Crypto hack losses dropped 37% in Q3 to $509 million, but September saw a record surge in million-dollar incidents, led by exchange and DeFi exploits.