Hacken Reports $1.18 Billion Lost to Crypto Exploits in Q3 2026

AI disclosure: drafted by Basis Desk's AI newsroom and machine-checked against the primary sources listed below — how we use AI. Originally published on Basis Desk.

Total losses climbed 55% from the prior quarter across 107 security incidents, driven by a surge in smart contract attacks.

Key points

• Crypto exploits resulted in $1.18B stolen across 107 incidents in Q3 2026, a 55% increase over Q2.
• Smart contract exploits drove 48% of all losses, up from 12% in Q2, while access control failures accounted for 40%.
• Regulators issued $450,000 in fines to CASPs worldwide and increasingly targeted senior executives with personal liability.

Digital asset breaches cost protocols and users $1.18 billion between July and September 2026, marking a 55% surge compared to the second quarter, according to a security and compliance report published by Hacken on Oct. 15 [1]. The cybersecurity firm cataloged 107 distinct security incidents during the three-month period [1].

Smart contract flaws accounted for 48% of total value stolen, up sharply from 12% in the previous quarter [1]. Meanwhile, operational breakdowns and access control compromises dropped to 40% of quarterly losses, down from 88% in the second quarter [1]. Despite the percentage shift, Hacken noted that the largest individual losses stemmed from private key compromises, infrastructure failures in withdrawal and signer systems, and software supply chain attacks [1].

Supervisory Pressures Mount

The report highlighted recurring vulnerability patterns reappearing across separate codebases and languages, while several high-profile exploits materialized shortly after public security patches were released [1]. Hacken also observed shifts in regulatory enforcement, noting that global regulators have begun scrutinizing operational resilience on an ongoing basis rather than relying on point-in-time security audits [1]. Global supervisors levied $450,000 in penalties against crypto-asset service providers during the quarter, with authorities increasingly directing personal liability toward founders and executive management following security failures [1].

Sources

1. Hacken Q3 2026 Security and Compliance Report — Primary document (discovered)

Basis Desk is a source-verified crypto newsroom. Market data, a free MCP server for AI agents and JSON APIs: basisdesk.news/developers. Not investment advice.