The $2.35 billion in net crypto losses recorded throughout 2026 was largely fueled by high-profile exploits at Bitget and the Liquid Network. Despite the widespread adoption of hardware wallets, centralized exchange (CEX) hot wallets and DeFi protocol bugs remained the primary attack vectors for malicious actors. A massive $768 million spike in September alone underscored the fragility of even established platforms when faced with sophisticated wallet drains and critical codebase vulnerabilities.
The September 24 drain of Bitget’s hot and warm wallets served as a major blow to centralized finance (CeFi) security, proving that large-scale liquidity pools remain high-value targets. Simultaneously, the Liquid Network—a prominent Bitcoin sidechain—suffered from a critical bug in its Elements codebase. These two events combined to make September the most damaging month for investors in 2026, significantly outpacing the losses seen in decentralized finance (DeFi) exploits earlier in the year.
For US-based investors and regulators, these statistics highlight an urgent need for more robust custody standards and insurance mandates. The $2.35 billion figure represents the net loss after successful asset freezes and partial returns by security teams, suggesting that the initial gross damage was significantly higher. The market has reacted with caution, as the simultaneous failure of a major global exchange and a specialized Bitcoin layer suggests that the industry's security infrastructure is struggling to keep pace with the scale of institutional adoption.
Moving forward, the industry is closely watching how Bitget and the Liquid Network developers implement their recovery and reimbursement protocols. Investors should monitor for upcoming security patches in the Elements codebase and any new US legislative proposals aimed at tightening the oversight of hot wallet management for exchanges operating within the States. The persistence of these high-value hacks suggests that security remains the largest hurdle for the crypto market's maturation in 2026.