Crypto platforms lost close to $1.2 billion to hacks in the third quarter, with exploits at the exchange Bitget and the Bitcoin layer-2 network Liquid driving the bulk of the damage. The figure, tallied from reported incidents across the quarter, marks one of the heaviest three-month stretches for industry security on record.

The two incidents anchor a quarter in which attackers concentrated on exchange infrastructure and cross-chain settlement layers rather than decentralized-finance lending pools, the category that dominated previous loss cycles. Bitget confirmed a breach of its platform during the quarter. Liquid, the sidechain-based settlement network tied to Bitcoin infrastructure, suffered a separate exploit in the same period.

How large were the individual losses?

The aggregated Q3 total sits near $1.2 billion, according to the quarterly accounting first reported by TradingView on October 1. That places the quarter among the costliest on record for the sector, comparable to the worst stretches of the 2022 exploit wave that felled bridge protocols and lenders.

Bitget and Liquid together account for the largest share of the quarter's losses. The concentration matters for risk modeling: two incidents, not dozens of small ones, produced most of the damage.

What does the loss pattern say about attacker behavior?

The quarter's damage profile shows attackers pivoting back toward centralized venues and settlement infrastructure. For roughly two years, bridge exploits and DeFi protocol bugs generated the industry's largest single losses. Q3 reverses that pattern.

An exchange breach carries different operational consequences than a smart-contract exploit. When a protocol is drained, user deposits at other platforms stay untouched. When an exchange is breached, the operator must absorb the loss, rebuild wallet infrastructure, and restore withdrawal confidence — costs that hit the balance sheet directly rather than spreading across token holders.

The Liquid exploit adds a second layer of concern. Networks that settle value across chains concentrate risk in their validator and signer sets. A breach there can freeze or divert assets that originate on the base chain, extending the blast radius beyond the layer itself.

Why does the $1.2 billion figure matter now?

Loss totals of this size feed directly into policy discussions already underway. Regulators in the United States and the European Union have drafted operational-resilience rules that would require exchanges to hold capital against custody risk and to report major incidents within tight windows.

For exchanges, the quarter raises the cost of insurance. Underwriters price coverage against trailing loss data, and a $1.2 billion quarter will push premiums upward across the market, particularly for platforms holding hot wallets with large balances.

For protocols, the pattern shifts audit budgets. Security firms that specialize in signer-set and bridge infrastructure will likely see demand rise, while standard EVM contract audits face pricing pressure as clients redirect spend toward the failure modes that actually produced losses this quarter.

What comes next?

Industry loss trackers will publish final Q3 figures in the coming weeks, and any upward revision past $1.2 billion would make the quarter the worst on record for the sector. Attention now turns to whether Bitget and Liquid disclose forensic post-mortems — both are standard practice after incidents of this scale — and whether either entity pursues recovery through law enforcement channels, as prior breach victims including the operators of drained bridges have done with mixed results.