Hacken Reports $1.18 Billion Lost to Crypto Exploits in Q3 2026

Digital asset breaches cost protocols and users $1.18 billion between July and September 2026, marking a 55% surge compared to the second quarter, according to a security and compliance report published by Hacken on Oct. 15 ¹. The cybersecurity firm cataloged 107 distinct security incidents during the three-month period ¹.

Smart contract flaws accounted for 48% of total value stolen, up sharply from 12% in the previous quarter ¹. Meanwhile, operational breakdowns and access control compromises dropped to 40% of quarterly losses, down from 88% in the second quarter ¹. Despite the percentage shift, Hacken noted that the largest individual losses stemmed from private key compromises, infrastructure failures in withdrawal and signer systems, and software supply chain attacks ¹.

Supervisory Pressures Mount

The report highlighted recurring vulnerability patterns reappearing across separate codebases and languages, while several high-profile exploits materialized shortly after public security patches were released ¹. Hacken also observed shifts in regulatory enforcement, noting that global regulators have begun scrutinizing operational resilience on an ongoing basis rather than relying on point-in-time security audits ¹. Global supervisors levied $450,000 in penalties against crypto-asset service providers during the quarter, with authorities increasingly directing personal liability toward founders and executive management following security failures ¹.