Cryptocurrency hacks hit $1.18 billion across 107 recorded incidents in the third quarter of 2026, according to security firm Hacken. The report attributed 77% of losses — about $906 million — to compromised suppliers, developer tools, and publicly disclosed fixes that had not been deployed. The four largest incidents included the $387 million Bitget hack, the $320 million Liquid Network exploit, the $120 million Tectonic exploit, and a Coldcard firmware vulnerability tied to roughly $115 million in losses. This quarter was the most damaging since Q1 2025, when Bybit’s $1.4 billion loss to North Korea pushed the total to $1.6 billion.

- Advertisement -

Smart contract incidents were the most frequent attack vector, causing $228 million in losses across 71 events. The median loss across all incidents stood at $670,000, while 98 exploits each fell below $10 million.

About $387 million — roughly 33% of gross losses — was returned or reversed. Self-proclaimed “white hats” returned $272 million after the Liquid Network hack, representing about 85% of stolen value. Following the Tectonic incident, Cronos validators rolled back 114 minutes of settled blockchain history, reversing roughly $111.2 million of the $120.4 million in affected borrowing. Stablecoin issuers Circle and Tether froze about $340,000 tied to the Bitget theft. Operators covered an additional $410 million of user losses from their own funds — Bitget’s user protection fund covered $387 million, while Triple-A, Coinsbuy, and TAC repaid about $22 million. Approximately $384 million, or 32% of gross losses, was neither returned nor covered.

Hacken urged industry participants to strengthen Cybersecurity around third-party suppliers and external infrastructure that may fall outside audits. The firm also recommended expanding security reviews to include oracles, bridgers, custody systems, and signing authorities.

✅ Follow BITNEWSBOT on Telegram, Facebook, LinkedIn, X.com, and Google News for instant updates.

- Advertisement -