- PeckShield reported 55 major attacks on crypto projects in September 2026.
- Total losses reached $766.49 million, up 462% from about $136.3 million in August.
- Incidents involving Bitget and the Liquid Network accounted for more than 90% of September’s total.
PeckShield reported that the crypto industry faced 55 major hacking attacks in September 2026. Losses totaled $766.49 million, making September the biggest month of 2026 by the amount of funds affected by hacks and exploits.
The total was 462% higher than the roughly $136.3 million recorded in August. Most of September’s losses stemmed from two incidents: an attack on Bitget and a bitcoin outflow from the Liquid Network.
Bitget incident
PeckShield identified the Bitget hack as the largest incident, estimating its value at roughly $388 million. The crypto exchange initially confirmed an unauthorized withdrawal of $351.6 million in assets. The estimate later rose to about $387.5 million after additional transactions on the Zcash and TRON networks were included.
The attacker moved funds from the platform’s hot and warm wallets across several networks. Bitget and independent specialists said private keys were not compromised.
Analysts also suggested a possible connection to North Korean hackers, but the incident had not been definitively attributed as of publication.
Bitget used its Protection Fund to cover the losses and later replenished the fund to more than $300 million. The company said user balances were not affected.
Liquid Network outflow
The second-largest incident involved the withdrawal of about 4,000 BTC from the Liquid Network. On September 6, assets worth roughly $320 million were moved out of the federation wallet.
The suspected cause was a bug in the Elements software rather than a compromise of network participants’ keys. Operators temporarily shut down bridge nodes after the incident, effectively halting the sidechain.
The party controlling the funds described itself as “ethical hackers” and contacted Blockstream through on-chain messages. By September 8, it had returned 3,400 BTC worth about $268 million, while about 598.5 BTC remained under its control.
Together, the incidents involving Bitget and the Liquid Network accounted for more than 90% of the losses reported for September, although some of the assets affected in the Liquid Network incident were later returned.
Source: Incrypted
