Crypto Hackers Target Supply Chains, Sending Q3 Losses to $1.2 Billion

Supply Chain Compromise: The New Frontier of Crypto Theft

In the third quarter of 2024, a series of cyberattacks on cryptocurrency exchanges and infrastructure providers resulted in a total loss of about $1.2 billion. The majority of the damage stemmed from compromised suppliers and untested developer tools, according to an analysis by security firm Hacken.

Hacken’s report examined 107 incidents reported between July and September. Roughly 80 % of the total loss—nearly $960 million—was concentrated in just four major breaches. The remaining 98 incidents, each costing less than $10 million, brought the median loss to $670,000.

Several high‑profile exchanges, including Bitget and Liquid, fell victim to attacks that exploited third‑party vendors. In many cases, attackers gained access through software components that had never undergone a formal security audit.

How Do These Attacks Compare to Previous Quarters?

The compromised tools were then used to siphon funds from user wallets and exchange reserves.

„We are seeing a shift from direct wallet hacks to attacks that leverage the supply chain,” said a cybersecurity analyst at Hacken. „When a developer tool or infrastructure component is compromised, the attacker can move laterally and target multiple exchanges simultaneously.”

In addition to supplier breaches, infrastructure failures—such as misconfigured servers and weak authentication—played a significant role. These vulnerabilities allowed attackers to bypass multi‑factor authentication and gain administrative privileges, accelerating the theft of millions of dollars.

While Q2 2024 recorded over $800 million in losses, the jump to $1.2 billion in Q3 marks a 50 % increase.

What Steps Are Exchanges Taking to Mitigate Future Risks?

The escalation is largely attributed to the growing sophistication of attackers and the increased reliance on third‑party software in the crypto ecosystem.

„The median loss of $670,000 is a clear indicator that even smaller exchanges are not immune,” noted the analyst. „When a single breach can cost a mid‑size platform a quarter of its annual revenue, the industry must reassess its security posture.”

In response, several exchanges have announced comprehensive security overhauls.

Consequence and Outlook

Measures include mandatory third‑party audits for all vendor software, implementation of zero‑trust network architectures, and stricter access controls for critical infrastructure.

Some platforms are also investing in real‑time threat intelligence and automated incident response systems. „We’re moving from reactive to proactive security,” said a spokesperson for one exchange that suffered a $200 million loss in July. „Our new framework will flag anomalous activity before funds are moved.”

The surge in supply‑chain attacks underscores the fragility of the crypto industry’s trust model. Regulators are now calling for mandatory security standards, while investors are demanding greater transparency on risk management practices.

If current trends continue, the sector could face further losses exceeding $1 billion annually unless systemic changes are adopted.

Frequently Asked Questions

Q1: Which exchanges were most affected in Q3? Bitget and Liquid were hit by the largest breaches, accounting for the majority of the $1.2 billion in losses.

Q2: Why are supplier compromises so damaging? Compromised vendors provide software or infrastructure that many exchanges rely on. A single breach can expose multiple platforms simultaneously.

Q3: What can smaller exchanges do to protect themselves? Implementing regular security audits, adopting zero‑trust architectures, and enforcing strict access controls can reduce the risk of future attacks.