and Famous Chollima to describe overlapping North Korean cyber units tied to the Reconnaissance General Bureau, or RGB. The naming varies by firm, but the operational pattern is consistent: financial theft, crypto-focused intrusions, malware campaigns, supply-chain compromises, espionage, and covert workforce infiltration. Publicly attributed crypto thefts linked by governments and law enforcement to North Korean actors exceed $3.1 billion based on major named cases alone, including Ronin Bridge, Harmony Horizon Bridge, Atomic Wallet, Stake, DMM Bitcoin, and Bybit. Broader blockchain-tracing estimates are much higher. Chainalysis put the cumulative total at no less than $6.75 billion by the end of 2025, and with the still-unresolved Bitget case added to the picture, the running total cited in the source article approaches $7.8 billion as of September 2026.

800

Crypto Securi

2026-09-30 03:00:58

Crypto security’s center of gravity is shifting from code bugs to permissions and trust chains

A TechFlowPost article argues that the biggest security failures in crypto are no longer centered on undiscovered smart contract bugs. Instead, recent losses have clustered around permissions, signing flows, RPC dependencies, supply chains, backend approval systems, and the people trusted to operate them. The piece points to four major incidents — Bybit, Bitget, KelpDAO, and Drift — as evidence that attackers are increasingly bypassing code and going after the trust assumptions wrapped around it. In the article’s framing, the industry has spent years hardening contracts, adding multisigs, separating cold wallets, and expanding audits, yet funds still disappeared because the systems approving transactions were fed false data or because authorized signers were manipulated into approving malicious actions. It also argues that AI is changing the economics of attacks by making social engineering, malware delivery, identity fabrication, and large-scale contract scanning cheaper and easier to automate. The article does not say audits are useless. Its point is narrower: audits cover a shrinking share of the places where money is actually lost. As attack surfaces move outward, the proposed response shifts as well — toward permission governance, infrastructure diversity, runtime controls, continuous monitoring, and insurance structures that price security architecture directly.

130