bitcoinFeature
Exchanges, DeFi drive 2026 crypto hack losses to $2.35 billion
Bitget’s September 24 drain, which pulled roughly $387.5 million from its hot and warm wallets, stands as the single largest loss in 2026 crypto hacks.
Data shared with Bitcoin Magazine by Lightning.news indicates that net losses from crypto hacks in 2026 have reached approximately $2.35 billion after accounting for returns and freezes.
Stacy Muur, a security researcher, compiled a list of protocols hacked for over $50,000 in 2026, noting that "Crypto security is absolutely cooked."
September alone accounted for about $768 million of Muur’s tally, with centralized exchanges and DeFi platforms driving the losses, not pure Bitcoin self-custody hardware wallets.
The Bitget incident led firms like Chainalysis, Elliptic, and TRM Labs to link the attack to North Korea, observing IP patterns matching previous DPRK-linked VPN use and on-chain overlaps with wallets involved in the 2025 Bybit theft.
Liquid Network suffered a major blow when an Elements software bug in early September allowed attackers to mint about 4,000 unbacked L-BTC, pegging them for near $320 million worth of real bitcoins.
DeFi platforms exhibited similar trends of high-value, concentrated losses; Drift Protocol lost approximately $285–296 million following an April governance and multisig compromise attributed to North Korean actors.
The rise of AI coding agents capable of finding and exploiting vulnerabilities presents a new risk layer, as Muur stated, "AI is definitely making it much easier to find and exploit bugs. I think we’re entering a pretty serious cybersecurity arms race."
While hardware-adjacent incidents like the Coinkite RNG hack (valued near $100–130 million) occurred, these remained significantly smaller than the major CEX and DeFi events.
Why it matters
The concentration of losses in CEX and DeFi highlights systemic risks in centralized and complex smart contract environments. Readers should watch how rapidly AI-assisted attacks lower the barrier for exploiting these software vulnerabilities.
