Oct 1, 2026, 7:30 a.m. EDT
4 min read
This is an excerpt from CoinDesk newsletter ‘Daybook.’ Sign up here, if you haven’t already.
Bitcoin BTC$83,896.70 finished the third quarter with a 40% gain, outperforming every leading asset even as Treasury yields reached their highest point in over twenty years. Participants allocated billions of dollars into exchange-traded funds linked to BTC and alternative tokens, while several altcoins advanced even more aggressively, reinforcing the conviction among market analysts that a fresh bull cycle has begun.
Nevertheless, alongside this upward surge, a persistent blemish on the sector’s reputation continued to expand: security breaches and exploit incidents. The capital drained through these events remains relatively minor compared to the massive inflows entering ETFs, yet the harm inflicted on crypto’s public standing is significantly harder to dismiss.
The digital asset ecosystem endured 247 security breaches over the third quarter, resulting in aggregate losses of $1.26 billion, according to metrics monitored by blockchain security provider CertiK. Total losses for the year to date currently sit at $2.68 billion. September proved to be the most destructive month thus far, recording 99 separate incidents—the highest frequency since February 2025—alongside $768.5 million stolen, marking the largest monthly total of 2026.
“Yes, it is bad optics,” Nicolai Sondergaard, senior research analyst at Nansen, told CoinDesk. “The reputational damage can still be larger than the losses themselves. Repeated exploits reinforce the idea that crypto infrastructure remains operationally fragile, which can slow institutional adoption, increase scrutiny from regulators and custodians, and make allocators demand a higher risk premium.”
At present, these financial losses barely register against the incoming capital driven by ETFs, Sondergaard explained, noting additionally that the majority of institutions acquire exposure via regulated, familiar structures while entirely avoiding decentralized finance protocols.
CertiK stated that these figures underscore how deeply embedded this vulnerability remains.
“September was a stark reminder of how quickly the threat landscape can shift. With both losses and incident count reaching their highest levels of 2026, the month’s data reinforces the need for security across every layer,” it stated on X.
The defensive safety net provided by insurance remains relatively modest and continues to shrink in proportion to rising risks. CoinGecko’s State of Crypto Security Report 2026, published at the close of August, highlighted this trajectory, estimating on-chain cryptocurrency insurance capacity at $130.2 million, representing a 20.2% decline from the $163 million recorded during the previous year.
Broadly speaking, the insurance industry has struggled to keep pace with potential exposures, as CoinDesk pointed out earlier this year.
Parallel to these challenges, artificial intelligence is introducing an entirely new vector of risk.
“My longer-term concern is speed, now AI tools are automating the hunt for weaknesses in smart contracts, work that used to take a skilled engineer months. That shortens the time anyone has to fix a flaw before it is used,” Oliver Carding, Head of Marketing at Tesseract Group, shared via email.
Security platform Blockaid anticipates multiple attacks involving automated AI agents, identifying prompt injection—where covert commands manipulate an AI agent to operate against its owner’s interests—as the most probable vector.
In summary, while the bull market has returned, so have the predatory actors looking to exploit its vulnerabilities.
Exercise caution!
Read more: For analysis of today’s activity in altcoins and derivatives, see Crypto Markets Today . For a comprehensive list of events this week, see CoinDesk’s Crypto Week Ahead.
What’s trending
- MetaMask security incident forces Ethereum staking exits, no funds at risk (CoinDesk): MetaMask is pulling Ethereum staking systems out of service following a security incident, with Lido warning of lost rewards and a security researcher reporting that payments from producing blocks were diverted to another wallet.
- 10-year Treasury yield hits highest level since 2002 as global bond rout gathers pace (CNBC): U.S. Treasury yields hit their highest level in more than two decades on Thursday as a global bond sell-off deepened. The yield on the 30-year Treasury bond jumped 3 basis points to 5.6702%, its highest level since July 2002. The 2-year yield was 2 basis points higher at 4.91%.
- EU questions Binance over continued operations despite wind-down order (FT): EU officials are questioning Binance over its use of a legal exemption to continue serving customers in the region despite an order to wind down its business in the bloc.
- Citigroup raises 12-month bitcoin target to $113,000 as ETF inflows resume (CoinDesk): Citi expects slow but steady inflows into products like ETFs as advisers and brokerages favour gradual increases in bitcoin allocations, forecasting $5 billion of inflow over the next 12 months.
Today’s signal
The chart illustrates daily fluctuations in the Binance-listed ether-bitcoin (ETH/BTC) ratio using a candlestick layout.
Following a robust climb throughout July and August, the upward momentum of the pair has stalled. Successive failures to maintain levels above 0.033, accompanied by range-bound consolidation, have broken the bullish trendline.
This shift places the Ichimoku cloud squarely into focus. A decisive breach beneath the cloud would validate a bearish trend reversal, signaling a renewed downward trajectory for ether relative to bitcoin.
Related Assets
The Definitive Stablecoin Landscape Series: Asia Pacific
The Definitive Stablecoin Landscape Series: Asia Pacific
As stablecoins move into regulated finance, APAC is becoming a key proving ground. This report maps the region’s rules, use cases, and RLUSD’s role.
Sep 15, 2026
As stablecoins move into regulated finance, APAC is becoming a key proving ground. This report maps the region’s rules, use cases, and RLUSD’s role.
Why it matters:
As stablecoins move into regulated finance, APAC is becoming a key proving ground. This report maps the region’s rules, use cases, and RLUSD’s role.
Originally published at https://www.coindesk.com/daybook-us/2026/10/01/crypto-lost-usd1-26-billion-in-hacks-while-bitcoin-bulls-enjoyed-a-monster-quarter.
