The $388 million Bitget breach and $320 million Liquid Network exploit accounted for most of September’s losses, though more than $270 million from the latter was later returned.
Crypto suffered its worst month of the year for hacks and exploits in September, with two blockchain security firms estimating losses at more than $766 million.
PeckShield counted 55 major incidents resulting in $766.5 million in stolen funds, while CertiK recorded 97 incidents and estimated losses at $768.4 million. Both firms showed the losses were a significant increase from August.
The month included the $388 million Bitget hack and a $320 million hack of the Liquid Network. More than $270 million was later returned, according to reports. The incidents rank among the largest crypto thefts of the year.
“September was a stark reminder of how quickly the threat landscape can shift,” CertiK said in a statement Wednesday.
Other crypto hacks in the month included Safe Wallet, DCENT, and Duelbits, which lost $7.8 million, $6 million and $5.9 million, respectively.
CertiK’s security dashboard shows a total of 656 security incidents in 2026, marking a total loss of $2.68 billion.
Related: SlowMist traces Bitget hack activity to Aug. 31 zero-day exploit