The crypto industry suffered $1.18 billion in losses across 107 security incidents in the third quarter of 2026, a 55% increase from the previous quarter, according to blockchain security firm Hacken. About $906.8 million resulted from compromised suppliers or developer tools, publicly available fixes that were not installed, or components excluded from the latest security review. The largest incident was the attack on Bitget, which caused at least $352 million in losses after hackers exploited a vulnerability in a third-party security product to access withdrawal infrastructure. Hacken co-founder and board director Andrii Matiukhin said projects often audit only selected smart contracts, leaving wallets, signing systems and third-party software outside the review. The report also identified weaknesses in key-management arrangements at derivatives exchanges and prediction markets, including setups in which more than $700 million in assets at two major venues depended on three of four signatures or on unidentified administrative-key holders. Other incidents included a $93 million loss linked to an unauthorized hardware implant in a Ledger device sold by CryptoBilis, more than $35 million lost across three bridges and cross-chain protocols during a six-hour July exploit, and attacks affecting Liquid Network, Tectonic and Coldcard wallet software.