September crypto hacks reportedly exceeded $768 million
September was the costliest month of 2026 for reported crypto theft, though trackers arrived at slightly different totals. PeckShield counted 55 major incidents and estimated losses of $766.5 million, while CertiK recorded 97 incidents and estimated $768.4 million. Those figures are estimates, not a single confirmed accounting of losses.
Two incidents made up most of the reported damage: a $388 million breach at Bitget and a $320 million exploit involving Liquid Network. More than $270 million connected to the Liquid incident was subsequently returned, reducing its net impact. CertiK also listed losses at Safe Wallet, DCENT and Duelbits of $7.8 million, $6 million and $5.9 million, respectively. Its dashboard showed $2.68 billion in losses across 656 incidents for 2026.
Why it matters: The reported losses underline the scale of security risks, while the returned funds reduced the net impact of the Liquid Network exploit.
Original reporting: Cointelegraph · Links open in a new tab
CFTC seeks to classify event contracts as swaps
The US Commodity Futures Trading Commission has submitted proposals that would bring event contracts within a broader definition of swaps, according to a federal regulatory docket. The submission includes a proposed rule expanding that definition and an interim final rule excluding casino-style gambling products. Both measures were still under review, so they had not established a final regulatory framework.
The agency’s position is that federal law gives it exclusive authority over swaps traded on regulated exchanges, including event contracts offered by Polymarket and Kalshi. State regulators contest that interpretation, particularly for sports-related contracts, and argue that state gambling laws apply. The disagreement leaves unsettled which rules govern these markets. The proposals are part of that ongoing dispute, rather than a final ruling on the status of prediction-market contracts.
Why it matters: The outcome could affect which federal regulator oversees these prediction-market contracts.
Original reporting: Cointelegraph · Links open in a new tab
MetaMask exits Ethereum validators during security investigation
MetaMask says it is investigating a security incident affecting part of its infrastructure, with outside partners and security advisers involved. The company reported finding no immediate threat to its wallets. As a precaution, it has started exiting Ethereum validators connected to its non-custodial staking operations; the nature of the incident has not been disclosed.
Lido separately confirmed that MetaMask Staking had begun the exits, with the remaining validators expected to leave by October 7. Lido developer Will Shannon estimated that exiting, withdrawing and later re-entering could take up to about 45 days, in part because of the entry queue. MetaMask’s website reportedly lists more than $3 billion in staked ETH managed through its infrastructure. That figure describes the scale of the operation, while the company’s statement distinguishes the validator investigation from an immediate wallet threat.
Why it matters: The investigation concerns validator operations, while MetaMask’s statement distinguishes that issue from an immediate wallet threat.
Original reporting: Cointelegraph · Links open in a new tab
Base rolls out Cobalt upgrade
Base’s Cobalt upgrade went live on September 30, marking the network’s third mainnet upgrade. It introduces Validity Transactions, which can stay inactive until specified conditions are met within a set time limit. For example, a swap could become eligible only if a pool reaches a target price before a chosen block. The feature adds conditional behavior to transactions on Base.
Cobalt also adds functions for B20 assets. Composite Policies let allowlists and blocklists be combined using AND/OR logic; Schedule Multiplier Updates support scheduled balance-display changes and align with ERC-8056. The seizeWithMemo function can reassign balances when an administrator has enabled that authority. Base has also outlined later plans, including faster block times, native smart accounts, gas sponsorship, transaction batching and selected Ethereum upgrades. Those are roadmap items, not features launched with Cobalt.
Why it matters: The update expands the transaction and asset functions available on Base.
Original reporting: The Block · Links open in a new tab
Bitcoin’s inflation-driven rise fades as bond yields hold firm
Bitcoin briefly climbed to about $85,500 on Wednesday after US inflation data came in softer than expected, then gave back much of the move. During Thursday’s Asian morning, it traded around $83,700, up roughly 0.4%. August personal consumption expenditures inflation was reported at 3.4% year over year, or 3.0% excluding food and energy.
CoinDesk linked the fading advance to Treasury yields remaining elevated. The 10-year yield was around 5.28%, near Wednesday’s high, while the 30-year yield stood near 5.62% after reaching its highest level since 2002. An LVRG Research analyst said the inflation reading reduced the likelihood of an October Federal Reserve rate increase and made a December move more likely. That was an analyst’s interpretation of the data, not a guaranteed policy outcome; the reported yields and Bitcoin price describe market conditions during the period.
Why it matters: The report points to bond yields as a factor that coincided with the reversal of Bitcoin’s initial move.
Original reporting: CoinDesk · Links open in a new tab