TLDR
- Crypto security losses reached $1.26 billion across 247 incidents in Q3 2026
- September was the worst month of 2026, with $768.5 million stolen across 99 incidents
- The Bitget exchange hack accounted for $387.5 million, about 31% of Q3 losses
- On-chain crypto insurance coverage dropped to $130.2 million, down 20.2% from last year
- Bitcoin closed Q3 up 40% even as hack losses climbed alongside the rally
Crypto security losses climbed to $1.26 billion in the third quarter of 2026. The figure comes from data tracked by blockchain security firm CertiK.
🚨 Crypto hackers stole $766 MILLION in September, the WORST month of 2026 so far.
That's up about 462% from August's $136.3 MILLION, across 55 major hacks, per PeckShield.
Most of the losses came from two incidents, at Liquid Network and Bitget.
Liquid Network has since had… pic.twitter.com/k9cNU8o1FE
— Coin Bureau (@coinbureau) October 2, 2026
This marks a 53.9% jump from the second quarter, when losses totaled $819.4 million. The number of security incidents also rose, increasing from 219 to 247.
September was the worst month of the year so far. Hackers stole $768.5 million across 99 incidents, the most since February 2025.
Bitget Hack Leads Quarterly Losses
The biggest single incident of the quarter hit crypto exchange Bitget. Attackers stole $387.5 million from the platform.
That hack alone made up about 31% of all Q3 losses. Bitget detected unauthorized transfers from its hot wallets on September 24 and suspended withdrawals soon after.
The company said attackers exploited a flaw in a third-party security product. This let them obtain internal credentials and forge withdrawal commands.
Other large incidents followed close behind. Liquid Network lost $319 million in a September 6 exploit.
Tectonic lost $120 million. Coldcard suffered a theft of $112.7 million.
Across September alone, about $273 million was frozen or returned to victims. That left adjusted losses of $495.3 million for the month.
Exploits made up nearly all of September’s losses. They accounted for $734 million, or about 96% of the total, across 58 separate incidents.
Insurance Coverage Shrinks as Risks Grow
The crypto industry’s safety net for these losses remains small. CoinGecko’s State of Crypto Security Report, released in late August, put total on-chain insurance coverage at $130.2 million.
That figure is down 20.2% from $163 million a year earlier. Coverage is shrinking even as losses rise.
Despite the hacks, bitcoin had a strong quarter. The price closed Q3 up 40%, outperforming other major assets.
Investors also poured billions of dollars into exchange-traded funds tied to bitcoin and other tokens. Analysts pointed to this as a sign of a new bull run.
Industry voices say the hack losses remain small next to ETF inflows. Most institutions are buying through regulated funds and avoiding decentralized finance protocols.
Still, security experts warn the pattern raises questions. Repeated exploits can affect how regulators and custodians view the industry.
Artificial intelligence is also becoming a factor in these attacks. AI tools can now scan smart contracts for weaknesses faster than human engineers could before.
Security firm Blockaid expects more incidents involving AI agents going forward. Prompt injection, where hidden commands trick an AI system into acting against its user, is seen as the most likely method.
For now, the $1.26 billion in Q3 losses stands as the clearest record of the damage. Losses for all of 2026 have reached $2.68 billion so far, according to CertiK’s tracking.
