Web3 Security Weekly Data Report — August 31–September 6, 2026
This report computes the week's indicators from the thirteen publicly reported events in the matching news review. Because the Liquid Network event was substantially reversed on-chain, every total is shown on both a gross and a net basis — the definitions are in the method note.
Roughly $331.6M gross across 13 publicly reported events — dominated by the Liquid Network's 3,998.5 unbacked L-BTC (~$320M). After ~3,400 BTC (~$272M) were returned post-patch, the net figure is ~$59.6M, still up ~76% from the prior week's ~$33.8M.
- Gross losses~$331.6M13 events, incl. Liquid at $320M
- Net losses~$59.6Mafter ~$272M returned
- Week-over-week+76%net basis vs ~$33.8M
- Largest event$320MLiquid Network, Sep 6
The Week in Numbers
| Indicator | Gross | Net (after returns) |
|---|---|---|
| Weekly losses | ~$331.6M | ~$59.6M |
| Largest event | $320M (Liquid) | ~$47.9M (598.5 BTC retained) |
| Top-3 concentration | ~98% | ~93% (Liquid net + Injective + Aquifer) |
| Events | 13 | 13 (12 loss events + 1 enforcement freeze) |
| Week-over-week | +881% vs ~$33.8M | +76% vs ~$33.8M |
Where the Losses Sat (net basis)
| Failure vector | Net loss | Share | Events |
|---|---|---|---|
| Bitcoin-sidechain bridge (cache collision) | ~$47.9M | 80% | 1 (Liquid) |
| Exchange / protocol modules | ~$10.9M | 18% | 6 (Injective, Aquifer, Notional, Radix, Ankr, Balancer) |
| Wallet key generation | ~$0.45M | 1% | 1 (XRPH, 4,011 wallets) |
| Small protocol tail | ~$0.23M | <1% | 4 (Secured Finance, Dream Health, Float, RedSonic) |
| Enforcement (not a loss) | $2.39M frozen | — | 1 (Tether blacklist, Sep 2) |
What the Numbers Say
Three observations. First, basis discipline is the whole report this week: the gross figure (~$331.6M) makes this the largest week of the year, and the net figure (~$59.6M) makes it the largest week of the site's coverage — both statements are true, and they describe different things. Second, concentration peaked: on a net basis the single Liquid event is 80% of the week, and the top three carry ~93% — the most top-heavy week recorded here. Third, the protocol tail (~$11.6M excluding Liquid) is itself a heavy week by recent standards, led by two accounting-trust failures in chain-level code (Injective's identifier collision) and application escrows (Notional) — the trusted-component pattern that also produced the Liquid cache collision.
Month Context
August closed at ~$255.4M across 46 incidents (DefiLlama, via Quantstamp). September's first calendar week (September 1–7) was independently tallied at ~$322M by The Crypto Times' consolidated review — dominated by the same Liquid event. September's remaining weeks will decide whether the month becomes the year's largest; this week's protocol tail alone (~$11.6M) runs below August's weekly average.
Method Note
Gross basis: the value minted or extracted at incident prices (L-BTC at ~$80K/BTC). Net basis: gross minus funds returned on-chain (~3,400 BTC ≈ $272M to the federation peg wallet). Figures are point-in-time estimates from the sources named in the matching news review; BTC-denominated amounts move with price. Event counts and all share arithmetic are computed exactly from the shared list.
Sources
- SlowMist, Liquid Network incident analysis (September 11).
- CoinDesk and The Block, Liquid Network coverage.
- BlockSec weekly incident report, week of 2026/08/31.
- CryptoSlate / xrpl.to, XRPH Wallet incident.
- DefiLlama hacks database.
- The Crypto Times, 'Crypto Hacks Cross $322M in September's First Week' (calendar-week cross-check).
- USDT blacklist daily tracking, September 2.
This article is for general information only. It describes publicly reported security incidents; dollar figures are point-in-time estimates drawn from the sources listed above and may be revised as investigations continue. Nothing here is financial, legal or investment advice.
Frequently Asked Questions
Which numbers are estimates?
All dollar figures — including the BTC valuations, which depend on the ~$80K incident-time price. The event count (13), category splits and concentration arithmetic are computed exactly from the shared incident list.
What do 'gross' and 'net' mean here?
Gross: value minted or extracted at incident prices, before any return. Net: gross minus on-chain returns — for this week, the ~3,400 BTC (~$272M) the Liquid attacker sent back to the federation peg wallet after the patch.
Is the Tether freeze counted as a loss?
No. The $2.39M freeze is enforcement — recoverable in principle and tracked separately, consistent with this site's standing convention.
Why does this report show two week-over-week figures?
Because the prior week's comparison only makes sense on a stated basis. On gross terms the week is up ~881% (one enormous event); on net terms, ~76%. The net basis is the more meaningful trend indicator; the gross basis is the more accurate exposure picture.
Strengthening your defenses? See how transaction fees and energy costs scale on Tron at Tronsell.io.