Bitget and Liquid Network hit by massive crypto thefts

September 2026 marked a record month for cryptocurrency security breaches, with total losses exceeding $766 million. Two major incidents accounted for approximately 92% of the month's total damages.

Bitget suffered a $387.5 million theft following the exploitation of a third-party security product zero-day vulnerability. Attackers used high-level internal credentials to issue fraudulent withdrawal commands across 11 different blockchains. Chainalysis has attributed the Bitget hack to threat actors linked to North Korea.

Liquid Network, a Bitcoin-based infrastructure, lost approximately $318.7 million due to a code vulnerability. While the theft involved a significant portion of the system's holdings, reports indicate that a substantial amount of the funds has been recovered or frozen.

Security firms CertiK and PeckShield noted that these massive, concentrated attacks have significantly driven up the industry's annual loss profile. Total crypto security losses for 2026 have reached approximately $2.7 billion, with North Korean-linked thefts surpassing $1 billion this year.