Crypto Hacks Hit $1.18B in Q3, Led by Supply-Chain Failures
Crypto hacks caused $1.18 billion in losses across 107 incidents in Q3 2026, according to Hacken. About $906 million, or 77% of the total, stemmed from compromised suppliers and developer tools, unpatched fixes, and infrastructure outside security reviews. The largest incidents were the $387 million Bitget hack, the $320 million Liquid Network exploit, the $120 million Tectonic exploit and a Coldcard firmware vulnerability linked to an estimated $115 million in losses.
Four major incidents accounted for about 80% of losses, while the median loss was $670,000. Smart-contract attacks were the most frequent vector, with 71 incidents causing $228 million in losses.
Around $387 million—about 33% of gross losses—was returned or reversed. Liquid Network attackers returned $272 million, while Cronos validators rolled back blockchain history to reverse about $111.2 million in Tectonic-related borrowing. Operators separately covered about $410 million in user losses. About $384 million remained neither recovered nor covered.
The quarter was the most damaging for crypto hacks since Q1 2025. Hacken urged firms to improve third-party and infrastructure security and expand audits to cover oracles, bridges, custody systems and privileged signing components.
Neutral
The news is negative for confidence in crypto security, but its direct market impact is likely neutral. The reported losses are significant, yet they are concentrated in a handful of incidents rather than evidence of a broad failure across the market. The article also says about a third of gross losses was returned or reversed, while operators covered substantial user losses. These measures may reduce immediate pressure on affected users and platforms, though they do not eliminate the underlying security concerns.
In the short term, traders may react to incident-specific developments—such as any further disclosures, recovery updates, or effects on Bitget, Liquid Network and Tectonic—through volatility in related tokens and a preference for more liquid or perceived safer assets. However, the article reports no broad exchange disruption, forced selling or market-wide contagion, so it does not by itself establish a clear directional signal for Bitcoin or the wider crypto market.
Past major hacks, including the Bybit loss cited in the article, have shown that large incidents can briefly weaken sentiment and increase scrutiny of exchanges and custody arrangements. Longer term, repeated attacks could raise compliance and insurance costs, encourage stronger audits and operational controls, and weigh on projects that fail to address supplier and infrastructure risks. Conversely, effective recoveries and user compensation can help limit lasting damage to confidence. Overall, the figures point to persistent cybersecurity risks, but the evidence in this report supports a measured, neutral market assessment rather than a broad bullish or bearish call.