According to the Hacken report, 107 security incidents occurred in the third quarter of 2026. 77% of the losses originated from infrastructure that was outside of oversight.
The total cost of attacks in the cryptocurrency sector in the third quarter of 2026 reached $1.18 billion. Cybersecurity company Hacken recorded a total of 107 security incidents between July and September.
According to the report, approximately 77 percent of the losses, or $906 million, stemmed from compromised suppliers, developer tools, unimplemented security patches, and infrastructure components that were outside the scope of standard smart contract audits.
The four largest incidents accounted for approximately 80 percent of the total losses. The report estimated the cost of the Bitget attack at $387 million, the Liquid Network incident at $320 million, and the impact of the Tectonic attack at approximately $120 million. Losses related to the Coldcard firmware vulnerability were estimated at around $115 million.
While smart contract attacks may not rank first in terms of monetary value, they are the most frequent type of attack in terms of the number of incidents. A total of 71 smart contract incidents resulted in losses of approximately $228 million. Of the 107 recorded incidents, 98 resulted in losses below $10 million, with a median loss of $670,000.
Of the $1.18 billion that went missing, approximately $387 million was later recovered or reversed. In the Liquid Network incident, individuals identifying themselves as white-hat traders returned $272 million. In the Tectonic case, approximately $111.2 million worth of transactions were reversed when Cronos validators retrieved the blockchain history.
Platform operators also covered $410 million of user losses from their own resources. Despite this, approximately $384 million remains unrecovered or uncompensated by the companies.
*This is not investment advice.
