September Crypto Hacks Hit 2026 High at $768.5 Million

September recorded the highest monthly crypto security losses of 2026, with 99 hacks, exploits and other incidents causing $768.5 million in damage, according to CertiK. The average loss was about $7.8 million per incident.

Of the total, $273.2 million in stolen funds was recovered or frozen. Net losses fell to $495.3 million, a 35.6% reduction from the gross figure. September’s gross losses ranked among the highest monthly totals since 2023, although the ranking changes when only unrecovered funds are counted.

Two attacks accounted for about 92% of the month’s losses. The Bitget breach caused $387.5 million in losses after attackers compromised the exchange’s wallet system and transferred assets across several networks. The Liquid Network exploit caused another $318.7 million through a vulnerability in code used to verify certain transactions.

Other reported losses included $7.8 million at Safe Wallet, about $6 million each at D’CENT App Wallet and Duelbits, and $4.7 million in a case linked to Shivon Zilis. Drop reported $4.4 million in losses, while an unidentified victim lost $4.3 million. Nostra Finance reported $3.5 million, and other unidentified wallets accounted for $2.9 million.

Exploits caused $733.8 million in losses, or 95.5% of the monthly total. Private-key compromises accounted for $14.2 million, wallet compromises for $11.9 million, phishing for $6.2 million and scams for $2.1 million. Other attack types caused about $340,000 in losses.

Exploits made up 58 of the 99 incidents, or 58.6% of the total. Phishing accounted for 13 incidents, private-key compromises for 11 and wallet compromises for eight. Threats accounted for seven incidents, while other attacks and scams accounted for one each.

The $273.2 million in recovered or frozen funds reduced the month’s final losses to $495.3 million. Without those funds, the reported losses would have remained close to the $768.5 million gross total.