September 2026 delivered a devastating blow to the cryptocurrency industry as monthly security losses breached $768 million, officially marking it as the most destructive month for crypto security this year.
The sharp spike was overwhelmingly driven by two massive exploits. A security breach targeting Bitget resulted in a staggering $388 million loss, while a sophisticated exploit on the Liquid Network drained another $320 million. Together, these two incidents accounted for the vast majority of the month’s damage. Smaller platforms also fell victim to the surge: Safe Wallet, DCENT, and Duelbits suffered collective losses nearing $20 million across multiple smaller-scale security compromises.
Data compiled by leading blockchain security firms showed between 55 and 97 total incidents throughout September, representing a steep acceleration from August's figures. The only silver lining came from aggressive recovery efforts, which successfully retrieved over $270 million of the stolen assets.
Security analytics firm CertiK emphasized that this uptick is part of a broader, worrisome trend in the digital asset landscape. Following 2023's record of 656 security incidents totaling $2.68 billion in losses, September's figures highlight that exchange vulnerabilities, cross-chain exploits, and private key compromises remain critical existential risks for web3 infrastructure.
The sharp spike was overwhelmingly driven by two massive exploits. A security breach targeting Bitget resulted in a staggering $388 million loss, while a sophisticated exploit on the Liquid Network drained another $320 million. Together, these two incidents accounted for the vast majority of the month’s damage. Smaller platforms also fell victim to the surge: Safe Wallet, DCENT, and Duelbits suffered collective losses nearing $20 million across multiple smaller-scale security compromises.
Data compiled by leading blockchain security firms showed between 55 and 97 total incidents throughout September, representing a steep acceleration from August's figures. The only silver lining came from aggressive recovery efforts, which successfully retrieved over $270 million of the stolen assets.
Security analytics firm CertiK emphasized that this uptick is part of a broader, worrisome trend in the digital asset landscape. Following 2023's record of 656 security incidents totaling $2.68 billion in losses, September's figures highlight that exchange vulnerabilities, cross-chain exploits, and private key compromises remain critical existential risks for web3 infrastructure.
