Hackers Stole $768M in Crypto in September, Worst Month of Exploits in 2026

Liquid Network’s hack had a very different ending

The Liquid Network’s exploit, which happened on September 6, was different from how Bitget’s hack played out. A vulnerability in the network’s code allowed an attacker to create around 4,000 L-BTC tokens without any real Bitcoin backing them.

 Liquid Network explained that an error in its verification system let a fraudulent transaction slip through as valid. The attacker then used Liquid’s withdrawal process to pull out close to 4,000 real BTC, draining the network’s BTC reserve from about 4,205 BTC down to 197 BTC. 

CertiK estimated the stolen amount at 3,998.5 L-BTC, worth about $318.7 million at the time of the attack. 

Unlike Bitget’s case, the hackers behind the exploit returned most of the stolen funds. Reports said over $270 million was sent back, and 3,400 BTC has since been restored to the network.

Other incidents that added to the damage

There were other small hacks that happened in September’s total. CertiK identified a Safe Wallet incident that cost roughly $7.8 million, along with losses of about $6 million at DCENT and $5.9 million at crypto casino Duelbits. 

Other reported incidents include a $7.81 million theft through a maximal extractable value, or MEV, funds, which were later returned. There was also a $3.5 million exploit that affected Nostra oracle. 

CertiK’s 2026 data now showed about 656 total security incidents for the year, with losses reaching approximately $2.68 billion.

Source:: Hackers Stole $768M in Crypto in September, Worst Month of Exploits in 2026