Crypto Lost $1.26 Billion to Hacks in Q3 Even as Bitcoin Posted Its Best Quarter Since 2024

Bitcoin closed the third quarter up 40%, outperforming every major asset class even as Treasury yields climbed to their highest levels in more than two decades. The same quarter also produced $1.26 billion in losses from hacks and exploits, underscoring a persistent security problem running alongside the market’s rally.

A Record Rally Alongside a Record Month for Hacks

Investors poured billions of dollars into exchange-traded funds tied to Bitcoin and other tokens during the quarter, and several altcoins rallied even harder than Bitcoin itself, leading some analysts to describe a new bull run as underway.

Crypto suffered 247 separate security incidents during the third quarter, with total losses of $1.26 billion, according to data tracked by security firm CertiK. Losses for the year to date stand at $2.68 billion. September alone was the worst month of the year, with 99 incidents, the most since February 2025, and $768.5 million stolen, the largest monthly total of 2026.

Losses Remain Small Next to ETF Inflows, but Reputational Risk Lingers

Nicolai Sondergaard, senior research analyst at Nansen, said the dollar value of hack losses remains far smaller than the capital flowing into crypto through ETFs, but argued the damage to the industry’s image can outweigh the direct financial losses.

“The reputational damage can still be larger than the losses themselves.”

Sondergaard said repeated exploits reinforce a perception that crypto infrastructure remains operationally fragile, a dynamic he said can slow institutional adoption, draw additional scrutiny from regulators and custodians, and push allocators to demand a higher risk premium for crypto exposure. 

He added that most institutional investors are currently accessing crypto through regulated, familiar products like ETFs rather than directly through DeFi protocols, which has so far limited how much hack-related losses affect broader institutional sentiment.

CertiK, in a post on X, said September’s figures reflect how quickly the threat landscape can shift.

“September was a stark reminder of how quickly the threat landscape can shift.”

Insurance Coverage Is Shrinking Relative to the Risk

The pool of available crypto insurance has not kept pace with the scale of losses. CoinGecko’s State of Crypto Security Report 2026, released at the end of August, put total on-chain crypto insurance coverage capacity at $130.2 million, down 20.2% from $163 million a year earlier. 

That leaves a widening gap between the money protected by formal insurance products and the hundreds of millions lost to hacks each month.

AI Tools Add a New Dimension to the Threat

Oliver Carding, head of marketing at Tesseract Group, said in emailed comments that AI tools are increasingly being used to search for vulnerabilities in smart contracts, a process that previously required a skilled engineer’s manual review and could take months.

“My longer-term concern is speed.”

Carding said that acceleration shortens the window defenders have to identify and fix a flaw before it can be exploited. 

Separately, security researchers have flagged prompt injection, in which hidden instructions embedded in data trick an AI agent into acting against its user’s interests. Among the more likely ways AI-related exploits could manifest as autonomous agents take on more active roles in crypto applications.

A Technical Signal Worth Watching: Ether’s Ratio to Bitcoin

Beyond the hack data, the ether-to-bitcoin price ratio has shown signs of losing momentum after a steep climb through July and August. Repeated failures to hold above the 0.033 level, followed by sideways trading, have broken the ratio’s prior upward trendline. 

A decisive move below the Ichimoku cloud, a technical indicator used to gauge trend direction, would point toward a renewed downtrend for ether relative to Bitcoin, a pattern technicians will be watching closely in the coming sessions.