According to a report by security firm Hacken, cryptocurrency hacks reached $1.18 billion in the third quarter of 2026. This figure stems from 107 separate incidents, marking the most damaging quarter for the sector since Q1 2025.
The majority of losses, approximately 77 percent or $906 million, were linked to compromised suppliers, developer tools, and infrastructure components that were not covered by security audits. Four major incidents accounted for 80 percent of the total quarterly losses.
The largest attacks included the Bitget hack at $387 million, the Liquid Network exploit at $320 million, the Tectonic incident at $120 million, and a Coldcard firmware vulnerability resulting in $115 million in losses.
Despite the high value of infrastructure-related thefts, smart contract vulnerabilities remained the most frequent attack vector, causing $228 million in losses across 71 incidents. The median loss per incident was $670,000.
Recovery efforts saw $387 million returned or reversed, representing 33 percent of gross losses. Notably, white hat hackers returned $272 million following the Liquid Network exploit, while operators covered $410 million in user losses from their own funds.
