Weekly · Issue 8 · 2026-09-14 – 2026-09-20
Crypto security incidents · weekly · 2026-W38
From 2026-09-14 to 2026-09-20, 8 crypto security incidents were publicly reported, with about $6.2M lost; the previous week had 9 and $4.7M, a change of +32% in losses. The largest was Nostra Money Market (2026-09-17, about $3.5M). By technique, "Oracle Manipulation" accounted for the most losses: 2 incidents, $4.1M. There were no phishing, frontend-hijack or rugpull incidents; the rest happened inside wallets and contracts and call for key management and code audits.
8
$6.2M
0
Largest incidents
| Date | Incident | Technique | Loss |
|---|---|---|---|
| 2026-09-17 | Nostra Money Market | Oracle Manipulation | $3.5M |
| 2026-09-19 | Fetch.ai | Key Compromise | $1.5M |
| 2026-09-16 | Flamincome | Oracle Manipulation | $595K |
| 2026-09-19 | NuNet | Key Compromise | $463K |
| 2026-09-16 | Nimiq | Input Validation | $50K |
By technique
| Oracle Manipulation | 2 | $4.1M |
| Key Compromise | 2 | $2.0M |
| Input Validation | 1 | $50K |
| Access Control | 2 | $50K |
| Protocol Logic | 1 | $0 |
By chain
| Starknet | 1 | $3.5M |
| Ethereum | 4 | $2.6M |
| Polygon | 1 | $50K |
| BSC | 1 | $47K |
| MultiversX | 1 | $0 |