CertiK recorded about $2.68 billion in gross crypto security losses across 658 incidents through September 2026. The firm counted $420.4 million in stolen assets as frozen or returned, leaving adjusted losses of roughly $2.26 billion. September was the costliest month of the year, with about $766.5 million in losses, largely from incidents at Bitget and Liquid Network. Elliptic said suspected North Korean hackers stole more than $1 billion in crypto this year across more than 51 suspected incidents.