Cryptocurrency Hacks Surge to Record $772 Million in September Losses
Cybersecurity breaches in the cryptocurrency sector resulted in approximately $772 million in losses during September 2026, marking the highest monthly total of the year according to tracking firms PeckShield and CertiK. Two major incidents accounted for nearly 92% of the damage, with Bitget suffering $387.5 million and Liquid Network losing $318.7 million to unauthorized transfers and protocol exploits. The remaining 53 tracked attacks combined for roughly $59 million in losses across multiple blockchain networks including Ethereum, Tron, and others.
September 2026 marked a troubling escalation in cryptocurrency security failures, with tracking organizations documenting nearly three dozen incidents beyond the two catastrophic breaches. The Bitget incident involved attackers leveraging vulnerabilities in third-party security tools to obtain internal credentials, then manipulating withdrawal commands to bypass system safeguards across multiple blockchain networks including Ethereum, Tron, and XRP Ledger. The company's stated commitment to cover losses through its protection fund represents a significant financial undertaking requiring transparent execution.
The Liquid Network breach exposed fundamental vulnerabilities in the Bitcoin sidechain's validation architecture for confidential transactions, allowing fraudulent asset creation without underlying collateral. This type of protocol-level exploit suggests systemic risks that extend beyond individual platform security practices, potentially affecting confidence in derivative blockchain solutions designed to enhance Bitcoin's functionality.
These breaches could pressure institutional investors and retail participants to reassess exposure to cryptocurrency platforms and derivative networks. Enhanced security scrutiny may accelerate regulatory demands for custodial standards and insurance requirements, potentially increasing operational costs across the sector. Users holding assets on affected platforms may experience delayed access or recovery processes, while broader market sentiment could be affected by questions regarding whether current safeguards adequately protect digital asset holders at scale.