Security company Hacken's Q3 2026 report found that compromised suppliers, developer tools and infrastructure components outside typical security audits accounted for about 77% of quarterly losses, or roughly $906 million. The two exchange exploits, Bitget and Liquid, pushed the quarter's total toward $1.2 billion.
The report highlights a growing trend: attackers are increasingly targeting indirect entry points, such as third-party services and development environments, rather than directly breaching audited smart contracts or core exchange systems. The Bitget and Liquid incidents are cited as major contributors, though specific details of the exploits were not disclosed in the summary.
The figure marks a sharp rise in crypto theft compared with recent periods, underscoring persistent vulnerabilities in the ecosystem despite improved industry-wide security practices.