The third quarter saw crypto‑related breaches balloon to almost $1.2 billion, driven largely by attacks on exchanges Bitget and Liquid.
Anatomy of the exploits
Both incidents hinged on compromised supplier credentials and unpatched developer tools, bypassing traditional security audits. Hacken’s post‑mortem shows that 77% of the losses stemmed from third‑party components rather than the blockchain itself.
Industry‑wide implications
These hacks underscore a growing blind spot: the ecosystem’s reliance on external services for everything from price feeds to custodial wallets. As DeFi products become more modular, the attack surface expands dramatically.
Investor takeaways
Capital is flowing out of vulnerable platforms, with a noticeable dip in trading volumes on both Bitget and Liquid over the past week. Risk‑adjusted strategies now favor protocols that run their own infrastructure or have robust bug‑bounty programs.
Path forward
Regulators are likely to scrutinize supply‑chain security, while firms scramble to audit third‑party code. The next wave of defenses will probably blend formal verification with real‑time monitoring of supplier health.
