Crypto Exchange Breaches Surge Past $1 Billion Mark
Key Summary
Cryptocurrency hacks surged to $1.18 billion in Q3 2026, driven by supplier compromises and infrastructure failures, with 77% of losses attributed to external components outside security audits. Industry participants are urged to strengthen cybersecurity measures to prevent similar incidents.
#
Q3 Crypto Hacks Reach $1.2B
Cryptocurrency hacks soared to $1.18 billion across 107 recorded incidents in the third quarter of 2026, according to security company Hacken. The four largest incidents included the $387 million Bitget hack, the $320 million Liquid Network exploit, the $120 million Tectonic exploit, and the Coldcard firmware vulnerability.
#
Causes of the Hacks
About 77% (about $906 million) of the quarter’s total losses were attributed to compromised suppliers or developer tools, publicly disclosed fixes that had not been deployed, or other components outside security reviews.
#
Industry Response
Hacken urged industry participants to strengthen the cybersecurity of third-party suppliers, developer tools and other external infrastructure that may fall outside security audits. The company also recommended that protocols expand security audits to include oracles, bridgers, custody systems, signing authorities and other privileged components.
#
Notable Incidents
The four largest incidents included the $387 million Bitget hack, the $320 million Liquid Network exploit, the $120 million Tectonic exploit, and the Coldcard firmware vulnerability.
#
Losses Recovered
About 80% of the quarter’s losses were concentrated in four of the largest incidents, while 98 of the incidents recorded losses below $10 million. The median loss across all 107 incidents was $670,000.
#
Conclusion
While supplier compromises and infrastructure failures drove much of the stolen value, smart contract incidents were the most frequent, accounting for $228 million in losses across 71 incidents.
#
Related Stories
Anthropic warns ‘AI worms’ may autonomously spread across devices like a virus
Circle and Tether froze about $340,000 tied to the Bitget theft.
Operators covered an additional $410 million of user losses from their own funds.
Bitget’s user protection fund covered $387 million, while Triple-A, Coinsbuy and TAC repaid about $22 million, making users whole, while stolen assets remained with attackers.
#
Industry Takeaways
The $1.2 billion in crypto hacks in Q3 2026 highlights the need for industry participants to strengthen their cybersecurity measures to prevent similar incidents. The incident also underscores the importance of expanding security audits to include oracles, bridgers, custody systems, signing authorities and other privileged components.
#
Bitget, Liquid, Hacken, North Korea, Bybit, Tectonic, Cronos, Circle, Tether, Anthropic.
#
Regulatory Enforcement
#
- \1\1\1
#
A photo of a cybersecurity expert examining a computer screen with a worried expression, with a blurred background of a cityscape at dusk.