Skip to content
$1.18 Billion Stolen in Q3 Crypto Hacks Due to Audit Gaps

$1.18 Billion Stolen in Q3 Crypto Hacks Due to Audit Gaps

First seen 18 Oct 2026, 21:07 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 18, 2026 at 21:07 UTC
  • •Hacken reported $1.18 billion stolen in Q3 2026 due to audit deficiencies.
  • •The Bitget attack was the largest, resulting in a loss of $352 million.
  • •Over $700 million in assets are at risk due to poor key management practices.

Hacken's report revealed that $1.18 billion was stolen across 107 crypto attacks in Q3 2026, a 55% increase from the previous quarter. The majority of losses, totaling $906.8 million, were linked to compromised vendor tools, uninstalled security patches, and components excluded from audits. Hacken's co-founder, Andrii Matiukhin, emphasized that audits often miss critical parts of systems, leading to vulnerabilities. The largest incident was the Bitget attack in September, where $352 million was stolen through a third-party security vulnerability. Hacken also noted that over $700 million in assets at two platforms relied on inadequate key management setups. The report calls for continuous monitoring and prompt application of security patches, rather than relying solely on past audits.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-09-01
Bitget attack occurs
Hackers exploited a vulnerability in a third-party security product, stealing at least $352 million.
Cryptonews
2026-10-18
Hacken releases Q3 report
The report details $1.18 billion stolen in crypto hacks during Q3 2026, highlighting audit gaps.
Koinbulteni

More articles in this cluster (2)

Following this threat?

Track AFX Trade in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Common questions

What were the main causes of the losses?
The losses were primarily due to compromised vendor tools, uninstalled security patches, and components not included in audits.
How can companies improve their security?
Companies should continuously monitor for vulnerabilities and apply security patches promptly, rather than relying on outdated audits.
What was the impact of the Bitget attack?
The Bitget attack resulted in a loss of at least $352 million, highlighting vulnerabilities in third-party security products.