September 2026 has officially been recorded as the worst month for cryptocurrency hacks in 2026, with total stolen funds reaching over $768 million. The record-setting figure was driven almost entirely by two major security failures: a $388 million breach of the Bitget exchange and a $320 million exploit targeting the Liquid Network. Although approximately $270 million was eventually returned by the Liquid Network attacker, the initial outflow of assets represents a significant vulnerability in current blockchain infrastructure.
The Bitget breach targeted the exchange’s hot wallets, leading to an immediate freeze of certain withdrawal services as the platform scrambled to contain the damage. The Liquid Network exploit, meanwhile, highlighted risks inherent in sidechain protocols and wrapped assets. While the return of the majority of Liquid’s stolen funds mitigated the long-term impact for that specific project, the event underscores a persistent trend of high-value targets being successfully compromised by sophisticated bad actors.
From a regulatory perspective, these massive losses are likely to accelerate the U.S. government's push for more stringent custodial requirements. Organizations like the SEC and CFTC often cite these types of security failures when advocating for tighter oversight of centralized exchanges. For U.S.-based investors, this could mean an increase in mandatory insurance disclosures and stricter compliance audits for platforms operating within the country to prevent retail loss during such catastrophic events.
Market sentiment has turned cautious following these disclosures, as the $768 million total reflects a growing sophistication in exploit techniques. While the recovery of $270 million is a positive sign for the Liquid Network community, the Bitget loss remains a heavy burden on the market. Investors should watch for official security post-mortems from both entities to determine if these were isolated software bugs or part of a larger coordinated campaign against exchange infrastructure.