Crypto Security Crisis: September 2026 Marks Record $768M in Hacks
Cryptocurrency suffered its worst month of 2026 in September, with security breaches and exploits totaling over $768 million in losses, according to major security firms PeckShield and CertiK. Two massive incidents—a $388 million Bitget breach and a $320 million Liquid Network exploit—dominated the month's devastating security landscape.
The cryptocurrency sector faced its most destructive month on record for 2026 in September, as security breaches and exploits combined to steal more than $766 million from investors and platforms. The scale of losses prompted analysis from leading blockchain security firms, each documenting the concerning trend with slightly different methodologies but consistent conclusions about the severity of the crisis.
Security Firms Document Devastating Month
Two major blockchain security firms, PeckShield and CertiK, released independent analyses of September’s security landscape. PeckShield identified 55 major incidents that resulted in $766.5 million in stolen funds, while CertiK’s broader tracking documented 97 distinct incidents with estimated losses of $768.4 million. Despite modest differences in their exact figures—a reflection of the difficulty in comprehensively tracking all incidents across decentralized networks—both firms confirmed that September represented a significant deterioration from August’s losses.
The month’s damage stemmed largely from two massive security failures. The Bitget platform suffered a breach affecting $388 million in user assets, while the Liquid Network fell victim to a $320 million exploit. The Liquid Network incident did provide one silver lining: more than $270 million of the stolen amount was eventually recovered and returned to affected parties, offering partial relief to victims. Below these headline figures lay numerous other security failures: Safe Wallet lost approximately $7.8 million, DCENT experienced $6 million in losses, and the cryptocurrency betting platform Duelbits saw $5.9 million stolen.
Systemic Risk and 2026’s Trajectory
The September spike reflects a troubling broader pattern. According to CertiK’s ongoing analysis, 2026 has witnessed 656 distinct security incidents across the cryptocurrency ecosystem, resulting in cumulative losses totaling $2.68 billion. This scale of damage highlights how the growth of cryptocurrency infrastructure has simultaneously expanded the attack surface available to bad actors.
CertiK underscored the month’s significance in a statement, noting that “September was a stark reminder of how quickly the threat landscape can shift.” This acknowledgment from a leading security firm reflects the broader challenge facing the industry: as protocols and platforms attract more capital and users, they become increasingly attractive targets for sophisticated attackers.
The incidents reveal that security challenges are not isolated to specific exchanges or platforms, but rather represent systemic concerns affecting various components of the broader crypto ecosystem. From exchange infrastructure to protocol-level exploits to wallet vulnerabilities, the threats span the technical stack.
Why This Matters for Crypto
September’s record losses underscore why security infrastructure and proven protocols matter increasingly in crypto markets—platforms and protocols with established security track records and institutional-grade protection represent a significant competitive advantage as the industry matures.
Source: PeckShield and CertiK, via Cointelegraph. Not financial advice.