September was the costliest month of 2026 for crypto security incidents, with independent estimates clustering near $768 million.
PeckShield counted 55 major incidents and $766.5 million in stolen funds. CertiK recorded 97 incidents and estimated $768.4 million in losses, according to Cointelegraph’s review of both datasets. cointelegraph.com
The Bitget breach and Liquid Network exploit dominated the total. Bitget now reports approximately $388 million transferred from its hot and warm wallets. The Liquid incident involved about $320 million, although more than $270 million was later returned.
That concentration matters when interpreting the monthly increase. September did not simply produce a uniform rise in losses across every protocol category. Two unusually large events accounted for most of the gross damage.
CertiK’s running total reached approximately $2.68 billion across 656 incidents in 2026. The security company’s earlier first-half report identified wallet compromise as the most financially destructive attack category during the first six months.
Gross loss figures can overstate final economic damage when funds are returned, frozen or recovered. They can also differ between analytics firms because of varying definitions for phishing, scams, compromised personal wallets and protocol exploits.
TOKEN RECON ASSESSMENT
September’s central warning is concentration risk. One compromised exchange control system or one infrastructure failure can erase more value than dozens of smaller smart-contract exploits.
Security analysis must therefore extend beyond contract audits. Privileged credentials, third-party security software, withdrawal command generation and incident containment now deserve the same scrutiny as onchain code.
Sources
Cointelegraph: Crypto hacks exceed $768 million in September
