One quarter: 247 security incidents. More than one billion dollars was stolen. But what’s truly worth looking at isn’t just how big the number is—it’s how the composition has changed..
💰 进群看下一步
CertiK’s data lays it out clearly: in the third quarter, the crypto industry lost $1.26 billion due to security incidents—up 53.9% from $819 million in the second quarter. The number of incidents rose only from 219 to 247—about 10%—yet the money more than doubled. Among them, a single exchange theft of $387.5 million accounted for 30% of the quarter’s total loss..
When most people see this, their first reaction is: “Exchanges aren’t secure again.” But if you break it down, this time the problem isn’t in the exchange’s own code. Attackers are exploiting vulnerabilities in third-party security products, obtaining internal credentials, then forging withdrawal instructions. You might think that putting funds on a top platform adds a layer of protection—but that protection itself is outsourced..
What’s truly worth watching is September. In September alone, losses totaled $769 million across 99 incidents. Of that, about $273 million was frozen or recovered, leaving a net loss of $495 million. And in September’s losses, 96% came from exploitation of vulnerabilities—not from running away with funds, and not from private key theft. It was code being directly broken through. Once this kind of attack path gets “run smoothly,” the cost-benefit balance for the attackers becomes obvious..
So why could so much money be lost and yet the market still hold its ground? Because what was stolen was on-chain liquidity and platform reserves—not the market’s pricing power. Big money still moved in this quarter: Bitcoin spot ETF net inflows were $6.34 billion, and the quarterly line rose 43%. Security incidents are becoming an operating cost that the market absorbs..
But there’s a twist here: when losses shift from occasional to a quarterly norm, the next step for institutions won’t be to add leverage—it will be to reprice the custody, audit, and insurance components. Whoever can turn security into a priced, calculable product won’t just get fees—they’ll capture a trust premium..
If this trend continues, the real gap won’t necessarily be between whose returns are higher. It may be between who can still stand after things go wrong.
💰 进群看下一步
CertiK’s data lays it out clearly: in the third quarter, the crypto industry lost $1.26 billion due to security incidents—up 53.9% from $819 million in the second quarter. The number of incidents rose only from 219 to 247—about 10%—yet the money more than doubled. Among them, a single exchange theft of $387.5 million accounted for 30% of the quarter’s total loss..
When most people see this, their first reaction is: “Exchanges aren’t secure again.” But if you break it down, this time the problem isn’t in the exchange’s own code. Attackers are exploiting vulnerabilities in third-party security products, obtaining internal credentials, then forging withdrawal instructions. You might think that putting funds on a top platform adds a layer of protection—but that protection itself is outsourced..
What’s truly worth watching is September. In September alone, losses totaled $769 million across 99 incidents. Of that, about $273 million was frozen or recovered, leaving a net loss of $495 million. And in September’s losses, 96% came from exploitation of vulnerabilities—not from running away with funds, and not from private key theft. It was code being directly broken through. Once this kind of attack path gets “run smoothly,” the cost-benefit balance for the attackers becomes obvious..
So why could so much money be lost and yet the market still hold its ground? Because what was stolen was on-chain liquidity and platform reserves—not the market’s pricing power. Big money still moved in this quarter: Bitcoin spot ETF net inflows were $6.34 billion, and the quarterly line rose 43%. Security incidents are becoming an operating cost that the market absorbs..
But there’s a twist here: when losses shift from occasional to a quarterly norm, the next step for institutions won’t be to add leverage—it will be to reprice the custody, audit, and insurance components. Whoever can turn security into a priced, calculable product won’t just get fees—they’ll capture a trust premium..
If this trend continues, the real gap won’t necessarily be between whose returns are higher. It may be between who can still stand after things go wrong.
