September Crypto Losses Hit $766M, Fell to $496M After $270M Return
September crypto hacks hit $766 million, but hackers returned $270 million from Liquid Network. Net losses: $496 million. Bitget and Liquid made up 92%.
September crypto hacks hit $766 million, but hackers returned $270 million from Liquid Network. Net losses: $496 million. Bitget and Liquid made up 92%.
Bitget's attacker sent test transfers worth $480 to probe security 27 minutes before stealing $388 million across five blockchains on September 24.
A hacker drained $7.73M in rsETH from an Ethereum wallet. An MEV bot paid $47,000 in gas to front-run the transaction and took 99% of the funds.
The Liquid Network hack drained about 4,000 bitcoin, yet no keys were stolen. A patch meant to fix a 2019 flaw let the attacker mint unbacked coins.
Price-manipulation exploits hit a record 32 in DeFi lending in 2026. The Tectonic case shows why the attack is cheap, repeatable and tough to audit away.
Injective lost $4.9M on August 31 to a market-ID collision in binary-options settlement, then framed the near four-hour block halt as a routine upgrade.
Coinsbuy says it replenished wallets after an $8 million hack across Ethereum and Tron. On-chain data shows the refund covered only about half.
A single exploit on April 19 triggered one of the fastest liquidity withdrawals the sector has ever seen, and the damage is still moving through the system.
The attacker moved nearly all stolen ETH into Bitcoin in roughly a day and a half, while Arbitrum scrambled to freeze a smaller portion of the funds on its own network.
The attacker funded the node through Monero and Hyperliquid weeks before the theft. Chainalysis mapped the entire trail. THORChain paused all trading.
A compromised private key let an attacker automate withdrawals from Polymarket's UMA CTF Adapter on Polygon. ZachXBT flagged it first. Losses passed $700,000 before the team responded. Polymarket says user funds are safe. The attacker has already split the proceeds across 15 wallets.
StablR's EURR and USDR lost their pegs on Sunday after an attacker compromised a single private key in a 1-of-3 multisig, minted 8.35 million unbacked USDR and 4.5 million EURR, and dumped them for 1,115 ETH. The stablecoin issuer holds a Malta EMI license and operates under MiCA. Regulation did not stop a key management failure.
One of the world's largest Bitcoin ATM operators filed an SEC Form 8-K on April 8, 2026, disclosing that an unauthorized party accessed its corporate IT systems and drained 50.903 BTC from settlement accounts. Customer platforms and user data were not affected.
Cyberattacks continue to shape risk perception across the digital asset ecosystem — exchange breaches, smart contract exploits, phishing campaigns, ransomware incidents, on-chain fund movements, security vulnerabilities, and the evolving threat landscape targeting crypto infrastructure — tracked with data-driven analysis and incident-level context.