BlockBeats roundup states 2026 Publicly disclosed losses from major crypto security incidents this year exceed 2300000000 USD

Article

2026 Annual roundup of crypto theft incidents: total amount involved exceeds 2300000000 USD, with Bitget's losses currently ranking first 351600000 USD BlockBeats news,September 25, as of now, 2026 major security incidents have occurred in the crypto market this year, 86 including Bitget's latest disclosed preliminary loss of approximately 351600000 USD, publicly disclosed losses from major incidents this year exceed 2300000000 USD. These include:

Bitget: approximately 351600000 USD. Hackers breached a key back-end system of its wallet service, forged transfer information, and transferred out dozens of assets across multiple chains; Bitget has suspended withdrawals and stated that its protection fund can cover the related losses.Liquid Network: approximately 319000000 USD. The attacker exploited a vulnerability in the Elements range-proof verification cache to create approximately 4000 unsecured LBTC, then exchanged them through the peg-out mechanism for BTC; subsequently returned 3400 coins BTC, with approximately 602 coins BTC still unreturned.

KelpDAO: approximately 292000000 USD. The attacker compromised LayerZero-related infrastructure and forged cross-chain messages, minting 116,500 rsETH without underlying asset backing, then used it to borrow other real assets.Drift Protocol: approximately 285000000 USD. Through social engineering and pre-signed transactions, the attacker obtained Security Council administrative authority, added tokens with no real value as collateral, and used this to transfer out USDC、SOL and ETH and other assets.

An individual wallet: approximately 282000000 USD. Impersonating cryptocurrency hardware-wallet customer service, the attacker obtained the seed phrase through social engineering, stole 1459 coins BTC and 2050000 coins LTC, and quickly exchanged part of the funds for XMR.

Coldcard wallet vulnerability: approximately 114000000 USD. Some firmware used insufficiently strong randomness when generating seed phrases, allowing attackers to reconstruct private keys offline without accessing the hardware devices and transfer out BTC from the related addresses in bulk.

Original link https://m.theblockbeats.info/flash/368924

Key points

BlockBeats states that, as of September 25，2026, 86 major security incidents have occurred this year.
Including Bitget's preliminary loss of approximately 351600000 USD, publicly disclosed losses from major incidents this year exceed 2300000000 USD。
The Bitget incident involved a breach of the wallet service's key backend system, forged transfer information, and the transfer of assets across multiple chains; Bitget has suspended withdrawals and said that its protection fund can cover the related losses.
Liquid Network The incident involved approximately 4000 unsecured LBTC were created; subsequently, 3400 BTC; approximately 602 BTC remain unrepaid.
The KelpDAO incident involved forged cross-chain messages, the minting of 116,500 rsETH, and the borrowing of other genuine assets.
Drift Protocol The incident involved obtaining control of the Security Council, adding tokens with no real value as collateral, and transferring out USDC、SOL and ETH and other assets.
A personal wallet incident involved 1459 tokens BTC and 2050000 tokens LTC were stolen, with some funds swapped for XMR。
A Coldcard wallet vulnerability involved insufficiently strong randomness used when generating mnemonic phrases in certain firmware versions, allowing attackers to reconstruct private keys offline and transfer assets from the affected addresses.BTC。

AI-assisted interpretation

The following is analysis, separate from reported facts. Verify important claims independently.

This is a summary of 2026 multiple cryptocurrency security incidents during the year. The article lists Bitget's approximately 351600000 USD in preliminary losses as the largest amount among the listed incidents, and notes that other incidents involved back-end system breaches, cross-chain message forgery, privilege acquisition, social engineering, and wallet random number issues.

Why it matters to readers

The report indicates that security incidents may involve trading platforms, cross-chain infrastructure, protocols, hardware wallets, and personal wallets; some incidents also involve withdrawal suspensions, asset transfers, or funds that have not yet been returned.

Beginners should note that seed phrases, private keys, back-end permissions, and cross-chain validation mechanisms can all affect crypto asset security; when a platform suspends withdrawals or discloses preliminary losses, the relevant amounts and resolution outcomes may still change.

Risks and unknowns

Bitget's approximately 351600000 USD as preliminary losses; the final amount has not yet been confirmed by the evidence.
Evidence was not provided 86 an itemized list of the incident or independent verification materials.
Liquid Network There are still approximately 602 tokens BTC that have not yet been returned, and their subsequent status has not been specified.
Whether the Bitget protection fund actually fully covers the relevant losses has not been further verified by the evidence.

BlockBeats roundup states 2026 Publicly disclosed losses from major crypto security incidents this year exceed 2300000000 USD

Article

AI-assisted interpretation

Why it matters to readers

Risks and unknowns

Related Developments

Related concepts

Keep following

Security Center