Bitget, Liquid exploits push Q3 crypto hacks toward $1.2B
Compromised suppliers, developer tools and infrastructure components outside security audits drove about 77% of the quarter’s total losses, according to Hacken.
Asanat Analysis — Why it matters
The $1.2B Q3 hack total represents a structural problem distinct from smart contract vulnerabilities: 77% of losses stem from supply-chain compromises rather than code exploits. This shift toward infrastructure attacks—targeting exchanges, developer tools, and external components—signals that audited contracts alone cannot secure user funds when custodians and build-layer dependencies remain weak links. Bitget and Liquid's breaches exemplify how even established platforms can suffer catastrophic access failures.
The prevalence of supply-chain vectors reflects asymmetric security economics: attackers efficiently target single points of infrastructure failure that affect thousands of users simultaneously, while individual protocol audits create false confidence. This has downstream effects on institutional adoption—custodians and bridges require higher due diligence standards—and may accelerate demand for self-custody solutions and decentralized infrastructure redundancy. The pattern also suggests industry standards around vendor vetting and secrets management remain immature relative to DeFi's growth.