Crypto thefts reached $927 million through Q3 as 2018 closed

A cryptocurrency-security review published on December 29, 2018 described the year as record-breaking for exchange hacks, reflecting a documented surge in theft from centralized trading platforms. The most reproducible contemporaneous estimate came from CipherTrace: $927 million in cryptocurrency had been reported stolen from exchanges and other trading platforms during the nine months ending September 30, 2018.

That figure was already approximately 3.5 times CipherTrace’s $266 million estimate for all of 2017. Expressed as a percentage calculation by Coinburn, the increase was about 248.5%. It established that 2018 had surpassed the preceding year before its fourth quarter was counted, but it was not a final audited total for the twelve months ending December 31.

Two incidents dominated the tally

CipherTrace identified the Coincheck and BitGrail losses as the largest components. It valued tokens stolen from Japan-based Coincheck at approximately $530 million and losses associated with BitGrail at approximately $195 million.

Together, those two estimates equal $725 million, or about 78.2% of CipherTrace’s $927 million nine-month total. That concentration matters: the aggregate represented a historically severe year, but most of its reported dollar value came from two exceptionally large incidents rather than losses distributed evenly among exchanges.

The report also described a developing pattern of smaller attacks in the tens of millions of dollars. It attributed the exposure to vulnerabilities at both exchange and platform layers, including online wallet compromises and social engineering directed at employees. Those were CipherTrace’s classifications based on publicly reported cases, not judicial findings about every incident’s perpetrators or technical cause.

A year-end claim exceeded the verified window

The December 29 review was written by Ledger chief executive Eric Larchevêque as an opinion contribution to CoinDesk. It asserted that exchanges were losing $2.7 million per day during 2018 and that the stolen amount had increased thirteenfold from 2017.

The daily figure annualizes to approximately $985.5 million over 365 days. However, the article did not publish an incident table, valuation method or measurement cutoff supporting either that amount or the thirteenfold comparison. Those claims therefore cannot be reproduced from the article alone.

CipherTrace’s underlying report supported a narrower conclusion: $927 million reported stolen through September 30, 3.5 times the firm’s 2017 estimate. CipherTrace projected that the full-year figure would exceed $1 billion, but on December 29 that remained a forecast rather than a completed twelve-month measurement. Coinburn is not treating the projection as an observed result.

Why centralized custody was the issue

The record did not indicate a failure of Bitcoin’s or Ethereum’s consensus rules. The common exposure was institutional custody: exchanges had to retain sufficient assets in systems available for customer withdrawals, creating concentrated targets for attackers. Compromised wallets, credentials or internal processes could therefore produce losses affecting many customers at once.

Reuters independently reported CipherTrace’s $927 million result on October 10, describing it as theft through hacking of exchanges and trading platforms during the first nine months of 2018. Reuters characterized the increase over 2017 as nearly 250%, consistent with Coinburn’s calculation from CipherTrace’s stated totals.

The defensible December 29 conclusion is consequently limited but substantial. Reported platform-layer cryptocurrency theft had already reached $927 million by September 30 and was dominated by two major incidents. A precise final 2018 total, daily loss rate and incident count required a complete fourth-quarter dataset and consistent rules for valuation, recoveries, disputed losses and previously undisclosed cases.