$2.3B stolen, and the BTC is still hovering near 84,200. The market seems to treat hackers as an operating cost of the crypto industry—if you can’t see the pain, it doesn’t hurt.

But Bitget’s $351.6M is temporarily at the top of the list. The trouble isn’t the amount. It wasn’t that the contract was compromised, and it wasn’t that a hot wallet’s private keys leaked. Instead, the key backend of the wallet service was breached: forged transfer instructions were created, and funds were sent out from multiple chains. Once this layer was broken through, it’s like the office accounts office has been entered—someone not only got in, they also learned to imitate the signature.

Bitget says its protection fund can cover it and that withdrawals have been paused. I’d say that “it can be covered” is just a statement until compensation is actually completed. What you really need to watch is how long withdrawals stay halted and how quickly compensation happens. The size of the amount isn’t necessarily fatal—what’s closer to the real risk is when the liquidity “gap” gets tightened.

Liquid’s $319M is also on the list. With 86 major incidents, $2.3B, averaging fewer than three days for them to happen together. The market didn’t really respond—not because security is better, but more like it’s assumed that someone will eventually cover the fallout. That assumption may be the biggest weakness of all.