Cryptocurrency losses from hacks and exploits surged past $768 million in September, making it the most damaging month of 2026, according to blockchain security firm PeckShield. The spike was driven overwhelmingly by two massive incidents: a breach at exchange Bitget and an exploit targeting the Liquid Network.
A Month Dominated by Two Attacks
The bulk of September's staggering total stemmed from just a pair of events. The Bitget breach alone accounted for roughly $388 million in losses, while the exploit on the Liquid Network siphoned off approximately $320 million. Together, these two incidents made up the lion's share of the month's damage, overshadowing the many smaller hacks and scams that plagued the industry.
The concentration of losses in such a small number of attacks underscores a persistent vulnerability in the crypto ecosystem, where a single successful breach against a major platform can erase hundreds of millions in user and protocol funds within hours.
Two attacks were responsible for nearly all of the month's record-breaking losses.
A Partial Silver Lining
Not all of the stolen funds vanished permanently. More than $270 million taken in the Liquid Network exploit was subsequently returned, offering some relief to affected parties and softening the net impact of the month's carnage. Fund recoveries have become an increasingly common outcome in major exploits, often resulting from negotiations between projects and attackers or the involvement of white-hat intermediaries.
Still, the headline figure of $768 million cements September as the worst month for crypto security this year, a sobering reminder that the sector remains a prime target for sophisticated threat actors despite ongoing improvements in defenses.
- Bitget breach: approximately $388 million in losses
- Liquid Network exploit: roughly $320 million, with over $270 million later returned
- Combined, the two incidents accounted for the overwhelming majority of September's total
Ongoing Security Challenges
The September figures highlight how high-stakes the crypto landscape remains for exchanges and blockchain protocols alike. As platforms scale and attract larger pools of capital, they correspondingly become more attractive to attackers seeking outsized payoffs from a single successful operation.
While the return of funds in the Liquid Network case demonstrates that recovery is possible, the overall trend reinforces the need for stronger security practices, rigorous audits, and rapid response capabilities across the industry. For users and