Weekly · Issue 9 · 2026-09-21 – 2026-09-27
Crypto security incidents · weekly · 2026-W39
From 2026-09-21 to 2026-09-27, 10 crypto security incidents were publicly reported, with about $409.1M lost; the previous week had 8 and $6.2M, a change of +6510% in losses. The largest was Bitget (2026-09-24, about $387.0M). By technique, "Key Compromise" accounted for the most losses: 2 incidents, $394.0M. 1 incidents ($2.1M) were phishing, frontend hijacks or rugpulls, which happen at the moment of payment; checking the payee address and payment URL first can stop part of them.
10
$409.1M
1
Largest incidents
| Date | Incident | Technique | Loss |
|---|---|---|---|
| 2026-09-24 | Bitget | Key Compromise | $387.0M |
| 2026-09-24 | Duelbits | Key Compromise | $7.0M |
| 2026-09-22 | Astroport | Governance | $4.9M |
| 2026-09-22 | Drop | Governance | $4.4M |
| 2026-09-27 | Fake GIWA Bridge | Social Engineering | $2.1M |
By technique
| Key Compromise | 2 | $394.0M |
| Governance | 2 | $9.3M |
| Social Engineering | 1 | $2.1M |
| Bridge & Cross-Chain | 1 | $1.8M |
| Access Control | 2 | $1.8M |
| Protocol Logic | 2 | $35K |
By chain
| Ethereum | 6 | $399.7M |
| Tron | 2 | $394.0M |
| XRP | 1 | $387.0M |
| Zcash | 1 | $387.0M |
| Neutron | 2 | $9.3M |
| BSC | 2 | $7.0M |