Cryptonews $1.18 Billion Stolen in Q3 Crypto Hacks Due to Audit Gaps
Article Content
- •Hacken reported $1.18 billion stolen in Q3 2026 due to audit deficiencies.
- •The Bitget attack was the largest, resulting in a loss of $352 million.
- •Over $700 million in assets are at risk due to poor key management practices.
Hacken's report revealed that $1.18 billion was stolen across 107 crypto attacks in Q3 2026, a 55% increase from the previous quarter. The majority of losses, totaling $906.8 million, were linked to compromised vendor tools, uninstalled security patches, and components excluded from audits. Hacken's co-founder, Andrii Matiukhin, emphasized that audits often miss critical parts of systems, leading to vulnerabilities. The largest incident was the Bitget attack in September, where $352 million was stolen through a third-party security vulnerability. Hacken also noted that over $700 million in assets at two platforms relied on inadequate key management setups. The report calls for continuous monitoring and prompt application of security patches, rather than relying solely on past audits.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track AFX Trade in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What were the main causes of the losses?
How can companies improve their security?
What was the impact of the Bitget attack?
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…
Silent Lynx Targets CIS Governments via WinRAR Exploit The threat actor Silent Lynx has launched a series of attacks against government organizations in the Commonwealth of Independent States (CIS) from June 2025 to August 2026. These attacks exploit a vulnerability in WinRAR (CVE-2025-8088) to deploy reverse shells, including FoalShell and PickleShell, facilitating…