A list has been circulating on social media claiming that more than 40 major companies and crypto projects were hacked in just 30 days. Here it is as shared:
-
Nov 2: GitBook
-
Nov 2: Mercado Bitcoin
-
Nov 2: TradeXYZZ
-
Nov 1: Triggerdev
-
Oct 31: Flap
-
Oct 31: Kintsu
-
Oct 31: Pickle Finance
-
Oct 31: Origami Finance
-
Oct 31: Echelon
-
Oct 31: FluxBeam
-
Oct 31: StonkFun
-
Oct 31: StakePoint
-
Oct 31: SupSwap
-
Oct 31: Longbow
-
Oct 31: Shprd Finance
-
Oct 31: APEX
-
Oct 30: Chainalysis
-
Oct 30: Northflank
-
Oct 29: Binance
-
Oct 29: Polymarket
-
Oct 28: CommandCode
-
Oct 28: zkLink Nova
-
Oct 27: Fence Finance
-
Oct 22: Predictfun
-
Oct 24: X100
-
Oct 23: Warp
-
Oct 23: Initia
-
Oct 20 to 22: Railway
-
Oct 21: LiteLLM
-
Oct 21: CoinDCX
-
Oct 17: Qubic
-
Oct 16 to 17: OpenCode
-
Oct 15: Lightning AI
-
Oct 14 to 15: Zeabur
-
Oct 13: Gamdom
-
Oct 10: Papertrade
-
Oct 9: Ledger
-
Oct 9: Andromeda
-
Oct 7: 79th Vault
-
Oct 6: Fireworks AI
The list gives no loss figures, so the numbers below come from security firms that track hacks.
PeckShield counted 56 major attacks on the crypto industry in October, with losses of $6.48 billion, up roughly 745% from $766 million in September. Around $6.3 billion of that came from the Binance theft, and about $3 billion of the stolen assets were frozen. PeckShield puts cumulative losses for 2026 at about $8.6 billion as of October 31, with the ten largest incidents making up 92.3% of that total.
Another tracker gives different figures. CertiK reported $6.5 billion in October exploit and phishing losses and a record $9.2 billion for the year, but its dashboard shows $3.03 billion frozen or returned in October, which cuts the month's adjusted losses to $3.47 billion. Counts differ between trackers because each defines incidents and recoveries differently.
Binance dominates the totals, but other cases on the list have their own details. Brazil's Mercado Bitcoin confirmed a security incident and suspended deposits and withdrawals on November 2, and Hypernative flagged more than $40 million in suspicious transfers linked to the exchange. Arkham data put the figure at about $46.3 million. The exchange itself has not confirmed the reported losses. Tether froze more than 4.5 million USDT tied to the attack. Mercado Bitcoin says customers will not bear the loss, and withdrawals remained frozen with no restart date.
At Polymarket, a third-party breach drained about $2.73 million from 737 accounts through 985 withdrawals in roughly an hour. The platform switched its international exchange to cancel-only mode and promised full reimbursement.
Chainalysis is also on the list. It confirmed on October 30 that customers' names, email addresses and job titles were exposed. It said it found no evidence that credentials, session tokens or investigation content were accessed, and stated that the incident was unrelated to the Binance theft. The company said an outside actor got into its systems earlier in October using what it called "offensive agentic techniques."
That phrase points to a question security people are asking. Ethereum researcher Justin Drake urged the industry on October 8 to go into "bunker mode" over AI threats, and the year has already seen double the number of crypto hacks recorded in 2025. The evidence for a direct link is thin so far. One review of October's data noted that AI tools helped find some flaws, but its sources do not establish AI as the cause of the month's rise in attacks or losses.