Over the past three months, bitcoin climbed 40%. In that same quarter, attackers made off with $1.26 billion in crypto.
Together, those figures sum up the industry as it enters the fourth quarter. New capital is arriving, and so are the thieves.
September was 2026’s worst month
CertiK, a crypto security firm, recorded 247 security incidents during the third quarter, with total losses of $1.26 billion. Losses for the year to date now stand at $2.68 billion.
September caused most of the damage. CertiK logged 99 incidents that month, its highest count since February 2025, and $768.5 million was stolen. No month in 2026 has seen more taken.
CertiK was blunt in a post on X: “September was a stark reminder of how quickly the threat landscape can shift. With both losses and incident count reaching their highest levels of 2026, the month’s data reinforces the need for security across every layer.”
The firm said the figures show how entrenched the problem still is. One month produced more than half of the quarter’s losses, so that claim is hard to argue with.
The rally drowned out the warnings
Bitcoin kept climbing anyway. BTC, recently trading at $86,405.47, ended the third quarter 40% higher and beat every major asset, even though Treasury yields rose to their highest level in more than two decades.
Investors put billions of dollars into exchange-traded funds linked to BTC and other tokens, and several altcoins gained even more. Analysts now believe a new bull run is underway.
Compared with those billions in ETF money, $1.26 billion in hack losses looks modest. Sondergaard said the losses barely register for now against the capital coming in through ETFs. He added that most institutions buy crypto through regulated, familiar wrappers and avoid DeFi protocols entirely.
That is the reassuring view. The less comfortable one is that hacks hurt crypto’s reputation, and inflows don’t cancel that out. Reputational damage is much harder to dismiss than a figure on a balance sheet.
Insurance coverage is falling as risk rises
Insurance won’t fill the gap. CoinGecko’s State of Crypto Security Report 2026, published at the end of August, estimated on-chain crypto insurance coverage capacity at $130.2 million. That is 20.2% less than last year’s $163 million.
The contrast with the loss figures is striking. Total coverage is $130.2 million, while thieves took $768.5 million in September alone. The safety net is still fairly small and keeps shrinking relative to the risks, and the insurance sector as a whole has had trouble keeping up.
AI agents are the next target
A new threat is adding to the existing ones. Security firm Blockaid expects several incidents involving AI agents and sees prompt injection as the most likely method of attack.
In prompt injection, hidden instructions trick an AI agent into working against its own user. Anyone who lets software handle crypto on their behalf should treat this as a real, current risk.
Ether’s gains against bitcoin have stalled
The charts carry a warning too. The ether-bitcoin (ETH/BTC) ratio listed on Binance rose sharply through July and August, but that uptrend has now stalled.
The ratio repeatedly failed to hold momentum above 0.033 and then traded sideways, which broke the bullish trendline.
Traders are now watching the Ichimoku cloud. A decisive break below it would confirm a bearish trend reversal and point to a fresh downtrend for ether against bitcoin.
Where you hold your crypto matters
The bull market may have returned, but so have the people looking to exploit its weak spots.
If your crypto exposure comes through a regulated ETF, you are doing what Sondergaard said most institutions do, and these exploits mostly hit someone else. If you are active in DeFi, keep one comparison in mind: the entire on-chain insurance market covers $130.2 million, and September’s thieves took almost six times that.
CryptoGames.GG