CertiK data showed that confirmed Web3 vulnerability attacks and phishing incidents caused about $766.4 million in total losses in September 2026, the highest monthly loss of the year and the month with the most incidents in 2026. According to Foresight News, Bitget lost $387.5 million and Liquid Network lost about $318.6 million, ranking first and second.

By category, centralized exchanges recorded the largest losses, followed by mainnet-related incidents. About $270.6 million in funds were recovered or frozen.