September became the most brutal month for crypto cybersecurity in 2026, with both PeckShield and CertiK reporting combined losses of over $766 million. Bitget and Liquid Network accounted for more than 90% of the total with two major cases, but Liquid had stolen funds worth more than $270 million returned. (Background recap: Bitget exchange was hacked for $350 million! Hot wallet attacks led to an emergency suspension of withdrawals, and the official pledged “full compensation through the protection fund.”) (Additional context: The stolen amount from Bitget was raised to $388 million! Assets on the Zcash and TRON networks were also included.) September was the worst month in 2026 for hacker attacks across the crypto industry. Two well-known blockchain security firms, PeckShield and CertiK, independently pointed to the same conclusion: single-month losses surpassed $766 million—the highest record so far this year. PeckShield reported 55 major cybersecurity incidents in September, totaling $766.5 million in losses; CertiK recorded 97 incidents with losses reaching $768.4 million. The gap came from differences in what kinds of incidents were included, but both show that attack frequency and scale in September rose sharply compared with August. Two super major cases consumed more than 90% of losses Bitget’s theft of $388 million was the most eye-catching event of September. SlowMist’s post-incident tracing said the attackers entered through a zero-day vulnerability from August 31, stole hot-wallet assets, and quickly distributed them across multiple chains. CertiK described this as the “most organized exchange attack to date in 2026,” showing highly professional on-chain money-laundering techniques. On the other hand, Liquid Network was hacked for $320 million, but there was a turnaround in the end: more than $270 million had been returned by white-hat parties, and the Bitcoin network was subsequently restarted. This recovered funding significantly reduced Liquid’s real losses and highlighted the importance of community coordination in crisis response. Medium- and small-scale attacks were also frequent In addition to the two super major cases, several medium and small-scale hacking incidents in September also drew attention. Safe Wallet lost $7.8 million, the Korean wallet DCENT was stolen for $6 million, and the casino platform Duelbits had $5.9 million taken. These attacks were far smaller than Bitget and Liquid, but they reflect how widespread hacking attacks are—not just targeting large exchanges; wallets, protocols, and platforms can all become targets. Losses for the year are nearing $2.7 billion, and the cybersecurity situation remains severe CertiK’s security dashboard shows that as of 2026, there have been 656 cybersecurity incidents with total losses of $2.68 billion. September’s $766 million accounted for nearly 30% of the annual total, a proportion that is also high in historical terms—indicating that the attack wave at the end of the third quarter this year is escalating. In its statement, CertiK said the September incidents were a “strong reminder that the threat landscape is changing rapidly,” emphasizing that cybersecurity defenses must continue to upgrade in order to keep up with attackers’ evolving technology. Market impact and what to watch next The September surge of hacking incidents hit market confidence to some extent, especially the Bitget case, which raised doubts about hot wallet management at exchanges. However, based on historical experience, after major hacking incidents, short-term panic is often eased by compensation mechanisms and the restoration of community confidence. Bitget has already activated its protection fund commitment to fully compensate users, and the Liquid incident also has a positive signal from the return of funds. What’s worth noting is that both PeckShield and CertiK’s statistics show attackers increasingly favor zero-day vulnerabilities and cross-chain attack methods. This means future cybersecurity investment needs to place more emphasis on vulnerability bounty programs and security assessments of cross-chain bridges. For retail users, cold wallets and multi-signature mechanisms remain core basics for reducing risk. Related reports Bitget theft amount raised to $388 million! Zcash and TRON on-chain assets also included Bitget hacked for $350 million: suspect tracking—XRP stolen funds flow into the “North Korean hacker Lazarus” vault MetaMask urgently exits Lido validators! In a security incident investigation, could it severely impact ETH staking? MAX lists HYPE, GRAM, APT, RENDER four coins—new Taiwan dollars can be traded directly QNT skyrockets 300%: bank deposits get put on-chain—don’t miss these targets “Crypto hacking incidents in September surge to $766 million! Bitget and Liquid Network’s twin cases account for 90%” This article was first published on 動區BlockTempo (動區動趨—the most influential blockchain news media).