Monthly · Issue 3 · 2026-09-01 – 2026-09-30
Crypto security incidents · monthly · 2026-09
From 2026-09-01 to 2026-09-30, 33 crypto security incidents were publicly reported, with about $742.0M lost; the previous month had 48 and $255.5M, a change of +190% in losses. The largest was Bitget (2026-09-24, about $387.0M). By technique, "Key Compromise" accounted for the most losses: 6 incidents, $396.0M. 1 incidents ($2.1M) were phishing, frontend hijacks or rugpulls, which happen at the moment of payment; checking the payee address and payment URL first can stop part of them.
33
$742.0M
1
Largest incidents
| Date | Incident | Technique | Loss |
|---|---|---|---|
| 2026-09-24 | Bitget | Key Compromise | $387.0M |
| 2026-09-06 | Liquid Network | Bridge & Cross-Chain | $320.0M |
| 2026-09-24 | Duelbits | Key Compromise | $7.0M |
| 2026-09-22 | Astroport | Governance | $4.9M |
| 2026-09-22 | Drop | Governance | $4.4M |
By technique
| Key Compromise | 6 | $396.0M |
| Bridge & Cross-Chain | 5 | $326.1M |
| Governance | 2 | $9.3M |
| Oracle Manipulation | 4 | $4.3M |
| Social Engineering | 1 | $2.1M |
| Access Control | 5 | $1.9M |
| Token & Share Accounting | 3 | $1.9M |
| Protocol Logic | 6 | $454K |
| Input Validation | 1 | $50K |
By chain
| Ethereum | 15 | $404.5M |
| Tron | 3 | $394.7M |
| XRP | 1 | $387.0M |
| Zcash | 1 | $387.0M |
| Liquid | 1 | $320.0M |
| Neutron | 2 | $9.3M |