Crypto Hacks Hit $1.18B in Q3 as Audits Miss Real Risks

Cryptocurrency hacks drained $1.18 billion from investors in the third quarter, according to blockchain security firm Hacken, which warned that widely trusted security audits are giving the industry a dangerously false sense of protection. The report, cited by CoinDesk, marks a stark reminder that even projects that have passed formal code reviews remain vulnerable to sophisticated attacks.

Hacken's findings challenge a common assumption in the crypto space: that a completed audit signals a project is safe. Security audits typically examine a protocol's smart contract code at a single point in time, leaving dynamic risks — such as governance exploits, bridge vulnerabilities, and off-chain attack vectors — largely unexamined. Projects that advertise clean audit records may still carry serious exposure that retail and institutional investors fail to recognize.

Read more Treasury Yields Plunge Sharply as Investors Seek Safe Havens →

The scale of Q3 losses underscores how attackers have grown more capable and systematic. Hackers are no longer limited to targeting obscure or poorly coded projects; established platforms with documented audit histories have also suffered significant breaches. This pattern suggests that the audit process, as currently practiced across much of the industry, is not keeping pace with evolving threat models.

For investors, the implication is that audit badges should be treated as one data point rather than a green light. Hacken's report points toward the need for continuous monitoring, real-time threat detection, and more comprehensive security frameworks that go beyond snapshot code reviews. Regulators and institutional players are increasingly paying attention to these gaps as crypto markets mature.

Continue reading at CoinDesk.