Cryptocurrency platforms and exchanges have suffered $2.35 billion in net losses from hacks year-to-date in 2026 after accounting for frozen funds and returns, according to a report by Lightning.news shared with Bitcoin Magazine. The total reflects centralized exchanges and decentralized finance protocols as the primary targets, though hardware wallet supply chain incidents also contributed to the toll.
Security researcher Stacy Muur, who compiled data on breaches affecting the sector, stated that 230 protocols were hacked for more than $50,000 in 2026. “Crypto security is absolutely cooked,” Muur said in an interview.
September Surge and Bitget Drain
September 2026 alone accounted for $768 million in losses, driven largely by the September 24 Bitget incident. The centralized exchange suffered a $387.5 million drain from its hot and warm wallets, marking one of the year’s largest single incidents.
Investigators linked the Bitget attack to North Korea via IP patterns consistent with prior Democratic People’s Republic of Korea-linked VPN use and on-chain overlaps with the Lazarus Group and TraderTraitor wallets, including a 2025 Bybit theft. Attackers exploited third-party security products to inject fraudulent withdrawal commands without accessing Bitget’s private keys.
DeFi Protocol Compromises
Decentralized finance platforms faced targeted attacks across multiple vectors. In April 2026, Drift Protocol suffered a $285 million to $296 million loss following months of social engineering targeting the platform’s governance and multisig mechanisms. Investigators attributed the operation to North Korean actors.
KelpDAO’s rsETH bridge was drained of $292 million after attackers subverted a single-verifier design. LayerZero preliminary indicators pointed to the Lazarus Group, specifically the TraderTraitor wallet.
Tectonic on Cronos lost $120.4 million when validators were manipulated into accepting borrowed collateral at inflated valuations in late August 2026. Tectonic validators later rewound the chain and recovered the majority of losses.
Liquid Network Inflation and Recovery
Blockstream’s Liquid Network, a Bitcoin sidechain, experienced a critical incident in early September 2026 when an Elements software bug caused unintended inflation. Attackers minted 4,000 unbacked L-BTC, equivalent to 4,000 bitcoins worth approximately $320 million at the time of the incident.
White-hat actors negotiated the return of 3,400 BTC via on-chain OP_RETURN messages, while attackers retained 600 BTC. Blockstream confirmed that no Liquid Network federation keys were compromised during the incident.
Hardware Wallet Vulnerabilities
Hardware wallet manufacturers faced supply chain attacks. Ledger suffered losses traced to an unauthorized hardware implant at CryptoBilis, an authorized reseller, that captured recovery phrases during device setup. Ledger stated confirmed cases were limited to the CryptoBilis supply chain, with its own systems and direct sales unaffected. Unconfirmed reports indicated bugged Ledger devices reached German markets.
Coinkite hardware wallets were compromised in a random number generation attack affecting 1,596 to 1,789 units, valued at $100 million to $130 million, with one higher estimate reaching 2,055 BTC.
AI-Assisted Exploitation
Advanced AI models released in February 2026 appear to have accelerated breach activity. GPT-5.3-Codex and Claude Opus 4.6 demonstrated high success rates on smart-contract bug benchmarks at low cost. OpenAI disclosed internal testing cases where agents accessed unauthorized test-network funds or bypassed controls.
Samson Mow characterized the trend as an “avalanche of AI-assisted attacks.” Stacy Muur added, “AI is definitely making it much easier to find and exploit bugs. I think we’re entering a pretty serious cybersecurity arms race.”
The Bitcoin base layer has not been a source of 2026 losses.
