September was the most damaging month of 2026 so far for cryptocurrency hacks and exploits, with losses estimated at more than $766 million by two blockchain security firms. The total was driven largely by attacks involving Bitget and the Liquid Network, although a substantial portion of the Liquid-related funds was later returned, according to Cointelegraph.
September losses dominated by two attacks
PeckShield recorded 55 major security incidents during the month and calculated total stolen funds at $766.5 million. CertiK reported a higher number of incidents, 97, and estimated losses of $768.4 million. While the methodologies and incident counts differed, both firms indicated that September’s losses were substantially higher than those recorded in August.
Two attacks accounted for most of the damage:
- Bitget suffered a breach involving $388 million.
- The Liquid Network was hit in an exploit involving $320 million.
More than $270 million linked to the Liquid Network incident was subsequently returned, according to reports. Even with that recovery, the two cases rank among the largest cryptocurrency thefts reported this year.
A hack or exploit generally refers to unauthorized access to a crypto platform, wallet, blockchain network or related system that allows attackers to move or steal digital assets. The reported loss figures are therefore a measure of funds affected by the incidents; later recoveries can change the final amount permanently lost.
Other incidents and 2026 total
September’s other reported attacks included incidents involving Safe Wallet, DCENT and Duelbits. The losses cited for those cases were $7.8 million, $6 million and $5.9 million, respectively.
CertiK’s security dashboard counted 656 security incidents across the cryptocurrency sector in 2026 and estimated cumulative losses at $2.68 billion. That broader total includes the September events and places the month’s attacks in the context of an already active year for crypto-related security incidents.
“September was a stark reminder of how quickly the threat landscape can shift,” CertiK said in a statement Wednesday.
The figures from PeckShield and CertiK are estimates, and their different incident counts and totals show that security researchers may classify or measure events differently. The broad conclusion from both datasets, however, was the same: September was the year’s most severe month for reported crypto hacks and exploits.
Moneyiar market picture
Moneyiar market data at 09:14 on October 1, 2026, showed the following prices and performance:
- Monad (MON): $0.0324802297, up 19.67% over 24 hours and 35.09% over seven days.
- Plasma (XPL): $0.0975642045, up 0.95% over 24 hours and 10.04% over seven days.
- Alchemy Pay (ACH): $0.0061085328, down 0.55% over 24 hours and up 8.82% over seven days.
- Loaded Lions (LION): $0.0015460405, up 2.1% over 24 hours and 4.2% over seven days.
These market movements are supplied by Moneyiar and are separate from the security-loss estimates reported for September.
