Quarterly Loss Scale Disclosed
A quarterly security report shows that crypto industry losses from hacker attacks reached $1.18 billion in the third quarter of 2026. The figure has once again made the quarter's crypto security landscape a key focus for the industry, and indicates that with on-chain applications, trading platforms, and network infrastructure continuing to operate, attackers are still seeking high-value targets. The report also disclosed that developer tools have become the main attack entry point. This means the attack surface is extending from isolated smart contract vulnerabilities to infrastructure closer to development, deployment, and operations. For crypto projects that rely on code, scripts, APIs, automated processes, and third-party components, the security perimeter no longer exists only in on-chain contracts, but also in the everyday development toolchain.
Attack Entry Point Shifts to Developer Tools
The report's listing of developer tools as the main attack entry point is one of the most noteworthy trends in this disclosure. Developer tools typically connect code repositories, deployment environments, key management, node services, continuous integration processes, and permission systems. Once exploited, attackers may gain broader access than through a simple contract vulnerability. Compared with attacks targeting end users, intrusions against developer tools are often more covert, and their scope of impact may cover multiple projects, multiple contracts, or multiple on-chain addresses. The report's judgment that they are the 'main attack entry point' indicates that attackers are concentrating resources on links that can affect projects at scale. For the industry, this is not only a security issue for a single platform, but also involves systemic risks such as open-source dependencies, supply chains, outsourced development, internal permissions, and operations processes.
Large-Scale Incidents Involve Multiple Platforms
The materials show that major losses this quarter involved large incidents at Bitget, Liquid Network, and others. Although the report does not disclose the full details of every incident one by one in the summary, including these incidents in the quarterly loss statistics shows that trading platforms and on-chain infrastructure remain key targets for attackers. Bitget and Liquid Network are respectively in areas related to centralized trading services and network infrastructure. Their appearance in the same quarterly security report reflects that risk is not limited to a single type of project. For users and institutions, platform security is no longer a single question of 'whether it has been attacked,' but a comprehensive capability covering asset custody, network components, developer tools, permission management, and emergency response.
Industry Warning Value Rises
The quarterly loss scale of $1.18 billion and the emergence of developer tools as the main attack entry point constitute a direct warning to the crypto industry. In the past, the market focused more on smart contract audits and on-chain vulnerabilities, but the trend disclosed in this report shows that tools, processes, and infrastructure outside the code can also become breach points. For project teams, security investment needs to expand from contract audits to development environments, key management, dependency libraries, access control, and continuous monitoring. For exchanges, custodians, and infrastructure teams, supply chain security and internal permission management need to be incorporated into daily risk control. For investors and users, the information provided by the report can be used to assess the security transparency of platforms and projects, but it should not be understood as a basis for judging any specific asset.
Impact on Project Teams' Security Strategies
Based on the information disclosed in this report, developer tools becoming the main attack entry point means project teams need to re-examine the coverage of their security strategies. Traditional security audits often focus on smart contract code itself, but if an attack occurs in developer tools, deployment processes, or permission systems, contract audits alone may not cover all risks. Project teams need to pay attention to issues such as access permissions for developer tools, sources of third-party components, isolation of deployment environments, and monitoring of abnormal operations. Since the report has already listed developer tools as the main entry point, relevant teams need to make corresponding adjustments in security budgets, staffing, and emergency processes. Such adjustments not only affect a single project, but may also change the direction of the entire industry's investment in security infrastructure.
Implications for Users and Institutions
For users and institutions, this quarter's loss data and changes in attack entry points provide a new dimension for observing risk. The emergence of large-scale incidents at trading platforms and network infrastructure shows that asset custody and underlying network components remain key links in the security chain. When choosing services, users can pay attention to whether platforms disclose security incidents, risk control measures, and emergency response mechanisms; when evaluating trading and custody counterparties, institutions also need to include developer tool security and supply chain management in due diligence. It should be emphasized that the report discloses industry-level loss scale and attack trends, and cannot directly infer the future security performance of any specific platform.
Follow-Up Areas to Watch
Going forward, it is necessary to watch whether subsequent quarterly security reports disclose more attack methods, the scope of affected projects, and loss recovery. Whether the trend of developer tools as the main attack entry point continues will be an important clue for observing changes in the crypto security landscape. The follow-up handling, asset tracing, and risk control adjustments for large incidents such as Bitget and Liquid Network are also worth continued tracking. Overall, this report presents both the scale of crypto hacker losses in the third quarter of 2026 and changes in attack entry points, providing the industry with a clear risk signal: the crypto security defense line is extending from on-chain contracts to the development toolchain and infrastructure layer.