Bitget lost about $387.5 million to forged withdrawals from its wallet system, more than half of September's $742 million in crypto thefts. Most of Liquid Network's loss was handed back, so what stayed stolen sits mainly with one exchange's withdrawal infrastructure.
Reality
- Evidence58
- Adoption
- Insufficient
- Hype gap+8
- Incentives
- Insufficient
- Confidence55
Security firms traced about 1,783 wstETH, worth more than $6 million, out of a Base vault on Oct. 4 whose owner is an anonymous 3-of-7 Safe. With Base and Aave's core contracts not blamed, the loss lands on a custody setup whose seven signers no one has publicly identified.
Reality
- Evidence58
- Adoption
- Insufficient
- Hype gap+5
- Incentives
- Insufficient
- Confidence52
Bitget says attackers may have used a flaw in a third-party security product to get internal credentials and forge $388 million of withdrawals. The account puts vendor software that can reach a withdrawal system inside an exchange's counterparty risk, alongside its own wallet controls.
Publishers:bitget.com · cointelegraph.com Reality
- Evidence50
- Adoption
- Insufficient
- Hype gap+15
- Incentives60
- Confidence50
Crypto hacks drained $766.49 million in September, a 2026 monthly record, and $387.5 million came from one breach of Bitget's hot wallets. After the money returned from the Liquid Network exploit, that one exchange accounts for about 80% of what stayed stolen.
Reality
- Evidence45
- Adoption
- Insufficient
- Hype gap+10
- Incentives
- Insufficient
- Confidence50
678,000 DGFiP records are being marketed with names, addresses and income figures together. France logged 33 of CertiK's 52 verified physical coercion attacks on crypto holders in H1 2026.
Reality
- Evidence58
- Adoption
- Insufficient
- Hype gap+25
- Incentives40
- Confidence60
The wallets held. The customer list did not: 39,798 names, phone numbers and shipping addresses, taken through commerce plumbing nobody threat-models.
Perspective Coverage
3 publishers
- Builder
- Builder 28%
- Operator
- Operator 55%
- Investor
- Investor 17%
Reality
- Evidence68
- Adoption
- Insufficient
- Hype gap+10
- Incentives55
- Confidence70
No seed phrases were touched. What was taken is names, phone numbers and shipping addresses for people known to own a hardware wallet, now advertised on a crime forum.
Perspective Coverage
8 publishers
- Builder
- Builder 21%
- Operator
- Operator 70%
- Investor
- Investor 9%
Reality
- Evidence62
- Adoption
- Insufficient
- Hype gap+10
- Incentives55
- Confidence68
Brevo says an intruder reached 120 customer accounts and used them to mail phishing from those customers' own domains. Three crypto companies confirmed their newsletter lists were hit. Only one named the provider.
Perspective Coverage
4 publishers
- Builder
- Builder 15%
- Operator
- Operator 69%
- Investor
- Investor 16%
Reality
- Evidence68
- Adoption
- Insufficient
- Hype gap−20
- Incentives40
- Confidence70
The group calling itself iamnotavillain wants 6,000 Monero within 24 hours and Revolut says no demand has reached it. The data went out through a government email account the bank was obliged to answer.
Perspective Coverage
3 publishers
- Builder
- Builder 22%
- Operator
- Operator 51%
- Investor
- Investor 27%
Reality
- Evidence55
- Adoption
- Insufficient
- Hype gap+10
- Incentives60
- Confidence55
Japan, the US, Australia and Germany put eight months of North Korea's developer-targeting campaign at $10.71 million taken from more than 7,000 wallets. CertiK counted $2.06 billion of North Korea-linked crypto theft in 2025 alone.
Reality
- Evidence72
- Adoption70
- Hype gap+8
- Incentives45
- Confidence62
Four hooded men entered a house near Lens at 4 a.m. on Sunday and left more than three hours later with 40,000 euros in crypto taken from a salaried IT worker. Bethune prosecutors are treating it as organized extortion.
Reality
- Evidence68
- Adoption61
- Hype gap+12
- Incentives38
- Confidence66
Four security firms classified the $3.5 million Nostra Finance loss as oracle price manipulation. The remedies the write-up lists are listing-policy parameters: a borrow cap below free float, an isolation flag, a deviation bound.
Reality
- Evidence52
- Adoption42
- Hype gap+15
- Incentives55
- Confidence45
Chainalysis says writes of malware instructions to public blockchains have climbed from about 2.06 a day to 11.1 since July 2025, with groups tied to North Korea and Iran behind most of the increase. Its research lead could not confirm AI models helped.
Reality
- Evidence42
- Adoption48
- Hype gap+30
- Incentives68
- Confidence40
The National Bank of the Kyrgyz Republic signed a memorandum with CertiK covering assessments, AML advice, monitoring tools and staff training. About three months remain on the bank's own deadline to finish initial platform testing.
Reality
- Evidence34
- Adoption22
- Hype gap+31
- Incentives63
- Confidence41
Payward's Bitnomial filing answers the market-structure question the CFTC already knows how to answer. The open item is the screening of a permissionless order book, and no answer to that question exists yet.
Reality
- Evidence40
- Adoption45
- Hype gap+45
- Incentives72
- Confidence45
Estimates of the loss run from $4M to $9M against the $72.77M locked in Moonwell, and the remedy was a borrow cap set to 1 wei, which is the tell that this was an underwriting choice rather than a bug.
Reality
- Evidence55
- Adoption52
- Hype gap+15
- Incentives58
- Confidence44
CertiK puts Maya Protocol's direct loss at $1.7 million. A developer tracking the incident puts total impact near $11 million. The gap is the part audit tooling cannot see.
Reality
- Evidence52
- Adoption44
- Hype gap+18
- Incentives63
- Confidence45
An attacker seeded with 2 ETH from Tornado Cash took full voting control of four USDC vaults and 91% of a meta vault, then voted the money out. The contracts held.
Reality
- Evidence34
- Adoption28
- Hype gap+14
- Incentives58
- Confidence33
Six bugs, none fatal alone, drained Maya Protocol and took CACAO down about 89 percent. THORChain lived through the same chained-logic pattern in May.
Reality
- Evidence55
- Adoption48
- Hype gap+18
- Incentives62
- Confidence46