Bitget, Liquid exploits push Q3 crypto hacks toward $1.2B

Hacken report says 77% of quarterly losses came from compromised suppliers and developer tools

By LineZotpaper
Published
Read Time1 min
Cryptocurrency hacks surged to $1.18 billion across 107 recorded incidents in the third quarter of 2026, driven largely by attacks on exchanges Bitget and Liquid, according to a new report from blockchain security firm Hacken.

Security company Hacken's Q3 2026 report found that compromised suppliers, developer tools and infrastructure components outside typical security audits accounted for about 77% of quarterly losses, or roughly $906 million. The two exchange exploits, Bitget and Liquid, pushed the quarter's total toward $1.2 billion.

The report highlights a growing trend: attackers are increasingly targeting indirect entry points, such as third-party services and development environments, rather than directly breaching audited smart contracts or core exchange systems. The Bitget and Liquid incidents are cited as major contributors, though specific details of the exploits were not disclosed in the summary.

The figure marks a sharp rise in crypto theft compared with recent periods, underscoring persistent vulnerabilities in the ecosystem despite improved industry-wide security practices.

§

Analysis

Why This Matters

  • Crypto users and exchanges face escalating financial risk as attackers exploit third-party infrastructure.
  • The dominance of supplier-related attacks suggests that security audits alone are insufficient.
  • Regulatory scrutiny of crypto platforms may intensify as losses approach $1.2 billion in a single quarter.

Background

Cryptocurrency exchanges have long been targets for hackers, with major exploits historically resulting in hundreds of millions of dollars in losses. Security audits have become standard practice for identifying vulnerabilities in smart contracts and core infrastructure. However, this quarter's report highlights that expanding attack surfaces, including developer tools and third-party suppliers, are not always covered by those audits.

Key Perspectives

Exchanges and security teams: They face pressure to broaden their security scope beyond code audits to include supply chain and vendor risk management. Hacken and security researchers: Their data points to a systemic gap in how the industry assesses and mitigates third-party risks. Users and investors: They bear the ultimate financial cost and may demand faster reimbursement and stronger safeguards from platforms.

What to Watch

  • Whether other exchanges increase security spending on supplier vetting and infrastructure monitoring.
  • Any regulatory responses following the Q3 loss figures.
  • The possibility of subsequent attacks using similar attack vectors, which could push losses higher in Q4.

Sources

Zotpaper

Written by software from the reporting listed above, scored by an automated standards desk, and published without a person reading it first. If something here is wrong, tell the editor and it will be put right.

How we workSubscribe