क्रिप्टो हैकर्स ने 2026 में $2.7 बिलियन चुरा लिए हैं और नुकसान चिंताजनक रूप से केंद्रित है

Cryptocurrency platforms and users have suffered nearly $2.7 billion in losses from security breaches so far this year, with thefts linked to North Korea surpassing the $1 billion mark.

According to blockchain security firm CertiK, 658 security incidents were logged through September. Approximately $420.4 million of those stolen funds have since been frozen or recovered, bringing adjusted losses down to roughly $2.26 billion, with the average incident resulting in a $4.1 million loss.

The overall yearly totals shifted dramatically in September. Monthly losses reached about $766.5 million—outstripping April’s $651.3 million—to become the most expensive month of 2026. This massive spike was driven primarily by a $387.5 million breach at Bitget and a $318.7 million incident involving the Liquid Network, which together accounted for over $700 million in damages.

This surge means the year’s total is increasingly driven by a handful of massive attacks. It also elevates the threat of state-sponsored actors, following an assessment from blockchain analytics firm Elliptic revealing that suspected North Korean hackers have stolen more than $1 billion in digital assets over the course of the year.

Mega-hacks are reshaping the annual toll

The events of September placed Bitget and the Liquid Network at the peak of CertiK’s incident rankings for 2026, widening the disparity between major exploits and hundreds of smaller-scale attacks.

Bitget accounts for roughly 14.4% of total losses tracked by CertiK for the year. The Liquid Network takes second place, followed by KelpDAO at $291.3 million, Drift Protocol at $285.3 million, and an anonymous victim who lost $284.8 million.

Combined, these five security incidents account for approximately $1.57 billion—nearly 59% of the $2.68 billion documented throughout the year.

Because of this high concentration, a single security failure at a major exchange, decentralized protocol, or infrastructure provider can heavily impact the industry’s entire yearly loss metrics. To put this in perspective, the Bitget and Liquid Network breaches combined accounted for roughly $706 million, representing more than 25% of all gross security losses tracked by CertiK in 2026.

September’s data highlights this imbalance further, as the month’s remaining incidents contributed only a fraction of the overall $766.5 million total outside of the two major attacks.

A portion of these stolen funds has since been recovered. CertiK notes that $420.4 million in assets have been frozen or returned this year, lowering adjusted losses to $2.26 billion. The Liquid Network recovered a significant portion of its stolen funds, and other exploits have experienced partial or complete asset returns as well.

Consequently, the gap between gross and adjusted losses continues to expand as exchanges, token issuers, security agencies, and blockchain operators act faster to track down and lock restricted funds.

Even so, this recovery capability does not erase the immediate operational impact on impacted businesses. Major breaches often require firms to halt operations, reimburse user balances, rebuild damaged infrastructure, and inject new capital well before any stolen assets make their way back.

Additionally, these attacks are diversifying across various sectors of the crypto ecosystem. CertiK’s yearly figures indicate that incidents involving multiple blockchains resulted in the largest monetary damages, while Ethereum experienced the highest frequency of security events.

The security threat has also spilled over into the physical world. CertiK tracked 52 physical extortion or “wrench attacks” during the first half of 2026, up from 39 during the corresponding period last year. Financial exposure tied to these physical attacks surged from $10.5 million to $124.2 million, while the average stolen amount grew from approximately $270,000 to about $2.4 million.

North Korea’s crypto theft machine crosses $1 billion in 2026

The rising scale of individual breaches has magnified the influence of one of the digital asset sector’s most persistent threat actors.

Elliptic reported that the Bitget exploit pushed the total value of attacks attributed to North Korea past $1 billion for 2026, spanning more than 51 suspected incidents. The analytics firm concluded that the Bitget security breach was highly likely tied to the Democratic People’s Republic of Korea, pointing to specific money-laundering patterns, infrastructure shared with prior operations, and other technical markers.

When evaluated against CertiK’s industry-wide gross loss figure of $2.68 billion, Elliptic’s North Korean theft metric amounts to more than 37% of all security losses logged this year.

Previously, Elliptic tied the roughly $286 million Drift Protocol exploit to North Korean state-backed agents. Because Drift also ranks among CertiK’s five largest incidents of the year, suspected DPRK operations are tied to multiple major crypto heists in 2026.

This concentration of attacks builds upon a broader campaign that has yielded billions of dollars for North Korea over the past decade.

Elliptic estimated last year that hackers linked to the DPRK have stolen over $6 billion in cryptocurrency since 2017. International governments and organizations assert that these illicit funds help finance the nation’s nuclear weapons and ballistic missile initiatives.

North Korean cyber units initially gained notoriety by targeting conventional banks and traditional financial networks before shifting their focus to the cryptocurrency sector, where large sums of liquid assets can cross international borders without relying on standard banking channels.

In 2019, the U.S. Treasury Department sanctioned the Lazarus Group alongside associated entities, defining them as state-sponsored hacking units directed by North Korea’s Reconnaissance General Bureau.

Since then, U.S. authorities have linked several of the largest historical cryptocurrency breaches to the country. Officials tied the Lazarus Group to the roughly $620 million Ronin Bridge exploit in 2022 and noted the use of crypto mixers to launder proceeds from the $100 million Atomic Wallet attack, among other incidents.

This escalation reached a peak in February 2025, when bad actors stole approximately $1.46 billion from Bybit, marking the largest documented crypto theft in history. The FBI formally blamed North Korea for the breach, while Elliptic traced the subsequent transfer of funds across thousands of digital addresses, cross-chain protocols, and laundering platforms.

These laundering methodologies have grown increasingly sophisticated as exchanges, stablecoin issuers, and blockchain analytics firms enhance their tracking and freezing capabilities. Elliptic notes that North Korean operators now routinely rely on repeated cross-chain transfers, mixing services, and less-monitored blockchain networks to obfuscate transaction histories.

Ultimately, these dynamics position North Korea as one of the most unpredictable risk factors facing the cryptocurrency industry’s security landscape in 2026.

?अक्सर पूछे जाने वाले प्रश्न

01How much money has been lost to crypto hacks in 2026?

Crypto firms and users have lost nearly $2.7 billion to security incidents this year, according to data through September.

02What are adjusted losses versus gross losses?

Gross losses reflect total funds stolen during security events, while adjusted losses account for assets that have been successfully frozen or returned by security firms and operators.

03How much have North Korea-linked hackers stolen?

Blockchain analytics firm Elliptic reports that suspected North Korean hackers have stolen over $1 billion in crypto throughout 2026.

04What are physical “wrench attacks”?

Wrench attacks refer to physical threats or violence directed at individuals to force them to hand over their cryptocurrency keys or assets.