Crypto Hacks Left $384 Million Unrecovered After $1.18 Billion in Q3 Losses
The 107 incidents included $387 million returned or reversed and $410 million in user losses covered by operators. Supplier and developer tool compromises, undeployed fixes and infrastructure beyond audit scopes accou…

Crypto hacks caused $1.18 billion in losses across 107 incidents in Q3 2026, while about $384 million remained unrecovered after funds were returned or reversed and operators covered user losses. The quarter’s total was the highest since Q1 2025.
About $387 million was returned or reversed, equal to roughly 33% of gross losses. Operators separately covered $410 million in user losses.
About $906 million, or 77% of the losses, involved compromised suppliers or developer tools, disclosed fixes that had not been deployed, and infrastructure outside audit scopes. A separate breakdown of the quarter’s 77% exposure examined those categories.
Four incidents accounted for about 80% of the total: Bitget at $387 million, Liquid Network at $320 million, Tectonic at $120 million and a Coldcard firmware vulnerability at about $115 million. Ninety-eight incidents involved losses below $10 million, and the median loss was $670,000.
Smart contract attacks were the most frequent category, with 71 incidents and $228 million in losses.