CryptoSlate
Crypto firms and users have lost nearly $2.7 billion to security incidents in 2026 through September, with North Korea-linked thefts crossing the $1 billion mark on their own, according to blockchain security firm CertiK. The year has been defined less by volume and more by concentration: Bitget's $387.5 million breach and the $318.7 million Liquid Network incident together account for roughly $706 million, or more than a quarter of all gross losses tracked. September was the costliest month on record at $766.5 million, propelled almost entirely by those two attacks. North Korean operators are now blamed for 37% of the industry's annual security bill.
Why it matters
The concentration is the story. CertiK's top five incidents of 2026 (Bitget, Liquid Network, KelpDAO at $291.3 million, Drift Protocol at $285.3 million, and an unidentified victim at $284.8 million) sum to about $1.57 billion, or roughly 59% of the year's gross losses. A single compromise at a major exchange, bridge, or infrastructure provider can now materially swing the industry's annual security tally.
The North Korea thread makes that concentration more dangerous. Elliptic attributes more than $1 billion across 51+ incidents to DPRK-linked actors in 2026, including the Bitget breach and the $286 million Drift Protocol exploit, putting a state-sponsored adversary behind some of the year's biggest individual hauls. DPRK operators have stolen more than $6 billion in crypto since 2017, according to Elliptic, with US authorities tying the group's proceeds to the country's nuclear and ballistic-missile programs.
Market impact
Recovery capacity has improved but not closed the gap. CertiK counts $420.4 million in stolen assets as frozen or returned this year, which trims the adjusted loss figure to roughly $2.26 billion. Liquid Network clawed back a large share of its incident; the bigger structural cost is what operators absorb before any clawback: service suspensions, balance replenishments, infrastructure rebuilds, and capital committed up front.
The threat surface is also broadening.
Frequently asked questions
-
How much have crypto hacks cost in 2026?
CertiK recorded $2.68 billion in gross crypto security losses through September 2026 across 658 incidents, averaging about $4.1 million per event. Roughly $420.4 million has been frozen or returned, leaving adjusted losses near $2.26 billion.
-
Which incidents drove 2026's largest crypto losses?
Bitget's $387.5 million breach was the year's largest, followed by Liquid Network at $318.7 million, KelpDAO at $291.3 million, Drift Protocol at $285.3 million, and an unidentified victim at $284.8 million. Those five sum to about $1.57 billion, or roughly 59% of gross losses tracked.
-
How much has North Korea stolen in crypto this year?
Elliptic attributes more than $1 billion across 51+ incidents to North Korea-linked actors in 2026, including the Bitget breach and the $286 million Drift Protocol exploit. That puts DPRK operators behind roughly 37% of the year's gross industry losses.
-
What is a wrench attack and how common are they?
A wrench attack is a physical coercion or robbery targeting crypto holders. CertiK logged 52 such incidents in the first half of 2026, up from 39 a year earlier, with total exposure climbing to $124.2 million from $10.5 million.
-
What was the largest confirmed crypto theft on record?
The February 2025 Bybit hack, in which attackers stole about $1.46 billion, remains the largest confirmed crypto theft on record. The FBI formally attributed the breach to North Korea and Elliptic tracked proceeds through thousands of addresses and cross-chain laundering services.
CoinDesk
WuBlockchain
Crypto News
TheBlock