- Cryptocurrency hacks surged to $1.18 billion across 107 incidents in Q3 2026, with compromised suppliers and developer tools accounting for 77% of losses.
- The four largest exploits — including the $387 million Bitget hack and the $320 million Liquid Network breach — represented about 80% of total stolen value.
- Approximately 33% of stolen funds ($387 million) was returned or reversed, while exchanges and operators covered an additional $410 million from their own reserves.
Cryptocurrency hacks hit $1.18 billion across 107 recorded incidents in the third quarter of 2026, according to security firm Hacken. The report attributed 77% of losses — about $906 million — to compromised suppliers, developer tools, and publicly disclosed fixes that had not been deployed. The four largest incidents included the $387 million Bitget hack, the $320 million Liquid Network exploit, the $120 million Tectonic exploit, and a Coldcard firmware vulnerability tied to roughly $115 million in losses. This quarter was the most damaging since Q1 2025, when Bybit’s $1.4 billion loss to North Korea pushed the total to $1.6 billion.
Smart contract incidents were the most frequent attack vector, causing $228 million in losses across 71 events. The median loss across all incidents stood at $670,000, while 98 exploits each fell below $10 million.
About $387 million — roughly 33% of gross losses — was returned or reversed. Self-proclaimed “white hats” returned $272 million after the Liquid Network hack, representing about 85% of stolen value. Following the Tectonic incident, Cronos validators rolled back 114 minutes of settled blockchain history, reversing roughly $111.2 million of the $120.4 million in affected borrowing. Stablecoin issuers Circle and Tether froze about $340,000 tied to the Bitget theft. Operators covered an additional $410 million of user losses from their own funds — Bitget’s user protection fund covered $387 million, while Triple-A, Coinsbuy, and TAC repaid about $22 million. Approximately $384 million, or 32% of gross losses, was neither returned nor covered.
Hacken urged industry participants to strengthen Cybersecurity around third-party suppliers and external infrastructure that may fall outside audits. The firm also recommended expanding security reviews to include oracles, bridgers, custody systems, and signing authorities.
✅ Follow BITNEWSBOT on Telegram, Facebook, LinkedIn, X.com, and Google News for instant updates.
