{"id":13980,"date":"2026-10-02T01:11:48","date_gmt":"2026-10-02T01:11:48","guid":{"rendered":"https:\/\/cryptonews.uk.com\/?p=13980"},"modified":"2026-10-02T01:11:48","modified_gmt":"2026-10-02T01:11:48","slug":"crypto-hackers-have-taken-2-7-billion-in-2026-and-the-losses-are-alarmingly-concentrated","status":"publish","type":"post","link":"https:\/\/cryptonews.uk.com\/?p=13980","title":{"rendered":"Crypto hackers have taken $2.7 billion in 2026 and the losses are alarmingly concentrated"},"content":{"rendered":"

<\/p>\n

\n

Crypto firms and users have lost nearly $2.7 billion to security incidents this year, with North Korea-linked thefts exceeding $1 billion.<\/p>\n

Blockchain security firm CertiK recorded 658 incidents through September, with about $420.4 million of stolen assets frozen or returned. That leaves adjusted losses of roughly $2.26 billion and an average loss of $4.1 million per incident.<\/p>\n

September sharply altered the year’s tally. Losses reached about $766.5 million, surpassing April’s $651.3 million and making it the costliest month of 2026. Bitget’s $387.5 million breach and the $318.7 million Liquid Network incident accounted for more than $700 million of the damage.<\/p>\n

The surge has left the annual total increasingly dependent on a small number of outsized attacks. It has also brought state-linked theft deeper into the industry’s security calculations after blockchain analytics firm Elliptic said suspected North Korean hackers have taken more than $1 billion in crypto this year.<\/p>\n

Mega-hacks are reshaping the annual toll<\/h2>\n

September propelled Bitget and Liquid Network to the top of CertiK’s 2026 incident ranking, widening the gap between the largest breaches and hundreds of smaller attacks.<\/p>\n

Bitget alone represents about 14.4% of CertiK’s year-to-date losses. Liquid Network ranks second, followed by KelpDAO at $291.3 million, Drift Protocol at $285.3 million, and an unidentified victim at $284.8 million.<\/p>\n

Those five incidents account for about $1.57 billion, or almost 59% of the $2.68 billion recorded so far this year.<\/p>\n

\"Top\"Top
Bitget\u2019s $387.5 million breach ranked as 2026\u2019s largest reported crypto incident, ahead of Liquid Network and KelpDAO. Source: CertiK<\/figcaption><\/figure>\n

That concentration means a single compromise at a large exchange, protocol, or infrastructure provider can materially change the industry’s annual loss profile. For context, Bitget and Liquid Network together contributed roughly $706 million, equivalent to more than a quarter of all gross security losses tracked by CertiK in 2026.<\/p>\n

September’s figures further illustrate the imbalance. Beyond those two attacks, the month’s remaining incidents contributed only a fraction of its $766.5 million total.<\/p>\n

Meanwhile, some of the damage from these attacks has since been reversed. CertiK counts $420.4 million of assets as frozen or returned this year, reducing its adjusted loss figure to $2.26 billion. Liquid Network recovered a large portion of the assets involved in its incident, while other attacks have also resulted in partial or full returns.<\/p>\n

So, the gap between gross and adjusted losses has widened as exchanges, issuers, security firms and blockchain operators move faster to identify and restrict stolen funds.<\/p>\n

However, that recovery capacity does not eliminate the immediate cost to affected businesses. Large breaches can force operators to suspend services, replenish customer balances, rebuild infrastructure and commit capital before stolen assets are recovered.<\/p>\n