Crypto hack losses hit $766.5 million in September, the highest this year

September was a nasty month for crypto security teams: PeckShield counted 55 major incidents with $766.5 million stolen, while CertiK recorded 97 attacks and put total losses at $768.4 million. For PSPs, exchanges, and other high-risk crypto operators, the point is not the headline number itself but the concentration risk: two incidents accounted for most of the damage.

1. PeckShield said 55 major incidents took place in September, with attackers stealing $766.5 million. CertiK separately tracked 97 attacks and estimated total losses at $768.4 million, and both firms said losses jumped sharply from August.
2. The biggest share of the month’s losses came from two cases: the attack on crypto exchange Bitget, which saw about $388 million stolen, and the Liquid Network protocol breach, which accounted for another roughly $320 million.
3. Liquid said it recovered about $270 million connected to the hack. That recovery matters for operators because it shows how much of the final loss can still depend on post-incident containment, not just the initial exploit.
4. Other notable incidents cited by analysts included Safe Wallet, DCENT and Duelbits, with losses of $7.8 million, $6 million and $5.9 million respectively. CertiK said September showed how quickly the threat level can change for crypto services.
5. Earlier, PeckShield also reported hacks of Fetch.ai and NuNet, two crypto projects tied to artificial intelligence technologies, with an unknown attacker moving about $2.01 million in assets.