September 2026 Records $768M in Crypto Security Breaches, Marking Year's Darkest Month

September 2026 Records $768M in Crypto Security Breaches, Marking Year's Darkest Month

September's devastating losses were predominantly driven by Bitget's $388 million security incident and the $320 million Liquid Network compromise, although hackers subsequently returned over $270 million from the Liquid attack.

The cryptocurrency industry experienced its most devastating month for security breaches and hacks during September, with estimates from two leading blockchain security companies placing total losses beyond $766 million.

According to PeckShield's analysis, 55 significant security breaches led to $766.5 million in compromised assets, while CertiK's data identified 97 separate incidents with estimated damages reaching $768.4 million. The figures from both security firms indicate a substantial escalation compared to the previous month of August.

September's damage toll was headlined by the $388 million Bitget security breach alongside a $320 million compromise of the Liquid Network. However, reports confirm that over $270 million was subsequently recovered and returned. These two incidents are positioned among the most significant cryptocurrency heists recorded this year.

September was a stark reminder of how quickly the threat landscape can shift

CertiK

Additional significant crypto security incidents throughout September affected Safe Wallet, DCENT, and Duelbits, with losses totaling $7.8 million, $6 million and $5.9 million, respectively.

Chart showing largest incidents in September
September's most significant security incidents. Source: CertiK

Data compiled through CertiK's comprehensive security monitoring dashboard indicates that 2026 has witnessed a cumulative total of 656 security breaches and incidents, representing aggregate losses amounting to $2.68 billion.