$766M Stolen in September Alone: The Two Hacks That Just Broke Crypto's Worst Record
Crypto lost $766.49 million to hacks in September 2026, a 462% surge from August's $136.3 million and the single worst month of the year, according to PeckShield data.
Two incidents did almost all the damage. Bitget was hit for approximately $387 million, making it the largest individual exchange theft of 2026. Liquid Network followed with roughly $320 million in losses, though the actors behind that exploit have made claims that muddy the story further. Together, those two incidents account for over 92% of September's total losses.
Let that number land for a second. Two exploits. One month. Nearly three quarters of a billion dollars.
This Isn't a Blip, It's a Pattern
September's numbers don't exist in isolation. The crypto security landscape has been deteriorating steadily throughout 2026, with sophisticated attackers increasingly targeting centralized exchanges and infrastructure-layer protocols rather than smaller DeFi pools. Bitget is a top-tier global exchange. Liquid Network is established infrastructure. These are not obscure protocols with unaudited contracts.
When attackers go after names like these and win, it signals something important: the attack surface is widening faster than the industry's defenses are improving.
The 462% month-over-month jump is jarring, but the more important signal is structural. August's $136.3 million was not a quiet month by historical standards. September didn't spike from zero, it spiked from an already elevated baseline.
What the Liquid Network Situation Adds
The Liquid Network hack carries an additional layer of complexity. The individuals behind the exploit have reportedly made claims about the nature of the theft, which could point to an inside job, a coordinated social engineering attack, or a jurisdictional gray area that complicates recovery efforts. None of those scenarios are good for confidence in custodied assets.
Until more details emerge, treat Liquid Network's $320 million as potentially unrecoverable. Treat Bitget's $387 million the same way until the exchange provides verified recovery data.
What Crypto Holders Should Actually Do
This is not the moment to panic-sell, but it is absolutely the moment to audit where your assets sit. If you hold meaningful value on any centralized exchange, September is your reminder that proof of reserves and brand reputation are not the same as security.
Watch for official post-mortems from both Bitget and Liquid Network over the next two to four weeks. The technical details of how these exploits worked will tell you which other platforms share the same vulnerabilities.
Cold storage isn't exciting. Right now, it's the trade.