- Published on
Crypto hacks top $768M in September, worst month of 2026
- Authors
- Name
- DeepHorus
Crypto losses from hacks and exploits climbed above $766 million in September, making the month the worst of 2026 for digital-asset theft. The estimate came from blockchain security firms PeckShield and CertiK, which both recorded a sharp increase from August. Two major incidents dominated the monthly total and rank among the year’s largest thefts.
PeckShield identified 55 major incidents that resulted in $766.5 million in stolen funds. CertiK counted 97 incidents and put losses at $768.4 million, providing a near-matching view of the month’s scope. The figures underline how the headline total was concentrated in a small number of high-value attacks.
A $388 million breach of Bitget accounted for the largest share of the reported losses. Liquid Network was hit by a $320 million exploit, together contributing most of September’s total. More than $270 million connected to the Liquid incident was later returned, according to reports, but the event still weighed heavily on the month’s figures.
The attacks were not limited to the two largest cases. Safe Wallet, DCENT and Duelbits also reported losses during September, of $7.8 million, $6 million and $5.9 million, respectively. Their inclusion brought the count of major or recorded security events into the dozens, depending on the firm’s methodology.
CertiK’s security dashboard lists 656 incidents across 2026, with total losses of $2.68 billion. September’s estimated $768.4 million therefore represents a substantial portion of the year’s recorded damage. The contrast with August also signals a deterioration in the crypto security environment.
“September was a stark reminder of how quickly the threat landscape can shift,” CertiK said in a Wednesday statement. The comment followed a month in which a Bitget breach and Liquid Network exploit overshadowed several smaller losses. The concentration of funds in major incidents raises the financial significance of each failure.
The Bitget incident also drew separate attention after SlowMist traced hack activity to a zero-day exploit dated Aug. 31. Despite recoveries connected to Liquid, the September totals show that returned funds did not erase the broader cost of the attacks. The 2026 dashboard figures suggest continued scrutiny of blockchain security will remain central.
