DeFi and CEX hacks cost $766M

TLDR

Recent data shows crypto hacks on DeFi protocols and centralized exchanges reached about 766 million dollars in September 2026, making it the worst month of the year.

1. Security firms PeckShield and CertiK both estimate roughly 766 to 768 million dollars in losses in September, across 55 to 99 incidents, with DeFi and CEX targets included.
2. Two incidents, the Bitget exchange breach and the Liquid Network exploit, accounted for about 92% of the gross losses, though a large chunk of Liquids funds was later returned.
3. Year to date, crypto has lost around 2.7 billion dollars to hacks, amplifying reputational and regulatory pressure even as ETF inflows and prices rise.

Deep Dive

1. What The 766M Figure Means

PeckShield reported crypto hack losses of 766.49 million dollars in September, up about 462% from Augusts 136.3 million and the highest monthly total of 2026 so far. That tally covers 55 major exploits and thefts, spanning centralized exchanges, DeFi protocols and wallets, and is echoed by CertiKs similar estimate of around 768 million dollars across 97 incidents with a slightly broader methodology.

These are gross values of assets that were stolen or temporarily controlled by attackers, not necessarily permanent losses. Some funds were frozen or later returned, so net damage to users and platforms is lower than the headline number but still very large.

2. Biggest Incidents And Concentration

Losses were highly concentrated. Bitgets hot-wallet breach was estimated at roughly 387 to 388 million dollars, while the Liquid Network exploit was valued near 319 to 320 million dollars, together representing about 707 million dollars, or roughly 92% of Septembers total. In Liquids case, the attacker later returned around 3,400 BTC, meaning a significant portion of that sidechains affected value was recovered.

Smaller but notable incidents included exploits against Safe Wallet, DCENT and Duelbits, each in the mid single-digit million range, plus new DeFi hits such as the roughly 3.8 million dollar NEAR Intents exploit. This mix shows that both exchange custody infrastructure and complex cross-chain DeFi systems remain attractive attack surfaces.

3. Impact On Crypto Users And Next Steps

CertiK estimates that security incidents have caused about 2.68 to 2.7 billion dollars in gross losses so far in 2026, with a few large breaches accounting for a big share. Analysts warn that the reputational impact can exceed the direct financial loss, reinforcing the view that crypto infrastructure is operationally fragile and encouraging regulators and institutional allocators to demand higher safeguards and risk premiums.

At the same time, most large traditional investors are accessing Bitcoin and Ethereum through regulated ETF wrappers and avoiding DeFi, which partly isolates core market prices from DeFi hack headlines. For retail and on-chain users, however, repeated exploits highlight the importance of diversified custody, careful venue selection, and attention to audit and security disclosures rather than yield alone.

Conclusion

Septembers 766 million dollar in hack-related losses shows how quickly crypto security risk can spike when a few large exchange and infrastructure breaches occur. The ongoing pattern of concentrated but severe incidents suggests that robust custody design, third-party security controls, and transparent recovery plans are becoming central to how users and regulators judge crypto platforms, even in a rising market.