Crypto Security Firm Says US$1.18 Billion Was Stolen in Third Quarter

Crypto security has become a mix of exchange, protocol, and supply-chain risk, and Hacken’s third-quarter tally puts that pressure in one place. The list of incidents includes Bitget, Liquid Network, Tectonic, and Coldcard, which are all different parts of the crypto stack and show how broad the attack surface is. For builders and operators, the relevant issue is not only code review but also the software and vendors connected to a system.

Blockaid’s report points to a practical limit in onchain enforcement: investigators can track some stolen assets, but that does not automatically give them a way to stop movement. For users and protocols, that means recovery tools and tracing alone do not solve the problem once funds are sitting in wallets that cannot be frozen. Exchanges, custodians, and wallet providers will keep facing pressure to build faster response processes and stronger controls around compromised assets.

The tension here is between crypto’s open, transferable design and the security model that market participants now expect from large-scale financial infrastructure. Hacken’s concentration of losses in a few major incidents shows how one failure can dominate the quarter, while Blockaid’s numbers show that visible funds can still remain out of reach. That leaves the industry balancing transparency, speed, and control without a single mechanism that closes the gap.

Still open is how much of the stolen crypto in Blockaid’s January-to-August sample will ever be recovered, and which parts of the third-quarter losses Hacken counted can be traced back to supplier issues, developer tools, or unpatched components. The next detail that would settle this is whether later incident updates, recoveries, or freezes change the totals for the named exploits. Until then, the two reports only establish the scale of loss and the limits of current response tools.

The move was larger before the first headline than after. That is an observation, not an explanation: the market also moves on things nobody publishes.