Crypto hacks top $768M in September, worst month of 2026
The $388 million Bitget breach and $320 million Liquid Network exploit accounted for most of September’s losses, though more than $270 million from the latter was later returned.
Asanat Analysis — Why it matters
September 2026 marks a severe inflection in security incidents, with $768M in aggregate losses—substantially above typical monthly theft volumes in prior years. The Bitget breach ($388M) and Liquid Network exploit ($320M, partial recovery of $270M) demonstrate that exchange and sidechain infrastructure remain high-value targets despite years of hardening efforts. The concentration of losses in two incidents underscores systemic risk: custody platforms and cross-chain bridges represent outsized attack surface relative to their defenses.
The near-complete recovery of Liquid Network funds signals either sophisticated whitehat negotiation or on-chain reclamation—a distinction with material implications for how future exploiters perceive retrievability risk. However, Bitget's unrecovered $388M reflects growing attacker sophistication in dust-covering and value extraction. This pattern suggests the security narrative has shifted from 'when' to 'how much and how fast'—incident response now factors into due diligence equations for institutional participants.