Cryptocurrency Exchanges Lost Hundreds of Millions of Dollars in 2026. Which Ones to Choose for Peace of Mind?

The digital currency market has been struggling with one of the biggest problems in the industry for years. Although exchanges are offering increasingly better security, attacks continue to occur. Even the most advanced platforms are not completely immune to hacker attacks. While cryptocurrencies have lost the widespread interest they enjoyed before the crash in 2025 in recent months, this year has brought several high-profile incidents. In two cases, losses exceeded several hundred million dollars. In this text, we will look at the causes of these breaches and whether there is an exchange that offers 100% security.

Grinex Lost $15 Million. We Still Don’t Know Everything

One of the first high-profile attacks on a cryptocurrency exchange in 2026 was the incident involving Grinex. The attack occurred in mid-April. According to TRM Labs, $15 million was withdrawn from wallets associated with the exchange. Interestingly, the platform initially indicated losses exceeding 1 billion rubles (about $13-14 million). After the attack, Grinex suspended its operations and reported the case to law enforcement.

The course of the attack on this exchange was particularly interesting. According to TRM Labs' analysis, the stolen funds in USDT were quickly converted to TRX and then consolidated at one address on the Tron network. This action complicated the freezing of assets by the stablecoin issuer. To this day, there is no confirmation that even a portion of the stolen tokens has been recovered.

It was also not possible to definitively identify the perpetrator. Grinex stated that the attack was carried out by the services of "hostile states." However, TRM Labs did not confirm this information.

Drift Protocol Lost Nearly $300 Million

The attack on Drift Protocol, which occurred on April 1, was significantly larger. It is worth noting that this platform is not a typical centralized CEX exchange. It is a decentralized exchange for trading perpetual contracts on Solana. However, it is one of the largest security incidents on exchanges this year.

Initially, losses were estimated at around $285 million. The final report from Drift showed that the stolen assets were worth $295.7 million. The attack did not involve a simple exploitation of a smart contract bug. Hackers prepared the operation for a long time and then used the durable nonce mechanism and signatures from members of the Security Council to take over administrative rights. After gaining access and control, they added a fake token as collateral and used it to withdraw real tokens.

Drift did not recover the entire stolen amount. However, the platform created a compensation plan for affected users. It included the establishment of a financial recovery pool from future revenues and support from partners. Tether, which donated $127.5 million, was among those who offered help.

In this case, investigators established much more information about the perpetrators. An independent investigation by Mandiant, a cybersecurity firm, revealed that the attack was carried out by the group UNC6862, which is associated with hackers from North Korea.

Bitget with Losses Exceeding $350 Million

The most recent and simultaneously the largest of the described incidents is the attack on Bitget on September 24. On that day, the exchange's security systems detected unauthorized transfers from some hot wallets. According to the official statement from the exchange, the estimated scale of the loss is $351.6 million.

The attack affected part of the hot and warm wallet infrastructure. As for cold wallets, Bitget assured that they remain secure. The exchange temporarily suspended withdrawals. However, the platform still allowed deposits and trading. At the same time, the exchange reassured that the losses fall within the limit of the Bitget User Protection Fund, which amounts to $464 million.

At this stage, it is not yet clear how hackers gained access to the exchange's wallets. Bitget reported that it is conducting an investigation and does not want to speculate on this matter until the analysis is complete. The first leads point towards North Korea, but there is still no certainty in this regard. The company has already reported the incident to law enforcement and entities that analyze blockchains. Recovering the funds will be difficult, as some tokens, mainly stablecoins, were converted into others, blocking the possibility of freezing them.

Which Cryptocurrency Exchange Can Guarantee Security?

All the described cases show an important thing. The risk of a serious attack concerns not only small and lesser-known platforms. Each of the discussed cases had a different course and cause, but they share one element -- any infrastructure that stores digital assets can become the target of a successful attack.

This does not mean that using exchanges is inherently dangerous. In practice, it is worth remembering to store your cryptocurrencies elsewhere for the long term and to use exchanges mainly for buying, selling, or exchanging tokens. The decision to keep funds on an exchange carries increased risk.

The history of the industry shows that even the most recognizable exchanges can fall victim to hacker attacks. When choosing an exchange, it is worth checking the number of available cryptocurrencies, the level of fees, but also the model of fund storage, security measures, and the history of incidents. It is also worth looking into the response procedures and how the platform secures users in the event of an attack.