Key facts
- Compromised suppliers and developer tools drove 77% of Q3 crypto hack losses.
- Bitget hack: $387 million stolen.
- Liquid Network exploit: $320 million stolen.
- Tectonic exploit: $120 million stolen.
- Coldcard firmware vulnerability: $115 million in losses.
- 33% of total stolen funds were returned or reversed.
Cryptocurrency hacks reached $1.18 billion across 107 recorded incidents in the third quarter of 2026, according to a report by security firm Hacken. The majority of these losses, approximately 77% or $906 million, stemmed from compromised suppliers, developer tools, or other components that had not undergone security reviews.
The four largest incidents contributing to this total were the $387 million hack of Bitget, the $320 million exploit of the Liquid Network, the $120 million Tectonic exploit, and losses estimated at $115 million from a Coldcard firmware vulnerability. This marks the most damaging quarter for crypto hacks since the first quarter of 2025.
While smart contract incidents were the most frequent attack vector, accounting for $228 million in losses across 71 incidents, the bulk of the value was lost through other means. About 33% of the total stolen funds, amounting to $387 million, were returned or reversed. Additionally, operators covered $410 million of user losses from their own funds, making users whole in many cases, though $384 million remained unrecovered.