Security Damage in Cryptocurrency Reaches Approximately 200 Billion Yen in Three Months—1.5 Times Compared to Previous Period = CertiK

The total amount of security damage in the cryptocurrency (virtual currency) industry that occurred from July to September 2026 reached approximately $1.27 billion (about 199.9 billion yen, based on an exchange rate of 1 dollar = 157.4 yen). This was revealed by the security company CertiK in its "Security Dashboard." The updated tally as of October 2 showed an increase of 54.4% from the $819.4 million (approximately 129 billion yen) reported from April to June.

There were 249 security incidents, a 13.7% increase from the 219 incidents in the previous quarter. Both the number of incidents and the amount of damage increased, with the growth in damage significantly outpacing the increase in incidents.

The damage was concentrated in the last month of the quarter. According to CertiK's tally, the total damage in September amounted to $772.4 million (approximately 121.6 billion yen). Compared to the total amount reported for the quarter, about 60% of the damage from July to September occurred in September.

<The total damage from July to September 2026 was approximately $1.27 billion (about 199.9 billion yen). This represents a 54.4% increase from the previous quarter｜CertiK>

In September, the damage categorized as "Exploit," which exploits vulnerabilities in systems and other areas, amounted to $739.5 million (approximately 116.4 billion yen). This accounted for 95.7% of the total damage in September, with 61 incidents, the highest number recorded.

The largest incident in terms of damage in September was the case involving the cryptocurrency exchange Bitget. CertiK reported the damage amount to be $387.5 million. This incident alone accounted for about 30% of the total damage from July to September.

On September 25, Bitget revised the amount of funds lost due to hacking to approximately $387.5 million. This adjustment was made to include assets that were not part of the initial tally, and it was explained that no new unauthorized transfers had occurred.

According to Bitget's explanation, the attackers may have exploited vulnerabilities in third-party security products to obtain internal authentication information. It is believed that they used this information to send false withdrawal instructions and transfer assets from wallets. The company has fixed the vulnerabilities that caused the incident and continues to track and recover the funds.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.