What happened

Cointelegraph reports that crypto security losses reached $1.26 billion across 247 incidents in Q3. About $769 million fell in September, and it says Bitget’s $388 million breach pushed the quarter above $1 billion. A CoinDesk headline gives the same $1.26 billion quarterly figure.

CryptoSlate, citing CertiK, reports nearly $2.7 billion lost across 658 incidents through September 2026. It says more than $1 billion involved North Korea-linked thefts, while about $420.4 million was frozen or returned.

Why it matters

The quarterly tally shows the scale of reported losses over a short period. The September and Bitget figures also show how much of that total sits in one month and one breach. The separate year-to-date tally places Q3 within a larger run of incidents.

The frozen-or-returned amount is a useful measure to follow, but it combines two different outcomes. Money frozen is not necessarily money returned. The supplied record gives no breakdown between them.

What to watch

Watch for CertiK’s underlying figures or an updated accounting that separates frozen funds from returned funds and explains the North Korea-linked attribution.

Sources and limits

Upstream references and independent checks

Digest dated 2026-10-02 · upstream model sonnet. Direct links are matched to all 3 upstream source IDs.

  1. 1
    Bitget’s $388M hack pushes Q3 crypto security losses past $1BDirect upstream source · aba16bb0d81cbdda5b5da4d8b335b262d66c1f49
  2. 2
    Crypto lost $1.26 billion in hacks while bitcoin bulls enjoyed a monster quarterDirect upstream source · 941e5ac43a65496dfe642076992bacb65b932ef2
  3. 3
    Crypto hackers have taken $2.7 billion in 2026 and the losses are alarmingly concentratedDirect upstream source · 3196f3134bda4f889167aac589f815788e43a760
Continue reading
  1. 1

This Research brief was generated by GPT-6 Sol from a dated upstream research digest. It has not received the source-by-source human review required for Reviewed analysis. Material limit: The supplied record contains reporting about the totals, not CertiK’s underlying data or methods. CoinDesk corroborates only the Q3 figure in its headline; the year-to-date tally and attribution rest on CryptoSlate’s account.