Bitget, Liquid exploits push Q3 crypto hacks toward $1.2B
Reported by Cointelegraph · AI-assisted summary by ChikoCorp AI News Desk
AI-generated summary based on the linked source; not independently verified. This is not investment advice. Verify market-moving details at the original publisher before acting. See our editorial policy, AI content policy, and financial disclaimer.
Summary
In Q3 2026, cryptocurrency hacks totaled $1.18 billion across 107 incidents, with 77% of losses linked to compromised suppliers, developer tools, and unpatched vulnerabilities, according to security firm Hacken. The largest hacks involved Bitget ($387 million), Liquid Network ($320 million), Tectonic ($120 million), and Coldcard firmware ($115 million). About one-third of the stolen funds were recovered or reversed, with significant recoveries following the Liquid Network and Tectonic incidents.
Why it matters
Hacken highlights that most losses originated from weaknesses in third-party suppliers and external infrastructure, suggesting current security reviews are insufficient. The findings stress the need for heightened cybersecurity across all components involved in blockchain protocols, including developer tools, oracles, and custody systems. The source implies that without addressing these vulnerabilities, substantial crypto theft will continue.
Key context
Q3 2026 marked the most damaging quarter for crypto hacks since Q1 2025, when Bybit lost $1.4 billion to North Korean hackers. Smart contract exploits were the most frequent hacking method, causing $228 million in losses across 71 incidents. Recovery efforts included rollbacks of blockchain history, fund freezes by stablecoin issuers, and user protection funds operated by platforms like Bitget.
Key numbers and entities
Hacken recorded $1.18 billion in losses over 107 crypto hack incidents in Q3 2026. Key entities affected are Bitget ($387 million loss), Liquid Network ($320 million), Tectonic ($120 million), and Coldcard firmware ($115 million). About $387 million was returned or reversed, $410 million reimbursed by operators, and $384 million remains unrecovered. Circle, Tether, Cronos validators, Triple-A, Coinsbuy, and TAC also played roles in recovery actions.
What remains unclear
The source does not clarify the specific methods attackers used to exploit suppliers or developer tools. Details on which exact security audits failed and how protocols plan to implement broader protections are lacking. It is also unspecified how the remaining unrecovered $384 million will be addressed going forward.