September 2026 was the worst month of the year for crypto theft, and it was not close. Immunefi reported that about $742 million was lost across 33 hacked entities, enough for the month alone to account for roughly a third of all money stolen in hacks so far in 2026.

About $270 million was later returned by an attacker. Twenty-four DeFi protocols were hit.

Bitget and Liquid Network together made up about 95 percent of the month’s losses, and DefiLlama ranked September the fifth-worst month for crypto hacks in the last decade.Other trackers put the damage slightly higher.

PeckShield counted 55 major incidents and $766.5 million stolen, a jump of roughly 462 percent from August’s $136.3 million.

CertiK recorded closer to 97…