Centralized Custody Risks Surge as September Security Losses Hit $766 Million Led by Bitget Breach
September crypto losses jumped fourfold to over seven hundred sixty-six million dollars, marked by massive breaches at Bitget and Liquid Network. While white-hat recoveries muted total net damage, heavy reliance on third-party security vendors exposes critical vulnerabilities in centralized exchange infrastructure. Expect tighter withdrawal procedures and elevated risk-off capital rotation into primary cold storage venues.
September marked a major reality check for exchange security as total illicit capital drains reached 766 million dollars across 55 separate incidents. The fourfold surge from August was overwhelmingly driven by two single events accounting for 92 percent of total compromised funds.
Bitget suffered the year's largest centralized exchange hit at 387 million dollars, stemming from an unpatched third-party vendor flaw that laid dormant for weeks before fund exfiltration. Meanwhile, Liquid Network saw 320 million dollars compromised, though white-hat actors subsequently returned 3,400 Bitcoin to contain the net damage.
This concentration of losses underscores how third-party infrastructure dependencies create systemic tail risk for centralized venues and market makers. When core security components fail, institutional confidence erodes quickly, threatening depth and spreading risk-off sentiment across secondary trading venues.