By Tom Whitfield

Cryptocurrency hacks and exploits in the third quarter neared the $1.2 billion mark, with breaches at the exchange Bitget and the platform Liquid accounting for the largest share of stolen funds, according to a report aggregated by Menafn.

The quarterly figure places Q3 among the costliest stretches on record for the industry's security track record. Two named incidents — one at Bitget, one at Liquid — drove the total, rather than a long tail of smaller protocol exploits.

How much was stolen in Q3?

The aggregated reporting puts total losses from crypto hacks in the third quarter at close to $1.2 billion. The Bitget and Liquid breaches served as the primary contributors. That concentration matters for risk teams: a quarter dominated by two exchange-level events points to failures in centralized custody and access control, not to a broad wave of smart-contract bugs across DeFi protocols.

For exchanges, the operational consequences are immediate. Hacks of this scale typically trigger withdrawal pauses, wallet-migration programs, proof-of-reserve disclosures and, in some jurisdictions, mandatory incident reporting to financial regulators. Customers face delays; treasury teams face reconciliation and reimbursement decisions.

What does the concentration of losses mean?

When two breaches account for most of a quarter's losses, insurers and underwriters of digital-asset custody take note. Premiums for exchange coverage have historically repriced upward after large single-entity incidents, and capacity can tighten for operators with weaker key-management attestations.

The pattern also shifts audit priorities. Exchange-side incidents — involving hot wallets, signing infrastructure or privileged access — demand a different control stack than on-chain exploits: hardware security modules, multi-party computation, withdrawal whitelisting and time-delayed transfers.

Why does the $1.2 billion figure matter?

Quarterly loss totals feed directly into regulatory risk assessments. Agencies including the U.S. Securities and Exchange Commission, the Commodity Futures Trading Commission and the Treasury's Financial Crimes Enforcement Network have cited aggregate hack statistics when justifying stricter custody rules and cybersecurity guidance for platform operators.

A quarter approaching $1.2 billion strengthens the case for pending custody-technology standards and may accelerate timelines for formal incident-reporting requirements that several jurisdictions have proposed but not yet finalized.

Market-structure consequences follow. Repeated large exchange breaches tend to push institutional volume toward venues with published security attestations and regulated custody arrangements, concentrating liquidity among operators that can demonstrate operational resilience.

What comes next?

Expect the Q3 figure to surface in upcoming regulatory consultations on exchange cybersecurity standards. Operators that cannot evidence hardened key management before the next reporting cycle will face the sharpest scrutiny from both insurers and supervisors.