Crypto Losses Hit $1.18B in Q3 Across 107 Security Incidents: Hacken

The concentration of losses in vendor tooling and unpatched, previously known vulnerabilities shifts the story away from exotic protocol exploits and toward basic operational hygiene — the parts of the stack audits typically don't cover. That matters most for exchanges and custodians whose withdrawal infrastructure depends on third-party security products, where a single compromised supplier can cascade. The open question is whether the audit perimeter expands to include vendor and dependency risk, or whether this quarter's concentration proves a one-off.