TLDR Crypto hacks and exploits caused more than $766 million in losses in September, the worst month of 2026 so far. PeckShield counted 55 major incidents worth $766.5 million, while CertiK r
Crypto platforms lost more than $766 million to hacks and exploits in September. That makes it the worst month of 2026 so far for stolen funds.
Two blockchain security firms tracked the losses. Their totals were close, though they counted the number of incidents differently.
Most of the damage came from just two attacks. One hit the crypto exchange Bitget, and the other hit the Liquid Network.
PeckShield counted 55 major incidents during the month. The firm said those attacks led to $766.5 million in stolen funds.
#PeckShieldAlert In Sep. 2026, the crypto industry experienced 55 major hacks, resulting in total losses of $766.49M – a ~462% month-over-month increase from August's $136.3M.
The #Bitget incident (~$387M) and #LiquidNetwork (~$320M, with $285M returned) have jumped to #1 & #2… pic.twitter.com/abePPGX7Y5
— PeckShield October 1, 2026
CertiK recorded a higher number of incidents, at 97. It estimated total losses for the month at $768.4 million.
The two loss estimates differ by less than $2 million. Both firms reported that September’s losses were a sharp increase from August.
“September was a stark reminder of how quickly the threat landscape can shift,” CertiK said in a statement on Wednesday.
The largest single incident was the $388 million Bitget hack. That attack alone made up about half of the month’s total losses.
The Liquid Network exploit came next, with $320 million taken. Together, the two attacks accounted for about $708 million in losses.
Reports said more than $270 million from the Liquid Network exploit was later returned. Both the Bitget and Liquid Network incidents rank among the largest crypto thefts of the year.
If the returned funds are taken out, September’s net losses come to roughly $500 million. That figure is based on CertiK’s estimate for the month.
Several smaller attacks also hit other platforms in September. Safe Wallet lost $7.8 million in one of those incidents.
DCENT lost $6 million during the month. Duelbits, another platform, lost $5.9 million.
Those three smaller incidents combined for $19.7 million in losses. That is a small share compared with the two largest attacks.
CertiK’s security dashboard shows a total of 656 security incidents in 2026 so far. The firm puts total losses for the year at $2.68 billion.
September’s losses make up more than a quarter of that yearly total, based on CertiK’s figures. The month’s 97 incidents represent about 15% of all incidents the firm has recorded this year.
CertiK released its September figures on Wednesday, alongside the updated yearly totals on its dashboard. The 2026 loss total now stands at $2.68 billion across 656 incidents.
The post Crypto Hacks Top $768 Million in September, Worst Month of 2026 appeared first on Blockonomi.
